Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier: 8zkMRdgUHeNExwo4g2Fu+UV04boNHNbyr//dr4N6/8c=
Subject key identifier: 26:0C:D3:13:4D:EF:88:7B:4F:26:22:42:E5:5D:8E:2E:3D:0F:20:92
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial: 1FE651BEB9F05D4680BBFEBF5F27A4B28718C956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number: 032F
Signing time: Fri 31 Jan 2025 05:16:30 +0000
Manifest this update: Fri 31 Jan 2025 05:11:30 +0000
Manifest next update: Sat 01 Feb 2025 07:53:30 +0000
Files and hashes: 1: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: PeKrYlxO9aJzSjjq2GCsehA7RgIXos16I20n9tzXipg=)
2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: 4vOlH5LvPjcoyiInCa0QUhTsDXjcEsgD3QKHqso48Gw=)
3: AS51019.asa (hash: RqQYQxP2LlV4zO7/d8ske+S6p2B1SREg+ga188kx8/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e6:51:be:b9:f0:5d:46:80:bb:fe:bf:5f:27:a4:b2:87:18:c9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Validity
Not Before: Jan 31 05:11:30 2025 GMT
Not After : Feb 1 07:53:30 2025 GMT
Subject: CN=260CD3134DEF887B4F262242E55D8E2E3D0F2092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:a6:6a:98:91:e4:89:d3:92:d2:4e:03:3b:
e7:9b:b1:12:98:39:7c:bf:2c:ec:b3:49:99:be:e4:
f2:fa:0d:b3:0b:e5:fe:43:d9:bc:46:fa:bb:41:0d:
d5:9f:7b:24:7e:d5:14:d1:be:42:56:b3:bd:e9:38:
6e:84:a6:6c:0c:1b:0f:5f:27:5a:f7:e6:77:df:69:
d3:e6:bd:32:ff:8c:34:7c:f3:9d:6c:e8:33:9e:ff:
6d:6a:8c:9d:7d:22:3e:b4:f0:48:1d:e6:24:43:d4:
5d:4e:79:51:94:6a:b1:bc:6a:84:6d:3a:2d:1a:05:
28:3b:f5:0e:0d:5e:7d:e0:23:72:b0:09:f6:53:c8:
cf:ac:89:cb:61:a5:c0:cc:cd:1e:c4:fa:b8:de:5c:
dd:ee:15:0e:c4:20:29:a3:72:11:86:99:69:3e:fe:
13:31:8b:ac:3d:16:29:e4:62:90:9e:f2:ce:51:2d:
7e:80:55:ec:e1:60:3f:85:89:19:d2:2a:db:d0:87:
70:c6:e6:5f:49:83:7e:c4:11:64:f7:b1:e0:59:9c:
d2:2e:37:a0:66:79:2e:89:24:dc:6b:41:9a:00:b3:
1d:18:d5:b9:17:78:b7:75:ea:98:ca:9d:e7:e2:b1:
e7:4e:56:66:88:9c:84:ab:cf:2b:ec:69:1c:07:dc:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:D3:13:4D:EF:88:7B:4F:26:22:42:E5:5D:8E:2E:3D:0F:20:92
X509v3 Authority Key Identifier:
keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:52:41:0e:12:68:7a:15:da:c7:d5:d8:f9:16:e6:d9:95:88:
3d:b9:08:2e:8c:ba:5a:15:ab:04:d2:6c:fb:bc:a0:b2:30:89:
f0:ed:bd:b4:37:e2:85:e5:d1:9e:68:c6:c8:00:07:3b:b5:e7:
47:07:c3:65:a3:02:e4:5d:5c:0a:1f:a5:34:cc:be:b3:c2:f6:
6c:3a:98:2e:72:28:ef:1c:4c:51:2d:6a:00:c1:20:b8:21:33:
16:bc:a5:ba:86:4d:95:e0:35:67:01:1d:93:68:66:7d:eb:e4:
6e:c8:ca:ae:03:49:56:f5:fc:3e:e3:7f:2c:63:e4:ad:16:bd:
e4:b3:5c:26:be:21:d1:bd:f1:38:07:8d:bd:c9:14:f8:a7:d0:
e0:ea:03:17:74:b9:ae:8c:0a:75:ee:b5:84:c4:b8:45:96:76:
1a:32:6c:6f:be:0e:8b:3d:df:ba:10:d6:23:e9:47:7c:06:ba:
2b:02:87:7d:6a:d9:5c:f8:7a:67:e9:cb:af:06:74:f3:32:77:
21:bc:e6:af:43:c3:5a:59:4c:85:f6:1e:bd:75:66:19:22:c0:
08:e4:3d:0d:9e:8c:25:19:45:7b:31:46:24:a1:46:51:f9:62:
f1:b6:4e:3d:d5:0e:f2:4f:31:68:10:82:ab:c6:e0:eb:4f:9d:
16:80:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:40 2025 by rpki-client