Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
File: ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft (raw, json)
Hash identifier: KdkJXonfuZJ9m9+8MVUzoy7jQeT7JDwnwmXXvIvVcBc=
Subject key identifier: 55:37:9F:31:63:D5:9A:C0:C3:2F:44:11:B4:D3:C5:19:BC:3C:49:8D
Authority key identifier: AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0
Certificate issuer: /CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
Certificate serial: 79EBBF45162503E557187DBF346AE124D275AD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
Manifest number: DE
Signing time: Fri 31 Jan 2025 16:37:21 +0000
Manifest this update: Fri 31 Jan 2025 16:32:21 +0000
Manifest next update: Sat 01 Feb 2025 18:23:21 +0000
Files and hashes: 1: ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl (hash: Vj9+yehSh4nZdcchI9yzYrFCgndR1pStq8sLkB7JJTg=)
2: AS215664.asa (hash: 3xgtLcc2KJDcNPvYcpy+weIMwVapy+UkODXe2KlOTz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:eb:bf:45:16:25:03:e5:57:18:7d:bf:34:6a:e1:24:d2:75:ad:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
Validity
Not Before: Jan 31 16:32:21 2025 GMT
Not After : Feb 1 18:23:21 2025 GMT
Subject: CN=55379F3163D59AC0C32F4411B4D3C519BC3C498D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:bf:01:c8:be:96:2e:34:9b:08:7e:2b:23:
38:e6:b2:78:7f:08:71:59:bb:92:e4:42:56:c1:b7:
99:ba:e4:d5:6b:67:32:80:69:eb:ff:25:1a:76:f1:
93:90:98:01:1a:d0:f6:98:32:42:20:27:72:7f:e8:
86:8d:d6:2f:96:be:1e:94:5e:5f:d7:10:f6:50:1e:
61:80:b7:89:4d:97:d9:48:29:24:16:a0:a8:d4:e9:
54:29:46:cd:e6:8b:be:70:7b:5c:1f:c0:1c:5b:60:
07:04:e0:8d:2d:d6:44:2b:3e:ad:0c:d9:63:54:f9:
d6:6d:46:60:fc:78:aa:cc:f4:7a:ca:59:a4:5a:25:
f6:76:db:47:2d:ae:18:f5:70:b6:7f:d6:d5:54:e1:
24:0e:e0:5b:ac:80:12:2c:fd:7a:ee:d7:0f:d3:c9:
ff:1d:4b:85:b4:ac:2c:b4:15:1c:3e:98:06:52:9b:
af:c1:1e:c2:f8:3d:6d:b1:ad:2d:2c:41:89:fe:e5:
26:ce:47:10:97:1e:95:7a:83:a8:95:73:bf:9e:2d:
8e:29:67:98:b4:84:9c:22:e4:0d:c5:ab:5d:0f:1e:
78:d0:49:52:9e:85:27:44:2d:03:8d:55:b8:0b:43:
79:7c:22:db:b6:30:22:84:f6:40:dc:ef:52:80:4d:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:9F:31:63:D5:9A:C0:C3:2F:44:11:B4:D3:C5:19:BC:3C:49:8D
X509v3 Authority Key Identifier:
keyid:AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:55:49:ff:4a:15:31:fe:b2:8b:0f:08:d4:55:b4:2f:ea:7d:
9d:c3:55:ce:19:3a:95:92:e2:99:fd:7c:0d:ed:a3:af:8e:33:
0f:b1:d5:44:ce:0b:0f:47:3e:7e:c3:11:4d:ba:91:35:4c:13:
cf:6e:3c:b0:3b:94:a9:89:73:40:b3:80:83:0b:97:86:31:ba:
20:9f:78:35:f9:ab:0e:0d:b7:02:ac:e3:e6:18:2a:33:ae:0a:
83:5b:ea:d4:5b:7d:7e:03:fd:e9:28:6c:58:41:fe:ef:2d:7c:
dd:00:d8:fd:b0:82:c3:64:4a:78:53:e0:ad:a9:2a:57:ae:d6:
3d:18:2d:1b:9e:1e:b7:8a:88:bf:6f:d0:ad:ba:6b:05:8a:68:
88:bc:50:d2:02:ff:aa:ef:95:0e:9a:e8:3c:06:e8:7a:2c:2c:
74:23:05:f1:06:9f:2e:36:65:09:b4:ad:e4:3d:88:f8:03:51:
ae:e5:e5:fc:78:12:7c:ec:71:64:a2:26:b6:29:9a:44:82:8b:
0b:5e:11:18:8a:12:54:85:b5:12:5a:1a:6c:78:85:9e:c1:a1:
f8:af:49:1b:f7:46:f5:25:46:1c:b2:66:4a:28:a5:30:6f:f3:
8d:b9:75:cf:c9:3b:06:e3:84:83:1d:b8:e1:56:8d:b6:d8:f7:
92:30:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:31 2025 by rpki-client