Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json)
Hash identifier: HqCBvaOArIj9XA+cJRL7hYePo/aHHMD4KB3X0rHeHMY=
Subject key identifier: 52:89:5A:CA:42:EC:0A:38:03:80:C0:AF:A4:31:20:DE:67:AF:33:6E
Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E
Certificate serial: 2A9C705C3400FC76F8BB0ACE7194919E5AB3664F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
Manifest number: F5
Signing time: Fri 31 Jan 2025 12:44:00 +0000
Manifest this update: Fri 31 Jan 2025 12:39:00 +0000
Manifest next update: Sat 01 Feb 2025 14:16:00 +0000
Files and hashes: 1: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: dQX8k3kIeqGp3P2icN5/lEkgJizu7NVM5zOKZXx0I5g=)
2: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: imwd3OJxmV7oCPmDFxx4tLgGXHYUkGLXzea8NRYHZoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9c:70:5c:34:00:fc:76:f8:bb:0a:ce:71:94:91:9e:5a:b3:66:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E
Validity
Not Before: Jan 31 12:39:00 2025 GMT
Not After : Feb 1 14:16:00 2025 GMT
Subject: CN=52895ACA42EC0A380380C0AFA43120DE67AF336E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:f3:f0:71:e6:08:d9:e5:2e:ca:dc:5b:63:
21:0b:7d:bc:fa:7a:78:87:7d:bd:22:bc:43:e2:d8:
2f:a5:44:98:22:8d:b9:79:d6:e0:97:b4:ac:d1:56:
fc:6a:26:7d:be:2c:99:c6:99:32:e5:8c:05:2a:e4:
e5:9a:ef:09:92:46:c0:ea:b5:78:8c:a5:b7:3f:ad:
2f:2d:ec:20:fc:ed:cc:fe:af:6e:a1:5c:32:83:3c:
70:3d:0b:4a:a6:c7:88:1f:e2:bc:88:fa:22:37:d7:
23:2e:64:57:6a:5e:6d:5b:95:f5:fd:15:93:9d:31:
de:c8:fe:74:a9:7b:40:8c:e1:ef:c5:4e:35:3e:0d:
6c:f2:0e:e5:ed:f2:bb:3b:dc:48:7a:28:44:b2:17:
e8:d1:58:a2:b8:d8:e5:32:91:be:2f:21:62:41:92:
70:d0:90:1b:91:d0:57:31:69:2a:94:b1:c9:d4:50:
a0:a2:b9:06:5c:25:43:7a:63:b6:91:95:7c:3c:ff:
b8:2e:6b:f9:c9:be:d2:9f:77:67:29:f8:d8:0e:af:
9d:ad:93:ac:4c:fd:91:51:f6:04:a3:8e:14:a8:bc:
64:dc:ff:c6:d9:00:db:10:9d:54:4a:fd:d6:68:41:
93:dc:2f:03:8b:9b:71:fb:6d:e6:c7:03:aa:7b:6e:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:5A:CA:42:EC:0A:38:03:80:C0:AF:A4:31:20:DE:67:AF:33:6E
X509v3 Authority Key Identifier:
keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:64:9e:36:7c:ca:de:77:6b:b6:be:b2:c9:9c:12:07:bc:90:
87:29:c9:27:f4:7e:52:e0:fa:8e:8b:af:5d:38:d3:a4:4e:19:
be:2a:11:c0:d6:3a:85:ff:8a:18:dc:29:21:2f:56:78:f8:b5:
f9:f1:43:75:f2:41:3b:85:d1:fe:24:2b:05:5a:be:25:a2:cf:
f5:7a:31:0d:fd:50:87:0e:81:59:cd:47:d9:9e:dd:a8:3d:a1:
52:c9:12:b0:38:8d:3b:e2:51:63:05:1f:da:89:5d:08:91:3d:
0d:54:ba:38:7b:8b:1b:65:d8:89:cf:29:70:aa:6b:45:b6:b1:
78:7a:f5:c6:7c:fc:f2:2b:cc:86:27:35:32:fc:e9:85:4e:36:
67:82:72:5e:e2:6c:4a:97:b5:45:05:31:7f:33:15:2f:e1:33:
8e:a1:93:a3:8e:e6:d3:2d:04:ab:d6:8d:79:0a:65:fd:34:0b:
29:9f:07:12:2b:8a:05:bb:cc:22:e5:e5:f8:fa:49:34:dd:89:
8f:89:c6:a1:2f:04:a8:c3:3d:0a:76:1c:b9:3c:89:7d:82:70:
9a:c5:5b:72:2b:90:0d:6d:ae:da:6c:d6:91:f4:e2:5c:25:ca:
ec:d7:c9:b7:c1:f3:c7:ee:b3:33:9a:af:d7:78:0f:85:22:7f:
3d:5c:f5:54
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUKpxwXDQA/Hb4uwrOcZSRnlqzZk8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC
NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI1MDEzMTEyMzkwMFoX
DTI1MDIwMTE0MTYwMFowMzExMC8GA1UEAxMoNTI4OTVBQ0E0MkVDMEEzODAzODBD
MEFGQTQzMTIwREU2N0FGMzM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKTe8/Bx5gjZ5S7K3FtjIQt9vPp6eId9vSK8Q+LYL6VEmCKNuXnW4Je0rNFW
/Gomfb4smcaZMuWMBSrk5ZrvCZJGwOq1eIyltz+tLy3sIPztzP6vbqFcMoM8cD0L
SqbHiB/ivIj6IjfXIy5kV2pebVuV9f0Vk50x3sj+dKl7QIzh78VONT4NbPIO5e3y
uzvcSHooRLIX6NFYorjY5TKRvi8hYkGScNCQG5HQVzFpKpSxydRQoKK5BlwlQ3pj
tpGVfDz/uC5r+cm+0p93Zyn42A6vna2TrEz9kVH2BKOOFKi8ZNz/xtkA2xCdVEr9
1mhBk9wvA4ubcftt5scDqntuGd8CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRSiVrK
QuwKOAOAwK+kMSDeZ68zbjAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB
njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01
ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3
RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy
MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV
dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt
NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw
N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK1knjZ8yt53a7a+ssmc
Ege8kIcpySf0flLg+o6Lr10406ROGb4qEcDWOoX/ihjcKSEvVnj4tfnxQ3XyQTuF
0f4kKwVaviWiz/V6MQ39UIcOgVnNR9me3ag9oVLJErA4jTviUWMFH9qJXQiRPQ1U
ujh7ixtl2InPKXCqa0W2sXh69cZ8/PIrzIYnNTL86YVONmeCcl7ibEqXtUUFMX8z
FS/hM46hk6OO5tMtBKvWjXkKZf00CymfBxIrigW7zCLl5fj6STTdiY+JxqEvBKjD
PQp2HLk8iX2CcJrFW3IrkA1trtps1pH04lwlyuzXybfB88fuszOar9d4D4Uifz1c
9VQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:08 2025 by rpki-client