Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier: fI6howixsERqe00AGQgl43+rn7qZSvxWwpDYRzoFoVw=
Subject key identifier: A6:F4:E3:1A:E5:9F:18:24:95:29:E5:80:5A:45:C1:B9:5E:D8:DC:98
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial: 7BB91FA5590158DE131420B8CAE0AB6F747B028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number: 0163
Signing time: Fri 31 Jan 2025 18:05:57 +0000
Manifest this update: Fri 31 Jan 2025 18:00:57 +0000
Manifest next update: Sat 01 Feb 2025 19:43:57 +0000
Files and hashes: 1: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=)
2: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: 2F3f2M3iftyv7EiTkHvKpwsHqihrOdk50XbB4vq7cXc=)
3: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: ILHMVutQqrUF6iiv8nR1xxWWhUx08z770HSNuw90qv4=)
4: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: hwipkGSwtCKNEaVeYs/lVeZpckysHvyHuEt4Oz/IH2U=)
5: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: RTzqt8o4TAjc8klB0g4kFLi8bdldSTJS3//qmy7ZKg0=)
6: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: sYBJGQEADZAQ/LhDv39fbswhI7nUsQH8ZMB5xh3hosI=)
7: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: ZrlItvK4GUW9v/tEHAeY+MLQvIad9obNlZyUUNFrjsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b9:1f:a5:59:01:58:de:13:14:20:b8:ca:e0:ab:6f:74:7b:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Validity
Not Before: Jan 31 18:00:57 2025 GMT
Not After : Feb 1 19:43:57 2025 GMT
Subject: CN=A6F4E31AE59F18249529E5805A45C1B95ED8DC98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:c9:bf:4a:f8:b5:5e:29:ae:29:e2:fd:36:
59:2b:a6:21:65:f9:eb:d5:0c:3a:e5:20:39:17:79:
11:9a:8c:03:e2:1a:32:c8:5c:9e:b6:1d:37:85:5d:
ab:f4:73:80:d8:4f:f1:b1:d4:0c:e3:27:91:59:cf:
26:99:fe:8b:0d:5c:89:9b:1e:09:ea:4b:c2:bb:80:
9b:fd:66:c1:4f:32:e7:8f:f8:cc:73:0c:f6:78:2b:
ca:1d:54:45:cf:e5:ae:ec:22:2a:64:d1:24:5e:79:
ab:d8:b5:cb:c9:bb:be:19:2b:f4:e5:62:7c:8a:0e:
1d:3e:7a:76:27:0c:84:96:0a:3a:59:69:b5:ad:13:
c8:5c:fd:39:3d:6d:52:1e:46:a7:bb:b3:4b:3b:a9:
de:a3:e6:43:ad:4a:93:8b:af:f6:ca:f9:22:46:40:
cc:74:8e:94:61:c5:ae:58:c0:1c:9b:e7:f7:b9:6f:
2a:a4:f2:81:02:70:f1:24:a9:36:8e:a3:30:99:68:
cb:c4:bc:df:d4:ec:f2:a8:1b:b6:f9:49:13:b9:fc:
84:d0:11:fe:f8:8a:45:0a:4c:3f:3c:bf:2c:3b:3e:
4c:a6:3e:33:3f:d8:ae:bb:e0:5e:ab:9a:50:69:8a:
27:66:ba:48:b8:76:36:7b:af:fc:17:7d:99:ed:87:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:E3:1A:E5:9F:18:24:95:29:E5:80:5A:45:C1:B9:5E:D8:DC:98
X509v3 Authority Key Identifier:
keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:aa:18:af:11:cc:09:9c:98:7d:8a:6e:54:ba:0d:18:7d:98:
de:b5:ac:74:6c:f3:a8:f8:2d:07:b1:51:be:78:b6:75:32:f3:
d9:45:83:e4:11:a7:ae:5f:53:53:b1:cd:5e:df:25:73:40:a2:
37:66:41:d9:4d:30:54:92:1f:b4:d9:66:69:12:4b:48:ff:a6:
04:35:d8:07:97:7a:ce:a4:2c:3c:36:f0:42:ef:f6:b4:44:14:
c8:06:3f:af:98:31:ba:c7:ab:af:15:5c:c7:d0:88:65:b9:f1:
9f:c3:28:b9:23:f5:a0:27:06:7a:18:82:76:da:08:91:e3:6a:
74:41:18:d5:a6:05:30:1e:c9:96:6b:0c:5f:35:dd:ea:02:82:
5e:11:14:b9:26:10:2f:b3:51:f0:4e:ad:18:d6:2a:0d:62:fe:
a6:79:54:77:58:a8:78:50:9b:2b:c9:8a:33:75:a2:e9:f5:b6:
cd:4d:d4:ba:00:9e:a9:70:83:ae:5c:df:c4:91:30:77:a4:24:
59:be:6f:7c:c0:e0:f3:5f:05:e3:24:7f:d2:d1:ad:25:bf:68:
d1:67:9f:4a:3d:b9:b5:86:e5:4f:94:87:1a:8b:4c:26:b7:63:
64:3b:d4:0c:aa:4f:81:b1:53:f8:2b:fa:6c:e3:24:88:40:93:
c1:b4:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:36 2025 by rpki-client