Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: p88uZhsOhK2z5trAXwy8zoTHowUDwB2fvverI4jBfcs=
Subject key identifier: E3:D7:47:91:89:6D:81:41:99:15:E8:9A:0F:17:25:8E:68:41:A0:D7
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 4DCA56C8ED1643999ADE72A9DFDFA35F9605D293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 11:24:00 +0000
Manifest this update: Fri 31 Jan 2025 11:19:00 +0000
Manifest next update: Sat 01 Feb 2025 13:32:00 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: 4ZymKcn60JZJ5D8GjMRZ1XV43hbj30mWZ+9GwnqbVMg=)
2: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ca:56:c8:ed:16:43:99:9a:de:72:a9:df:df:a3:5f:96:05:d2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jan 31 11:19:00 2025 GMT
Not After : Feb 1 13:32:00 2025 GMT
Subject: CN=E3D74791896D81419915E89A0F17258E6841A0D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dc:02:fa:e2:dc:91:52:21:b9:ef:34:ca:ff:
c1:b8:fa:a1:cf:a9:e2:75:0b:a5:25:0f:ff:9c:14:
6c:49:19:55:72:1b:6e:8d:e0:8a:00:6b:bf:61:53:
66:b7:30:a2:27:2e:b9:cc:3a:b4:c6:a9:34:a3:72:
7c:d0:fe:c1:7d:36:1d:52:62:b2:40:d8:fe:3b:8d:
8e:d8:ac:c9:c0:55:d6:f4:36:58:f8:06:bb:e9:12:
7f:2b:14:1d:fe:2f:4e:e7:ff:28:1b:2e:2c:ec:42:
8c:30:ec:9e:34:66:04:86:77:05:4e:02:05:1e:72:
03:43:cc:d1:35:46:fb:8f:9b:6c:aa:47:99:f6:56:
04:b2:c3:c4:34:16:e4:9a:cb:57:78:aa:7d:f1:7e:
5a:20:d9:fb:65:24:5a:3e:46:08:18:da:69:f3:95:
1b:b4:e9:1e:ed:aa:ce:38:1f:f3:6e:29:28:ad:15:
94:6a:1e:7c:19:a8:f0:ab:cd:6a:10:e1:49:f8:3b:
64:1c:7f:9e:b3:bc:79:d3:0c:95:e5:d3:f1:fe:5c:
dc:65:ba:a0:1e:13:68:db:75:ab:01:4f:46:45:39:
5d:7e:9b:43:ea:1f:3a:02:1b:7f:09:9f:a8:af:ec:
00:91:06:4a:70:56:56:1c:81:12:54:3e:b1:48:be:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D7:47:91:89:6D:81:41:99:15:E8:9A:0F:17:25:8E:68:41:A0:D7
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:39:65:a6:87:29:ac:d0:2f:78:0a:bf:e9:70:8d:3d:77:1f:
0d:46:cf:b0:fe:49:54:2a:e5:19:a0:fa:fa:c8:a0:c0:94:63:
59:1d:41:00:67:af:d8:d0:0a:76:5c:ae:01:33:96:ff:b2:46:
5c:38:cf:72:37:6e:62:40:97:d4:bd:05:4c:1c:50:11:18:ed:
0c:76:79:a3:a3:6b:06:86:2d:4b:6b:04:4c:68:39:bf:ec:2f:
ad:c4:fd:54:7b:13:da:33:80:c5:2f:a6:d2:62:eb:39:4f:d6:
ce:c7:1b:6d:c5:f2:d3:23:7b:52:6c:e9:27:cb:b2:5e:07:57:
11:c4:7f:bb:84:27:69:8e:a1:d5:89:1e:bc:d9:76:ae:73:5e:
0d:ce:86:1c:71:73:95:14:89:5c:7a:d4:d5:d0:57:91:4e:14:
1f:ce:2d:37:8c:18:11:96:47:b4:62:95:53:41:73:54:c2:a5:
2d:e6:68:92:96:55:14:ff:ca:5a:be:37:aa:a9:b0:20:53:fb:
1a:aa:e4:f6:fc:75:e7:25:46:26:37:b2:8e:c4:f9:49:5a:09:
bd:14:1b:27:a2:89:26:00:3f:18:84:18:7c:5d:72:1c:cd:6a:
f5:03:a3:ae:8b:f1:1c:8c:9a:22:f0:0f:85:28:09:1e:7f:5a:
99:a4:74:86
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTcpWyO0WQ5ma3nKp39+jX5YF0pMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGNkYjMyZDYyNTNmYmFmZTA3Mzc4YTFhMzA5NDZhNzNh
ZWM3ZTNkNDAeFw0yNTAxMzExMTE5MDBaFw0yNTAyMDExMzMyMDBaMDMxMTAvBgNV
BAMTKEUzRDc0NzkxODk2RDgxNDE5OTE1RTg5QTBGMTcyNThFNjg0MUEwRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy3AL64tyRUiG57zTK/8G4+qHP
qeJ1C6UlD/+cFGxJGVVyG26N4IoAa79hU2a3MKInLrnMOrTGqTSjcnzQ/sF9Nh1S
YrJA2P47jY7YrMnAVdb0Nlj4BrvpEn8rFB3+L07n/ygbLizsQoww7J40ZgSGdwVO
AgUecgNDzNE1RvuPm2yqR5n2VgSyw8Q0FuSay1d4qn3xflog2ftlJFo+RggY2mnz
lRu06R7tqs44H/NuKSitFZRqHnwZqPCrzWoQ4Un4O2Qcf56zvHnTDJXl0/H+XNxl
uqAeE2jbdasBT0ZFOV1+m0PqHzoCG38Jn6iv7ACRBkpwVlYcgRJUPrFIvkCNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU49dHkYltgUGZFeiaDxcljmhBoNcwHwYDVR0j
BBgwFoAUDNsy1iU/uv4HN4oaMJRqc67H49QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2
NDgwLzAvMENEQjMyRDYyNTNGQkFGRTA3Mzc4QTFBMzA5NDZBNzNBRUM3RTNENC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ROc3kxaVVfdXY0SE40b2FNSlJxYzY3
SDQ5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01
ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMC8wQ0RCMzJENjI1M0ZCQUZFMDcz
NzhBMUEzMDk0NkE3M0FFQzdFM0Q0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzllpocprNAveAq/6XCN
PXcfDUbPsP5JVCrlGaD6+sigwJRjWR1BAGev2NAKdlyuATOW/7JGXDjPcjduYkCX
1L0FTBxQERjtDHZ5o6NrBoYtS2sETGg5v+wvrcT9VHsT2jOAxS+m0mLrOU/Wzscb
bcXy0yN7UmzpJ8uyXgdXEcR/u4QnaY6h1YkevNl2rnNeDc6GHHFzlRSJXHrU1dBX
kU4UH84tN4wYEZZHtGKVU0FzVMKlLeZokpZVFP/KWr43qqmwIFP7Gqrk9vx15yVG
JjeyjsT5SVoJvRQbJ6KJJgA/GIQYfF1yHM1q9QOjrovxHIyaIvAPhSgJHn9amaR0
hg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:41 2025 by rpki-client