Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier: vYD9oIhQTtsq4JqtlTpQrhooNtNlWeVTxOzUnP9Eqww=
Subject key identifier: FF:A6:0A:71:78:A2:9D:48:72:4E:6A:4F:6F:DD:13:5C:54:99:A4:29
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 5E75EDF0E73CF135B6F28B30001A75A6B34B2790
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number: 028F
Signing time: Fri 31 Jan 2025 03:56:01 +0000
Manifest this update: Fri 31 Jan 2025 03:51:01 +0000
Manifest next update: Sat 01 Feb 2025 07:32:01 +0000
Files and hashes: 1: 323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa (hash: jpCL4m4b5cSnTNdPRoZCWkZcs8gb1dSXSE6j140G924=)
2: 323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa (hash: mbxs/KyiiXCzMzovQkdebBf0tfpmu0WoGFLW/0GE3wA=)
3: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
4: 323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa (hash: /wpry2cZumMTubbK3DJtMHlNPLEJ6twYQ8r2q5rnsLg=)
5: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: ECVpcTenNe7tGxvg16pSgIT0C27ECIKx8T2cYYTU+dU=)
6: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: GxalkmsKA3NBmKqpRbD10jaxIIxZkAYcIT4LC7UOrQU=)
7: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=)
8: 323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa (hash: CuuYc8MUpVSK565EQNYdg0n6ncQQoU1CMGYQB2DaFns=)
9: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: mMm7sIXO5/HOrFuCVxMLtUjUW7H7tIPfaYADdGLvndY=)
10: 323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa (hash: IZrxMk6OV/92rpAnPcsFE+Xu3xGUpjdqBdAs//cVWUA=)
11: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: H4rlObELQ4x8lFTYx1O62Ru3wMsX/PzI3uR609UHR+0=)
12: 323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa (hash: DdFqWMe8YjBRE58x7m8buJzeQzhGFoQV6Tdjk/UJm5A=)
13: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:75:ed:f0:e7:3c:f1:35:b6:f2:8b:30:00:1a:75:a6:b3:4b:27:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: Jan 31 03:51:01 2025 GMT
Not After : Feb 1 07:32:01 2025 GMT
Subject: CN=FFA60A7178A29D48724E6A4F6FDD135C5499A429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:e1:c1:a6:63:e6:8d:9f:c7:62:c0:7c:89:
4e:4c:dd:21:83:cc:5f:0e:21:58:62:fb:d3:f5:52:
7b:99:fa:bb:ee:b0:ac:31:d5:6b:c4:84:78:42:c9:
e2:12:e0:02:74:77:21:40:da:6e:c1:9d:53:27:fe:
76:97:cc:36:67:ff:7e:22:65:49:b1:ef:80:e3:47:
35:64:17:c7:56:b1:14:f3:17:61:95:f9:b5:a0:28:
97:a8:23:6a:36:21:e4:73:ea:76:12:b4:54:14:18:
09:28:96:a5:c0:c0:02:f1:dd:c8:d6:b9:32:8a:e7:
49:25:94:72:27:97:f5:55:74:63:aa:cf:e8:0f:22:
5e:4c:5f:19:78:09:b9:9a:76:3e:72:fa:97:37:95:
df:59:89:e8:6a:f6:38:03:65:9f:70:13:15:df:68:
ee:04:62:d7:ac:76:fc:37:7b:fd:53:9c:36:ae:36:
e6:12:be:28:63:f3:1d:ea:a8:84:1a:44:aa:00:ec:
71:39:d5:b6:75:00:f9:a9:4f:5e:5a:be:8c:c4:7b:
fb:b0:fd:5b:28:be:78:73:59:f7:f3:7c:49:a6:7f:
5f:97:44:31:04:c6:2e:f3:4d:6c:4c:c1:d5:30:40:
45:15:4c:0a:e3:09:3c:a2:eb:dd:d0:96:b7:c9:5d:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:0A:71:78:A2:9D:48:72:4E:6A:4F:6F:DD:13:5C:54:99:A4:29
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:6c:30:c1:b3:7f:5f:80:4f:40:12:00:1c:29:21:52:8d:
3d:46:06:0c:32:cd:ae:ad:0a:c1:59:96:6a:fd:ff:3c:6e:c6:
af:29:3e:ad:1f:07:42:27:ff:c2:16:21:e3:d7:b8:06:0c:ff:
7f:47:fd:09:c0:4d:89:b3:d5:0e:d9:34:28:5e:2f:39:35:04:
d5:8f:f4:b5:0f:1e:10:0e:d2:8d:23:65:4a:7d:c9:9b:55:fb:
47:c6:3f:d9:19:fd:8d:2a:5d:6e:e9:c8:e2:12:49:75:b9:32:
ee:54:fe:c3:3e:48:d8:7f:68:b9:9d:be:7b:ca:63:8e:e2:10:
21:aa:a6:a2:6f:87:08:0b:9d:bb:53:c5:15:4c:86:8d:3e:c3:
c3:4e:1a:5e:83:02:17:7d:8d:27:0e:a2:f1:23:d3:23:2b:8d:
d5:0b:f0:5e:2d:4e:63:2c:28:97:10:53:76:a0:e3:99:ad:c9:
ec:f1:eb:65:50:7e:57:ae:07:0a:9f:ff:b8:5e:0e:50:88:a3:
f9:41:b0:b3:05:35:90:23:66:25:f9:89:b7:d8:e3:b8:3a:68:
a9:d5:d6:fb:e5:98:7e:e0:5c:a9:04:b8:2b:49:8d:28:02:42:
fc:bd:8e:1f:90:ed:ec:c0:6d:98:f5:4f:fb:06:eb:a5:fb:a1:
33:52:96:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:41 2025 by rpki-client