Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft
File: 103734D89B107354F2D009D6E780AAC0BCE606C0.mft (raw, json)
Hash identifier: UU2SFJxRIPNOYuPqpJjJVLKUQ2D36xPad9BdYvprzTM=
Subject key identifier: BD:9F:67:7C:B6:A2:56:2D:57:2F:34:9A:80:8A:45:E9:87:C3:F8:48
Authority key identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
Certificate issuer: /CN=103734D89B107354F2D009D6E780AAC0BCE606C0
Certificate serial: 60B771E23281C3084E07462D7DEF5F27558438B0
Authority info access: rsync://rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft
Manifest number: 0177
Signing time: Sat 06 Jan 2024 15:48:04 +0000
Manifest this update: Sat 06 Jan 2024 15:43:04 +0000
Manifest next update: Sun 07 Jan 2024 18:19:04 +0000
Files and hashes: 1: 326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa (hash: v7uk7r4lnrI8cDuWEq3C7+fNMNZz6Dk5obG3oa0aP/Q=)
2: 103734D89B107354F2D009D6E780AAC0BCE606C0.crl (hash: AI4nzO0KMXP1U8mSwxIw0wXNq5wpnDpS9TGkoVx9UqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b7:71:e2:32:81:c3:08:4e:07:46:2d:7d:ef:5f:27:55:84:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103734D89B107354F2D009D6E780AAC0BCE606C0
Validity
Not Before: Jan 6 15:43:04 2024 GMT
Not After : Jan 7 18:19:04 2024 GMT
Subject: CN=BD9F677CB6A2562D572F349A808A45E987C3F848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:01:26:af:65:8a:35:7a:41:8f:df:6b:81:
6f:d6:dc:60:19:07:b4:78:80:4e:98:c9:11:85:ca:
07:b6:e6:91:6e:53:db:47:cb:4c:6c:67:b3:37:f3:
6d:c8:09:15:1e:d8:69:28:ee:01:69:27:50:3e:54:
8a:85:68:df:05:85:0d:1b:2e:1f:69:2f:3b:ef:ad:
26:27:82:74:5c:d6:0c:3d:7b:bb:08:00:7d:57:94:
50:9c:c4:97:39:3e:4b:32:a6:e4:03:0e:b4:5b:c9:
8d:29:3e:fc:bd:9b:ce:1c:29:34:29:31:78:e4:16:
46:02:29:53:1f:84:ed:b9:c8:37:aa:4d:07:f8:94:
20:18:15:a8:a3:73:0a:cd:ec:b5:74:d0:df:71:c7:
07:c1:1c:80:41:c0:51:17:10:52:67:9f:75:4e:56:
60:fc:d8:14:9f:bc:de:8c:24:e8:87:57:2d:10:a2:
9a:e3:e4:25:bb:28:8a:da:51:b5:38:b9:b2:4f:1b:
99:87:1d:c2:4f:be:56:cb:2e:dc:18:e4:57:c3:79:
93:a2:bb:eb:ce:65:ab:20:0d:15:aa:a5:57:97:b7:
9f:11:2c:4c:00:e2:63:86:94:32:85:da:ce:fe:b0:
2e:43:67:73:45:03:b9:9f:47:29:79:7c:2b:44:14:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:67:7C:B6:A2:56:2D:57:2F:34:9A:80:8A:45:E9:87:C3:F8:48
X509v3 Authority Key Identifier:
keyid:10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:17:2a:8d:cf:7a:71:85:cb:1d:d8:0c:fd:9e:9f:0f:b0:d8:
f9:d1:c5:22:36:31:17:59:6c:fd:74:cf:e4:f5:e1:c6:5d:12:
1f:1d:3c:1d:6e:28:de:1a:2c:a2:87:65:02:08:d4:c9:ca:79:
3b:4e:e6:67:49:9b:5a:1e:c3:c2:1c:ca:9d:ca:e0:2c:4a:36:
f4:a2:03:3a:76:14:9e:81:1d:2b:a5:19:90:53:11:ce:d5:85:
14:b1:9e:2e:e5:b0:64:0e:66:ba:32:7c:0c:9e:59:7c:70:c2:
93:8b:36:a9:8f:a5:21:24:21:51:9d:c3:14:af:b5:8f:e2:8d:
96:9d:83:1a:ae:f8:d1:27:42:69:dc:ea:65:e7:c7:dd:9f:75:
a0:65:41:35:22:98:4a:fc:dd:f3:bd:4c:01:03:8c:27:1b:db:
ef:2b:da:37:28:04:e5:b9:30:7e:93:c0:ea:b5:e4:da:a5:9f:
b0:13:c8:93:41:90:80:18:f5:bd:41:42:38:40:2d:98:f2:5a:
d1:7f:d2:95:1b:cf:02:e3:a0:2c:c8:32:78:88:d5:55:e3:a4:
46:e1:70:3c:b8:94:55:24:14:9f:7f:56:4e:47:c8:44:a8:6c:
68:15:1b:83:d6:96:bc:01:da:f5:75:24:45:02:d9:cb:6b:e1:
72:5d:10:d9
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUYLdx4jKBwwhOB0Ytfe9fJ1WEOLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzNzM0RDg5QjEwNzM1NEYyRDAwOUQ2RTc4MEFBQzBC
Q0U2MDZDMDAeFw0yNDAxMDYxNTQzMDRaFw0yNDAxMDcxODE5MDRaMDMxMTAvBgNV
BAMTKEJEOUY2NzdDQjZBMjU2MkQ1NzJGMzQ5QTgwOEE0NUU5ODdDM0Y4NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4gEmr2WKNXpBj99rgW/W3GAZ
B7R4gE6YyRGFyge25pFuU9tHy0xsZ7M3823ICRUe2Gko7gFpJ1A+VIqFaN8FhQ0b
Lh9pLzvvrSYngnRc1gw9e7sIAH1XlFCcxJc5PksypuQDDrRbyY0pPvy9m84cKTQp
MXjkFkYCKVMfhO25yDeqTQf4lCAYFaijcwrN7LV00N9xxwfBHIBBwFEXEFJnn3VO
VmD82BSfvN6MJOiHVy0Qoprj5CW7KIraUbU4ubJPG5mHHcJPvlbLLtwY5FfDeZOi
u+vOZasgDRWqpVeXt58RLEwA4mOGlDKF2s7+sC5DZ3NFA7mfRyl5fCtEFNFrAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUvZ9nfLaiVi1XLzSagIpF6YfD+EgwHwYDVR0j
BBgwFoAUEDc02JsQc1Ty0AnW54CqwLzmBsAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzMvMTAzNzM0RDg5QjEwNzM1NEYyRDAwOUQ2RTc4MEFBQzBCQ0U2MDZDMC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28v
cmVwby9BUzk0NS8xLzEwMzczNEQ4OUIxMDczNTRGMkQwMDlENkU3ODBBQUMwQkNF
NjA2QzAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGU3ZDU1Zjct
ZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzMvMTAzNzM0RDg5QjEwNzM1NEYy
RDAwOUQ2RTc4MEFBQzBCQ0U2MDZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJIXKo3PenGFyx3YDP2e
nw+w2PnRxSI2MRdZbP10z+T14cZdEh8dPB1uKN4aLKKHZQII1MnKeTtO5mdJm1oe
w8Icyp3K4CxKNvSiAzp2FJ6BHSulGZBTEc7VhRSxni7lsGQOZroyfAyeWXxwwpOL
NqmPpSEkIVGdwxSvtY/ijZadgxqu+NEnQmnc6mXnx92fdaBlQTUimEr83fO9TAED
jCcb2+8r2jcoBOW5MH6TwOq15Nqln7ATyJNBkIAY9b1BQjhALZjyWtF/0pUbzwLj
oCzIMniI1VXjpEbhcDy4lFUkFJ9/Vk5HyESobGgVG4PWlrwB2vV1JEUC2ctr4XJd
ENk=
-----END CERTIFICATE-----
Generated at Mon May 26 03:55:20 2025 by rpki-client