
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
File: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft (raw, json)
Hash identifier: bMvFUWxn9sDRqiTMvr/FKMc1IP6fmFSifZA/vSqT3Ao=
Subject key identifier: 6A:D7:1F:13:1B:21:A9:0F:74:D5:3B:D5:76:0B:8C:73:D4:24:42:40
Authority key identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3
Certificate issuer: /CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3
Certificate serial: 344AF514ADB33AC0D6CDC97C23E7754A21E6FF39
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
Manifest number: 026E
Signing time: Fri 31 Jan 2025 08:32:51 +0000
Manifest this update: Fri 31 Jan 2025 08:27:51 +0000
Manifest next update: Sat 01 Feb 2025 09:38:51 +0000
Files and hashes: 1: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl (hash: Zw2ynpoYRfF/6CJTM+H/JRaJUttzMGX9KIvLH5rm7i0=)
2: 326130373a353463373a343038303a3a2f34322d3432203d3e20323136303839.roa (hash: PSK/VnPkC0Wx84ZfxyLpC5q9DAlNnqbxnoS1F86zKXo=)
3: 326130373a353463373a343063303a3a2f34322d3432203d3e20323136303839.roa (hash: IEkqCo1PYtZIgJs8hjaJOZoqli4MCs+0wVtFiuHrMRQ=)
4: 326130373a353463373a343130303a3a2f34322d3432203d3e20323136303839.roa (hash: TznseHfiDZ1jpmhMm2lzqcGBWQrzFxaalzxO12gQ4iQ=)
5: 326130373a353463373a343034303a3a2f34322d3432203d3e20323136303839.roa (hash: qPVhlGUPjHIOWP/5yRh1nX5yknvRUgXVZrwqIGwcG6o=)
6: 326130373a353463373a343030303a3a2f34322d3432203d3e20323136303839.roa (hash: dr3ji63XD+oWk6cRBemGYJyGc/2BAsrYFzshGDdgAQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4a:f5:14:ad:b3:3a:c0:d6:cd:c9:7c:23:e7:75:4a:21:e6:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3
Validity
Not Before: Jan 31 08:27:51 2025 GMT
Not After : Feb 1 09:38:51 2025 GMT
Subject: CN=6AD71F131B21A90F74D53BD5760B8C73D4244240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:ec:60:c2:ba:11:f3:a7:bc:55:a3:b9:ef:
80:86:f6:d1:78:7b:d6:6b:2d:24:db:18:d8:af:70:
20:00:22:d8:91:91:58:3f:25:b0:9d:72:48:47:1b:
4c:27:cb:7a:7a:12:1a:d3:89:75:49:f1:67:b1:14:
2b:8f:da:c9:56:5c:d2:4d:29:a7:dd:54:ce:c6:72:
46:51:22:7a:f5:a1:f8:f2:b8:7f:ae:cb:ca:4d:61:
62:20:dd:7e:22:90:8b:d5:1e:83:44:32:12:31:e2:
54:a2:00:2e:b3:8e:46:70:50:ce:f8:75:a2:bc:4d:
11:b9:19:86:c4:e1:f2:b0:90:62:d3:da:e5:55:f8:
df:82:d8:07:79:6d:d6:ef:89:fd:9e:56:29:0e:21:
6a:c2:36:63:ed:95:4a:c8:22:2c:50:ee:e7:d7:07:
73:22:3f:be:11:3e:11:b1:e0:58:3c:fb:25:03:52:
92:25:1e:d4:9b:cf:f3:ff:b5:f6:ac:3e:80:80:25:
42:96:e3:af:7a:15:e0:f2:55:fc:dc:04:63:c7:33:
93:e5:c9:96:f4:db:13:24:b0:b4:e2:16:41:8e:7b:
04:ae:d3:ba:db:fe:c7:b5:42:d8:84:f9:40:35:c0:
a9:da:91:a9:72:a6:ca:3b:0c:d8:00:97:6b:17:e6:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:1F:13:1B:21:A9:0F:74:D5:3B:D5:76:0B:8C:73:D4:24:42:40
X509v3 Authority Key Identifier:
keyid:C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3d:5e:90:87:e2:ec:1c:da:9f:1d:b3:79:29:5f:0d:62:3a:
70:86:25:25:7c:fa:16:3c:a7:0e:62:23:41:45:23:26:29:55:
ed:22:fd:b5:8d:53:ed:50:8f:8c:11:9f:5c:6f:2f:b7:3a:8d:
61:cb:e6:66:fd:11:37:cc:1a:a3:c0:31:51:65:3b:d9:20:cd:
21:af:f6:32:e9:6d:cb:51:31:bf:bd:a9:93:08:d3:b8:e9:91:
66:3c:f7:81:05:3b:98:b5:ad:47:b9:eb:42:6a:34:d2:34:cb:
c1:ef:d9:cd:a8:0c:b3:3a:0d:4c:47:f0:a7:e5:87:33:33:65:
9e:7d:18:71:b9:a7:12:9d:27:c0:cd:c5:50:92:bc:31:6b:a7:
64:01:90:a4:93:54:83:c7:44:67:19:56:31:5a:a2:76:a8:ac:
40:f9:b6:06:47:a2:23:f8:7b:48:f9:cf:72:42:fd:64:e9:3d:
cd:07:ba:cb:d4:c3:c4:38:d1:e0:5b:a3:5a:bf:06:e2:47:f9:
1f:f8:f5:83:01:7a:28:d2:c4:68:8e:28:78:aa:b2:a0:0f:ec:
bc:7b:b0:81:f7:1a:68:2b:1d:cb:d7:60:4b:4c:aa:9a:ec:94:
69:d4:f2:a3:c3:b5:35:8f:24:e3:8e:f2:8b:76:8c:79:24:e6:
06:95:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:12 2025 by rpki-client