Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: Kw9tQ669mls+QZNFuK4Y/DGBUoeGZSSTnxd0xAVGtXM=
Subject key identifier: C1:F5:30:5F:83:F8:72:B5:76:42:96:4C:A4:AF:6B:8A:C6:87:E1:9C
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 592AA07CC5024641FF564981A93508968BCC4D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 01C5
Signing time: Fri 31 Jan 2025 11:22:55 +0000
Manifest this update: Fri 31 Jan 2025 11:17:55 +0000
Manifest next update: Sat 01 Feb 2025 13:42:55 +0000
Files and hashes: 1: AS215828.asa (hash: pljuqamxoFyrKyOB146Yq2hAbS4GhBcCYl/vXn6L4AI=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: pku5jODDkpiAcVLpiC6SyLCN4Mx+VkXHt7Y+LjaU8LU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:a0:7c:c5:02:46:41:ff:56:49:81:a9:35:08:96:8b:cc:4d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Jan 31 11:17:55 2025 GMT
Not After : Feb 1 13:42:55 2025 GMT
Subject: CN=C1F5305F83F872B57642964CA4AF6B8AC687E19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:be:3d:c5:e2:a6:56:f9:c1:cc:f9:30:df:
81:3e:3c:44:e9:e9:6b:cb:5e:36:d0:df:d6:f9:cf:
4b:e3:e6:e6:54:e3:74:bb:ae:bf:1f:7d:05:4c:c2:
d6:bf:12:2f:8c:43:3f:f8:50:c5:23:f6:88:1f:83:
b7:ce:59:90:8f:27:ac:9e:a9:45:39:22:9c:bc:de:
cb:22:9e:fa:76:ad:d6:d2:25:29:9d:9c:26:27:57:
1c:19:05:30:48:b6:f4:b1:86:9f:b3:5a:9b:8f:02:
68:6d:ff:9f:17:10:e3:2c:7a:2e:97:fc:a6:24:bd:
80:31:6d:61:a7:59:75:8d:fb:49:8a:d1:cf:77:ad:
40:0d:b2:5a:cd:4b:23:95:42:e4:e6:5f:0c:e0:25:
2c:55:c8:bb:05:0c:8b:c0:bf:ae:df:ea:df:e8:be:
6c:56:b8:c5:3f:ad:2f:84:22:c4:f1:fc:24:be:6e:
a6:d3:77:17:04:18:a9:91:e4:dd:87:c1:2b:9a:74:
ae:91:18:ed:45:24:92:f7:38:1f:75:13:78:96:49:
45:50:f8:c7:b5:bd:0d:c1:f3:74:33:b6:29:cd:d2:
0d:54:2d:ec:3c:c7:b6:30:21:87:e1:e8:81:0b:5a:
7e:0c:2f:c5:48:7e:38:5f:75:62:fd:3d:5a:b5:03:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:30:5F:83:F8:72:B5:76:42:96:4C:A4:AF:6B:8A:C6:87:E1:9C
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:91:62:ff:0b:df:2f:46:3f:d4:c7:0e:f8:52:76:e9:ea:69:
7e:16:40:69:09:c1:27:5a:70:ea:63:61:23:52:c0:82:d3:f4:
5d:5c:0f:3e:ee:ad:ab:f0:0b:c4:bb:5a:1a:56:f1:ce:6c:28:
1c:10:7a:d8:11:42:41:ac:85:c4:59:70:42:b7:d1:26:56:d5:
64:5a:a3:15:55:db:5e:fb:df:e9:db:a5:2e:9d:aa:9d:e5:f1:
a7:cb:53:1e:68:8a:95:8e:ca:5c:8a:be:e2:33:d6:ce:37:a3:
be:52:ef:bb:a7:e7:14:10:19:7e:8b:e6:0f:22:25:60:e9:a9:
71:59:b8:14:92:22:0e:6e:ce:f2:a4:c1:c2:23:c1:d2:bf:87:
32:5d:b6:12:4a:fe:77:d9:9d:c6:8f:08:f5:8d:04:e7:9e:41:
46:c9:d7:c0:5c:0d:70:2c:04:ba:ae:af:a9:cb:95:24:c8:df:
1d:12:a3:71:a7:a0:52:4c:9b:37:19:be:8f:06:4d:00:97:e6:
62:d8:78:4d:7b:74:4d:05:56:1e:b2:8b:44:c7:01:7f:5b:36:
32:51:be:d6:0f:69:22:87:1e:48:d0:18:02:79:a1:35:06:f6:
37:df:30:67:bf:5d:3a:0d:58:1a:ca:a0:f7:15:fd:d6:66:b0:
eb:da:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:07:44 2025 by rpki-client