Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier: YIxSZObx7oP3DKzMpdUuRjFdPZuLcMgdktO/rK0jPzk=
Subject key identifier: 34:9E:7A:C6:98:73:8E:28:50:20:C4:1A:AB:1E:F0:2C:D7:CB:5A:00
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 3546CBD63D1913BCBBCB3C1B2AA5A639C0E4F3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number: 0284
Signing time: Fri 31 Jan 2025 13:24:17 +0000
Manifest this update: Fri 31 Jan 2025 13:19:17 +0000
Manifest next update: Sat 01 Feb 2025 16:48:17 +0000
Files and hashes: 1: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: NCcDikx7KzjE1AzMkr/mCtGH5JEuQbXcf8nr7rYQnh0=)
2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=)
3: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=)
4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3wDhadYEfX0Hhy3fPxID0nH+bbX55tStnGOk9S2bMKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:46:cb:d6:3d:19:13:bc:bb:cb:3c:1b:2a:a5:a6:39:c0:e4:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Jan 31 13:19:17 2025 GMT
Not After : Feb 1 16:48:17 2025 GMT
Subject: CN=349E7AC698738E285020C41AAB1EF02CD7CB5A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:63:30:e1:87:79:04:fa:6e:0e:d2:a7:3b:
3f:36:69:30:11:47:7b:c6:88:e4:ca:f0:ed:53:68:
0f:07:ca:31:e6:c7:b2:bc:76:5a:4d:90:35:c6:39:
60:b8:56:d4:13:5a:2d:a6:28:14:d3:cb:23:e9:ad:
0a:78:33:c0:89:a1:80:e5:bb:ef:19:90:78:53:91:
73:fa:73:69:14:15:14:b1:03:c2:19:22:06:18:19:
ef:f2:82:a9:f4:6a:e6:db:75:67:22:fd:66:f7:1b:
09:99:00:e3:53:a8:8a:a4:54:85:a1:bc:c0:84:1a:
8b:6f:24:85:85:97:9e:7c:e2:d7:6e:6e:f2:f1:e9:
53:f5:6d:b1:88:4f:5e:36:33:c3:7b:23:de:a4:c0:
4a:eb:9e:68:ee:02:1a:e9:50:75:d1:48:76:0d:82:
85:ff:18:56:09:ba:16:67:2a:51:a4:24:a2:61:c7:
e2:c4:cc:ad:dc:6c:32:05:9e:89:b9:a8:01:83:60:
4b:7b:20:97:1f:45:35:76:15:42:32:f9:25:6a:fd:
4d:b9:b3:93:0c:13:44:c6:af:aa:fd:af:83:b4:cc:
9a:42:35:ea:9f:2c:48:fc:3f:57:b0:b4:c7:66:fe:
3a:35:cc:b6:13:b4:d5:0c:30:eb:b2:d6:38:26:92:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9E:7A:C6:98:73:8E:28:50:20:C4:1A:AB:1E:F0:2C:D7:CB:5A:00
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:1d:86:43:c4:53:3e:f1:03:0d:6c:10:36:e4:0f:08:89:
3e:1a:db:42:2d:10:75:99:c3:5a:c8:dc:b6:31:c2:4f:ea:6d:
1d:e3:a4:43:56:00:ea:38:0e:e5:5c:e8:11:ad:19:ea:18:4e:
c2:e6:a9:5e:8b:60:9d:49:33:42:26:4a:03:43:a7:14:ae:c3:
52:95:30:79:da:4c:44:19:6a:37:3a:8a:7c:96:7c:8f:76:01:
32:53:74:88:71:7d:83:aa:2a:d1:f6:48:27:a3:6d:42:7a:ac:
ad:fa:92:07:ac:88:fa:69:5b:7f:00:03:f0:3d:75:ca:9f:8c:
3e:15:61:52:23:63:45:eb:c1:aa:3b:60:57:47:71:9e:66:84:
26:a2:c2:7c:e2:0f:22:73:15:f0:fa:53:29:b6:1a:e3:4d:65:
02:ea:3c:e0:0f:96:41:85:ef:20:a7:11:15:23:70:57:f1:28:
c1:74:4e:a5:c3:66:f8:d1:21:8a:60:83:3c:2c:88:dc:dd:a7:
9c:b4:ef:76:f7:4b:f1:e3:a7:1c:f5:1b:34:bf:44:89:5e:4e:
3b:6f:88:d1:9c:1d:3d:3a:a8:ce:c1:ff:31:1c:95:79:21:07:
ac:71:28:1e:ce:c2:6b:87:17:3f:75:6a:70:63:6f:24:33:c3:
5b:c6:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:39 2025 by rpki-client