Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json)
Hash identifier: Up/u+ThFE9Zvzzdf6EkvOfRWAvFVLCGqjdjGgbd92LE=
Subject key identifier: 86:BC:5F:70:CA:78:90:67:41:4D:50:4A:A6:29:BF:35:78:73:EB:EA
Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6
Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
Certificate serial: 047C4170DE99E5CAFAACD3ACF3B9D5407ADAF9A6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
Manifest number: 61
Signing time: Fri 31 Jan 2025 07:59:46 +0000
Manifest this update: Fri 31 Jan 2025 07:54:46 +0000
Manifest next update: Sat 01 Feb 2025 09:46:46 +0000
Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: DQfrz+6bczUW0cPx1XtD2+isSBIq7dNNnDsYOSlZC9k=)
2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7c:41:70:de:99:e5:ca:fa:ac:d3:ac:f3:b9:d5:40:7a:da:f9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
Validity
Not Before: Jan 31 07:54:46 2025 GMT
Not After : Feb 1 09:46:46 2025 GMT
Subject: CN=86BC5F70CA789067414D504AA629BF357873EBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:24:23:8e:bf:77:f3:db:0c:df:dc:24:7e:
c7:35:3c:70:3c:bd:b5:8d:82:ca:34:9b:46:03:82:
ef:79:bf:6b:e9:d0:02:89:95:12:d2:c0:9c:46:ea:
eb:6a:ed:06:4e:97:98:37:6a:e8:6b:ef:f3:4a:a3:
ce:5c:4c:55:f8:8e:b9:a3:13:61:87:12:fd:29:1a:
9e:40:31:ba:b3:5f:28:04:0a:28:ff:ee:bc:62:9d:
c6:4b:2f:98:57:4d:24:88:65:83:60:b7:3a:22:ac:
64:49:57:29:0c:3f:47:bf:f6:4e:bb:e7:84:8a:58:
8d:4e:87:a5:cd:e4:46:b3:f6:f8:9b:a7:4a:26:a4:
ca:99:83:72:52:77:1c:2e:3f:88:12:b5:f8:ec:0c:
b5:60:63:c3:32:fc:99:f0:fb:43:97:0b:6a:a5:78:
4b:04:f0:08:c8:5f:6b:46:b5:2f:79:ed:56:68:d2:
4f:fe:a9:c0:b6:f4:07:85:ae:2a:9a:cb:b7:e5:f9:
33:d9:1a:5c:a6:28:1e:0e:41:3e:19:39:ea:93:dc:
82:1e:c0:f5:bc:b9:18:93:a8:79:27:a8:6b:36:0f:
81:ba:cc:91:ae:4c:13:70:16:f0:07:d6:8f:9d:eb:
cd:8b:b0:8b:92:fb:0c:8e:b2:7f:d7:34:b6:68:7a:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:5F:70:CA:78:90:67:41:4D:50:4A:A6:29:BF:35:78:73:EB:EA
X509v3 Authority Key Identifier:
keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:38:36:19:ef:6f:68:04:ab:1f:1e:3d:a7:d0:d3:25:fc:
91:a7:11:45:1b:36:cf:a8:ff:9a:b0:89:7e:2d:23:11:cf:cf:
0f:8b:4b:2a:a5:d8:3d:44:cd:64:8a:98:7d:0a:fb:60:1f:f8:
6e:b5:ae:33:ee:bb:02:28:b5:2c:0c:b2:4b:00:7a:21:00:f3:
b7:c1:f7:5a:35:49:d2:11:db:44:b4:ba:00:5f:1d:80:44:fe:
52:5b:d5:16:ea:17:e8:50:0f:23:27:19:63:c7:80:d7:d7:fa:
a9:b6:15:09:f5:ca:5b:1e:ff:47:83:56:f0:fd:4e:42:07:66:
4c:0e:06:c5:89:02:48:29:0a:d8:1a:ff:ff:eb:10:2e:56:fb:
ff:55:d2:ed:f1:19:60:cc:6f:f7:ca:d0:1a:44:d7:55:dd:c8:
4c:2c:4e:a4:6a:58:48:82:ea:f9:55:86:ab:79:c6:c7:b6:be:
cd:33:03:3d:a3:df:e0:f4:ad:51:5f:3e:38:a3:73:ba:ae:19:
5b:bc:f0:55:32:7a:d3:58:2c:70:ea:de:66:71:db:96:28:3a:
54:46:82:ee:55:29:ba:50:96:a8:a2:c4:73:0b:34:85:6e:69:
53:ef:fe:e4:55:77:b9:7f:ab:f1:39:fa:03:7f:2a:a5:8f:32:
b5:f8:97:f3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBHxBcN6Z5cr6rNOs87nVQHra+aYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG
RTIyMkJENjAeFw0yNTAxMzEwNzU0NDZaFw0yNTAyMDEwOTQ2NDZaMDMxMTAvBgNV
BAMTKDg2QkM1RjcwQ0E3ODkwNjc0MTRENTA0QUE2MjlCRjM1Nzg3M0VCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6iQjjr9389sM39wkfsc1PHA8
vbWNgso0m0YDgu95v2vp0AKJlRLSwJxG6utq7QZOl5g3auhr7/NKo85cTFX4jrmj
E2GHEv0pGp5AMbqzXygECij/7rxincZLL5hXTSSIZYNgtzoirGRJVykMP0e/9k67
54SKWI1Oh6XN5Eaz9vibp0ompMqZg3JSdxwuP4gStfjsDLVgY8My/Jnw+0OXC2ql
eEsE8AjIX2tGtS957VZo0k/+qcC29AeFriqay7fl+TPZGlymKB4OQT4ZOeqT3IIe
wPW8uRiTqHknqGs2D4G6zJGuTBNwFvAH1o+d682LsIuS+wyOsn/XNLZoesNnAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUhrxfcMp4kGdBTVBKpim/NXhz6+owHwYDVR0j
BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy
MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE
Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC
QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRsTg2
Ge9vaASrHx49p9DTJfyRpxFFGzbPqP+asIl+LSMRz88Pi0sqpdg9RM1kiph9Cvtg
H/huta4z7rsCKLUsDLJLAHohAPO3wfdaNUnSEdtEtLoAXx2ARP5SW9UW6hfoUA8j
Jxljx4DX1/qpthUJ9cpbHv9Hg1bw/U5CB2ZMDgbFiQJIKQrYGv//6xAuVvv/VdLt
8RlgzG/3ytAaRNdV3chMLE6kalhIgur5VYarecbHtr7NMwM9o9/g9K1RXz44o3O6
rhlbvPBVMnrTWCxw6t5mcduWKDpURoLuVSm6UJaoosRzCzSFbmlT7/7kVXe5f6vx
OfoDfyqljzK1+Jfz
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:04 2025 by rpki-client