
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json)
Hash identifier: fwuf6EM9Pt5G9R1g4XCib31XsYAy0psDXGcfsbQB1qU=
Subject key identifier: 8B:D8:88:FC:19:E7:4D:C4:78:10:31:5A:CB:C9:91:44:78:77:64:AE
Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Certificate serial: 778A61BB497ED350699F11B89E7C74E76677FE38
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
Manifest number: 0330
Signing time: Fri 31 Jan 2025 09:31:30 +0000
Manifest this update: Fri 31 Jan 2025 09:26:30 +0000
Manifest next update: Sat 01 Feb 2025 10:25:30 +0000
Files and hashes: 1: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=)
2: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: a5mCp+/ogcptIgrDXY0rS6nHoGBY7ESpQhyqkuDShws=)
3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8a:61:bb:49:7e:d3:50:69:9f:11:b8:9e:7c:74:e7:66:77:fe:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Validity
Not Before: Jan 31 09:26:30 2025 GMT
Not After : Feb 1 10:25:30 2025 GMT
Subject: CN=8BD888FC19E74DC47810315ACBC99144787764AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:73:4b:3c:b4:64:df:73:86:2c:4a:44:0d:
af:67:1c:1a:f9:01:bb:3b:b7:9b:a4:fc:94:6f:40:
c8:79:97:c7:0e:34:33:1f:12:4e:e5:9d:a4:90:2d:
93:49:ca:96:75:82:ce:81:62:96:6d:74:d9:00:0f:
ad:b0:49:b6:57:56:cd:c4:97:8a:e0:81:52:bd:a0:
94:4a:91:b1:f4:21:ea:2c:66:d4:17:fa:b8:b2:47:
eb:ba:59:42:cd:48:85:9d:59:31:89:95:b7:a8:d9:
87:0f:e3:e8:ec:9e:30:6e:4d:47:6f:2f:17:e6:0a:
e9:4d:65:13:c7:4e:c1:4a:1c:a9:65:b5:3c:a5:13:
bf:6e:a5:ce:f2:f6:de:b2:b3:03:f8:1d:30:7d:8a:
f9:5c:fc:8c:4c:b2:02:7e:72:d4:fa:58:e6:d9:39:
15:b8:95:29:c5:3c:f1:b8:9e:23:ac:65:86:d1:53:
f2:27:a6:6e:51:1b:31:82:61:db:df:bf:52:46:ca:
fa:b7:e6:51:d7:68:7d:b8:c2:36:7f:f2:66:3d:32:
ae:b8:47:63:26:e3:36:e6:6e:d9:28:a5:8f:1d:53:
bc:d2:b6:4e:70:cc:56:e3:91:34:0d:b4:b1:c1:76:
68:63:a2:8e:e3:d9:0d:96:9d:a3:18:ba:2e:1f:40:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:88:FC:19:E7:4D:C4:78:10:31:5A:CB:C9:91:44:78:77:64:AE
X509v3 Authority Key Identifier:
keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8d:d6:86:9a:3b:b4:17:37:d1:e6:7c:a9:f0:57:c9:ef:b0:
57:2a:f0:98:db:2f:5e:09:b1:a5:e6:e3:dd:7a:80:af:d3:f6:
03:f6:9e:0b:7c:6a:00:2b:5e:fe:66:46:17:b5:fa:ba:e7:91:
77:be:85:1a:1f:8e:8a:00:b4:d4:ea:d4:3b:8c:f6:f6:cb:8a:
c7:cd:1c:b2:74:c4:0c:e1:62:44:83:a9:5b:59:69:f7:f2:9a:
d0:ce:e2:e9:f6:43:d3:1d:8a:0a:e1:a3:c6:83:57:9e:d4:22:
a4:07:88:11:d9:58:81:99:50:d0:09:b0:4e:84:40:6a:67:18:
b7:32:64:16:32:d4:5f:fb:81:5e:84:fb:8e:7a:cd:a4:b8:31:
06:69:43:35:45:25:83:4d:b8:21:29:2f:bb:e8:f2:14:25:fa:
a2:c4:de:7a:26:2d:51:83:9f:1e:a0:21:c7:cd:4d:b9:c3:df:
b1:31:81:3a:53:b9:ca:e2:ae:ac:70:51:63:44:5c:6b:5f:b8:
ec:45:93:f2:07:b2:50:62:18:75:33:9f:c0:ae:e8:f4:e5:ba:
ee:ed:42:51:2c:b8:2e:c8:a6:ef:64:6a:66:60:56:12:fa:73:
9f:7d:30:67:69:5d:87:f9:49:38:77:00:4b:13:01:39:b2:01:
1e:38:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:03 2025 by rpki-client