Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File: D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier: 4CbOhHkA7V9vRhFndJiql5Xk9hd3WNqkIUsZrx3N2lM=
Subject key identifier: 99:00:EB:7B:1B:6B:DE:48:8A:45:FE:81:21:6B:B0:CF:44:8A:99:66
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial: 178438F780D8F960F867E16BF90617B6B8A3C87E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number: 02E1
Signing time: Fri 31 Jan 2025 05:02:52 +0000
Manifest this update: Fri 31 Jan 2025 04:57:52 +0000
Manifest next update: Sat 01 Feb 2025 08:42:52 +0000
Files and hashes: 1: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: 3v9PaczYvbwg3lEu1iNPmJ47gC1z6kPMzLio256F0ks=)
2: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=)
3: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=)
4: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:84:38:f7:80:d8:f9:60:f8:67:e1:6b:f9:06:17:b6:b8:a3:c8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Validity
Not Before: Jan 31 04:57:52 2025 GMT
Not After : Feb 1 08:42:52 2025 GMT
Subject: CN=9900EB7B1B6BDE488A45FE81216BB0CF448A9966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:52:b6:53:36:5b:6e:af:39:fb:0e:91:f4:
e4:aa:54:06:c0:ab:32:df:25:33:81:fb:5b:42:78:
0d:be:48:b0:5c:e6:a1:4b:2e:30:fa:30:fc:4e:0b:
6d:4a:8f:54:4e:28:58:7c:ae:45:77:29:98:37:f5:
2e:49:1b:0a:15:ed:8f:81:e9:24:d9:4a:5c:94:89:
39:da:02:49:40:a9:c3:81:d9:00:0d:66:b3:9b:18:
16:03:a2:a0:f3:9f:bb:b9:c4:fa:3d:46:77:98:d4:
68:a3:01:45:f6:f1:1b:9f:d6:4e:b5:97:e9:6a:b2:
d5:6d:1a:6a:c8:ce:ed:f7:7c:c9:75:6f:36:3a:d1:
f2:1b:0a:e3:79:e8:63:7e:4f:eb:0b:b9:43:f5:62:
d0:16:3c:fb:e5:4c:54:bc:f1:65:9e:59:c6:f9:ba:
61:c8:ef:69:84:de:06:bf:4c:c7:a5:4e:d8:5f:cc:
7c:4e:56:97:f4:72:be:b7:57:de:b3:35:e8:f1:04:
2c:2d:72:70:4a:d6:0c:59:49:9f:a2:44:0f:b0:4e:
77:c0:a0:e1:a6:e2:40:ee:f8:09:5c:89:b1:65:9f:
49:15:32:35:66:33:65:87:af:17:0c:5f:36:4e:91:
05:2a:a3:27:04:fb:40:f5:76:e4:37:1f:b5:c5:0e:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:EB:7B:1B:6B:DE:48:8A:45:FE:81:21:6B:B0:CF:44:8A:99:66
X509v3 Authority Key Identifier:
keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:33:68:1c:22:be:5c:78:43:48:59:b3:26:7b:69:a4:8e:80:
46:a1:ea:6a:a8:de:de:12:f4:4f:d1:7c:2f:99:7d:e0:33:3f:
de:8a:4a:52:2c:d3:f4:05:5f:1d:07:47:d2:d6:4a:3c:38:d3:
c9:fe:5e:eb:35:03:e9:76:5b:f9:af:d8:35:3b:53:18:10:9d:
be:45:5b:3a:c3:bf:7e:bb:47:83:32:b0:11:4e:d5:9b:97:73:
de:30:59:df:21:8b:89:61:c1:e7:a7:06:b2:15:a4:71:b5:a8:
3b:8a:09:cd:0c:09:8d:9b:a8:48:66:cd:ca:a4:7b:36:f3:14:
69:3f:c7:83:88:c4:45:cb:6d:dd:f0:82:2f:0c:ae:4d:3f:2b:
5c:2b:b5:e4:b3:c9:38:cc:db:50:69:f5:4d:f2:7c:16:57:2c:
fb:f2:25:90:49:94:9b:2d:1a:5c:57:a4:93:ef:a3:c6:bf:45:
03:9a:a6:ed:c2:6d:22:5d:7d:f6:e2:3b:2e:5e:56:9c:5e:d0:
bb:53:bf:62:a2:6b:a4:0a:f3:f2:b4:12:e4:a1:7f:10:4f:5f:
90:80:8e:2b:aa:63:07:a6:4e:9f:91:d1:e4:88:5d:d2:ba:59:
5f:d1:aa:fe:9a:6b:17:5e:45:ce:3a:e3:e3:8b:28:72:1e:72:
b9:69:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:40:30 2025 by rpki-client