Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier: nuQr7UA+qDuMMG6GTxZy6VgOPrb2QDUrZP0J1yS/+1U=
Subject key identifier: DB:39:35:00:B5:A5:36:B3:C7:48:92:30:75:5D:15:C9:F7:21:D7:BA
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial: 7AB01AA3FA5952B09A6C40D519E42F08E73B7F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number: 011A
Signing time: Fri 31 Jan 2025 13:39:19 +0000
Manifest this update: Fri 31 Jan 2025 13:34:19 +0000
Manifest next update: Sat 01 Feb 2025 17:36:19 +0000
Files and hashes: 1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: DFzV25ii8UgASEWMCALmBsdXvcQgqhkHeRu3Mfj+fw8=)
2: AS215849.asa (hash: 9UZCyM4teIzSn1Im2N0q8YebSfMGXCtXc/dqDr5kuPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b0:1a:a3:fa:59:52:b0:9a:6c:40:d5:19:e4:2f:08:e7:3b:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
Validity
Not Before: Jan 31 13:34:19 2025 GMT
Not After : Feb 1 17:36:19 2025 GMT
Subject: CN=DB393500B5A536B3C7489230755D15C9F721D7BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:ef:3c:de:bc:aa:68:f8:2e:75:30:9a:01:
a6:14:61:82:35:c8:dd:4d:02:30:44:45:b4:49:23:
e6:a6:12:41:aa:ba:40:d3:28:30:e2:01:8f:b1:91:
fb:70:bb:1f:a2:e0:f9:0f:4c:96:5c:cc:c6:ed:e2:
8e:d4:2e:37:7e:73:ee:f5:89:f0:fd:30:08:e3:95:
fa:ab:9e:84:10:3b:5b:3c:0e:15:84:cf:83:d5:3c:
cf:4d:14:7c:50:78:e1:5f:1b:aa:45:e4:76:da:ad:
79:b7:51:be:d2:14:1c:67:06:d6:e1:44:68:c4:5e:
b8:cf:88:1f:8b:81:7a:db:7a:64:80:c9:78:f7:f3:
4e:d4:b1:72:03:5c:da:b7:4c:8c:d6:14:84:83:81:
82:45:d7:10:e5:fc:8f:0f:b7:37:52:5d:c7:07:08:
51:01:d5:e0:8b:86:4d:a2:fb:27:20:1a:39:20:a3:
4b:47:da:bd:f2:7f:0a:b5:fc:da:1f:74:bf:53:81:
97:8f:b0:49:2b:c6:c4:ab:51:87:e2:97:0c:08:46:
be:b0:06:89:89:58:85:bd:40:ec:c6:6c:d1:f9:5f:
ab:66:d0:2c:c1:20:db:3e:94:35:11:a4:b6:26:b3:
37:2c:51:df:0a:e6:0d:2a:6e:e3:00:8a:2f:12:47:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:35:00:B5:A5:36:B3:C7:48:92:30:75:5D:15:C9:F7:21:D7:BA
X509v3 Authority Key Identifier:
keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3a:85:51:b7:41:78:fe:e2:f1:4d:e8:75:93:b5:ac:49:2c:
3f:67:f5:79:13:7c:b2:ed:25:24:7c:d6:64:f1:d3:7f:54:9d:
b3:7d:4f:8f:d0:e0:de:11:48:0d:3b:bd:13:77:92:67:de:cc:
e1:13:4d:7a:cc:75:27:70:46:fb:e4:e9:1e:43:2f:1d:9e:7d:
b6:9d:98:4d:85:11:f0:93:58:72:af:60:40:46:b1:91:17:13:
d1:4b:b7:93:8a:47:4d:e4:95:04:21:a6:84:d8:c8:24:2e:09:
59:75:a1:27:73:e5:21:e2:2b:24:56:5e:41:ee:57:18:de:f8:
ea:e3:fd:77:84:9a:bf:ee:59:d7:e2:99:41:de:86:84:32:ae:
e6:6e:50:6a:52:07:2d:e2:0b:f4:29:80:09:7d:a5:a4:98:22:
e6:fe:4d:d0:83:10:53:b4:9a:ed:6e:da:7b:cd:e8:25:b7:dc:
37:e1:bd:b8:04:81:e5:74:dc:c8:52:87:32:52:e3:3a:63:70:
f2:95:2f:a3:65:50:04:42:f3:e3:a4:b8:81:75:bf:ce:a7:96:
57:48:3c:1a:d8:c2:97:33:da:aa:17:a3:65:c6:a6:e2:3f:a5:
78:6f:10:50:ac:14:27:de:73:1a:05:7b:99:d3:30:dd:57:b9:
2c:ca:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:32 2025 by rpki-client