Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
File: 23D444E7DED3712847CAE2B46DDD886FC2914D54.mft (raw, json)
Hash identifier: qthv1ScDxSGJozq5eEgvxHhSyL4PkoKTA24cjJfypMk=
Subject key identifier: 6A:54:8D:54:18:64:41:5B:8E:62:1C:E2:52:10:B0:AE:13:6B:F2:E5
Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
Certificate issuer: /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Certificate serial: 2859F13DC4CB37B7ED80202E00517D876AEEF747
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
Manifest number: 031D
Signing time: Fri 31 Jan 2025 12:14:35 +0000
Manifest this update: Fri 31 Jan 2025 12:09:35 +0000
Manifest next update: Sat 01 Feb 2025 15:23:35 +0000
Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: wGBqAzu0M+mLqVLFFdIyUacIzJo2wxLiPXDa+r545ew=)
2: 23D444E7DED3712847CAE2B46DDD886FC2914D54.crl (hash: aunp8qPLH+yVWy9ZKjJPyrgZ0CEJJPq0FTxcZ5YiBwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:59:f1:3d:c4:cb:37:b7:ed:80:20:2e:00:51:7d:87:6a:ee:f7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Validity
Not Before: Jan 31 12:09:35 2025 GMT
Not After : Feb 1 15:23:35 2025 GMT
Subject: CN=6A548D541864415B8E621CE25210B0AE136BF2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:c7:25:65:87:48:ee:75:81:c2:80:34:20:
74:8c:e0:17:b1:d2:6d:10:cd:c6:a3:c9:a4:5d:79:
ac:3c:22:f0:52:c5:dc:3c:b8:44:32:ff:d4:1d:aa:
46:da:7b:d6:82:7d:e0:bc:64:de:9f:9a:01:74:47:
f2:61:2b:19:1b:cb:ba:92:64:e2:ff:12:53:e2:fe:
12:f3:54:d2:28:6c:74:f6:44:4c:37:e8:b4:3a:d4:
fd:4b:f8:1d:de:9b:9c:e8:d5:48:92:84:17:52:b2:
9b:83:b3:f7:67:44:ee:bb:45:65:01:01:d0:c7:2f:
bf:58:51:f7:9c:f2:d3:c7:d7:44:72:1d:9b:7e:35:
b6:d3:d1:d9:0f:8c:7c:c8:ee:20:1c:b1:b7:be:c0:
ea:e1:3d:32:a3:89:ff:bb:b4:54:9b:eb:b2:63:4c:
3a:af:48:39:ba:c2:25:e7:e7:dc:1b:8e:aa:ef:80:
e0:9a:8a:80:e4:93:bb:9d:f8:2f:b0:60:b5:55:dd:
f7:f0:11:e7:df:4b:a0:4e:39:28:5c:7b:a6:a1:e9:
41:1a:5c:cd:1f:02:d9:3b:49:6b:2f:ce:fa:2e:14:
ba:cc:5e:b3:5c:31:a3:41:a8:12:ae:a1:5f:88:15:
c3:44:e5:8e:28:b5:ee:b7:30:92:ea:9d:2e:05:ad:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:8D:54:18:64:41:5B:8E:62:1C:E2:52:10:B0:AE:13:6B:F2:E5
X509v3 Authority Key Identifier:
keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:42:85:c1:d2:53:03:65:a2:54:20:19:1d:15:ff:2b:c5:
20:d7:d9:66:95:7e:93:0d:bc:3b:6d:5b:11:b5:db:fa:59:b2:
b7:5e:a1:3a:c4:da:8d:0d:35:7f:ba:f4:34:f6:1a:1e:13:ff:
a2:91:0f:c9:ae:ce:a5:c4:32:a7:db:15:c5:80:36:fc:cb:60:
74:f0:3b:ec:1e:0f:16:1e:f5:ff:ee:9d:c2:5e:9d:29:58:a5:
8b:a3:c8:c5:c7:93:d8:a8:31:34:02:70:51:5e:90:63:10:64:
5d:c4:c8:66:e2:8b:4d:7e:3d:f8:d3:59:57:6c:35:06:43:13:
bf:47:1c:b4:e3:db:ae:f2:a6:8a:94:91:78:fc:dc:f3:0b:d7:
84:a4:d9:e4:70:2c:95:0a:04:dd:a7:8b:00:71:fe:94:eb:78:
d2:f3:bc:4c:2b:a1:00:c6:c6:d2:34:60:4d:fe:43:10:34:cb:
3d:7e:07:5b:4a:46:da:cc:0b:f9:a9:f7:a8:94:e6:0e:16:0e:
91:46:4f:58:37:89:1c:ae:a9:2c:39:80:fc:de:f3:7c:b8:62:
a9:2a:cc:4a:18:7a:81:ad:b0:fd:93:60:17:c1:75:6b:cb:64:
81:f5:2b:4a:0c:da:c6:fd:8b:e6:79:34:49:63:ab:91:b6:fe:
c7:d3:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:31:07 2025 by rpki-client