Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: 6Dp9MrB+ymEuSJK3lT55XeuqRZg8Z/ekv3ncRfwuUXs=
Subject key identifier: BC:04:4E:44:79:DC:CD:50:E6:5D:6B:1A:88:22:ED:E2:AC:88:A5:BB
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 579B19DB75F7A8B5498E29C1CD920C65F49A3F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 030F
Signing time: Fri 31 Jan 2025 02:02:28 +0000
Manifest this update: Fri 31 Jan 2025 01:57:28 +0000
Manifest next update: Sat 01 Feb 2025 05:51:28 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: 2YVt+oOPfk8Ua61ekl9V8lXsDAAc/btkKj6NB2lSgfU=)
2: AS205603.asa (hash: cBPBrIrKQApvXReq5l0HPs0LV31Ya31Pj6v8h6b+N+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9b:19:db:75:f7:a8:b5:49:8e:29:c1:cd:92:0c:65:f4:9a:3f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Jan 31 01:57:28 2025 GMT
Not After : Feb 1 05:51:28 2025 GMT
Subject: CN=BC044E4479DCCD50E65D6B1A8822EDE2AC88A5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:7a:8f:b4:36:ff:95:47:0b:6d:a2:79:52:
0c:c2:d6:08:a5:b7:c7:58:2f:8c:49:93:30:43:46:
3f:fd:5d:93:3e:06:07:7d:66:80:9b:59:fe:36:85:
2d:0b:5f:54:6d:cd:cd:68:33:dd:41:63:29:37:9a:
87:d6:70:25:a8:4d:20:14:2e:a5:67:2c:d9:a6:99:
29:b3:3a:0c:26:66:e9:9a:b4:ba:be:38:2a:2c:ef:
bf:4c:60:21:b5:ad:d3:26:76:2a:2e:ad:f6:9a:18:
43:58:3d:c0:9c:70:b4:1f:09:a7:86:89:a4:fb:81:
37:01:83:01:c9:1b:e3:51:9f:7a:65:f8:2b:6b:08:
14:24:0e:90:1f:29:d2:24:bf:d7:e1:96:39:51:98:
44:99:e7:de:cc:ff:e2:b0:14:a7:03:e3:80:d5:23:
11:8b:d9:19:49:c7:a0:d5:0b:dc:2e:e4:37:4e:1e:
fe:d4:2a:e0:91:c8:44:95:ae:65:83:a0:4b:c2:9c:
5a:92:40:49:60:e0:ab:49:bb:0f:3e:92:d8:e7:17:
a2:a3:14:a1:56:98:e3:00:11:f2:5a:eb:2a:2a:8a:
d1:50:2a:73:ae:00:0c:17:79:f3:06:4c:f0:71:c8:
97:34:39:ae:b7:b7:4c:e7:d6:97:db:8c:d7:b1:df:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:04:4E:44:79:DC:CD:50:E6:5D:6B:1A:88:22:ED:E2:AC:88:A5:BB
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e8:bd:a7:e4:63:aa:61:6d:6b:25:63:8f:62:2c:9c:3f:86:
8f:a4:2a:75:95:a3:ed:d0:a1:b0:19:39:50:54:54:3c:6c:93:
d5:74:68:e7:83:49:c7:86:43:eb:35:56:8c:89:d6:4b:64:2f:
7e:38:cd:3a:aa:87:c8:9c:08:8d:a0:fd:09:5f:f6:70:2e:43:
53:7a:5b:b8:63:1e:bd:17:e6:c3:b9:03:c7:e2:f7:ae:e9:be:
c1:17:70:0d:12:ff:53:7f:c6:47:cc:f0:cb:6c:e1:9e:e0:f9:
df:9a:1f:56:82:7c:62:79:70:12:80:5e:40:89:0b:12:6c:c8:
cb:91:da:e0:f4:80:0d:76:99:b2:21:7e:50:1a:93:7a:0c:5d:
c8:54:90:e9:ed:f0:b7:f2:89:de:a7:53:9e:10:f6:30:60:9c:
07:d7:18:39:2b:83:07:f3:fc:40:83:38:10:39:27:57:5f:1e:
84:cf:cb:04:47:b9:2b:78:a2:92:c7:fc:32:f1:11:ed:bf:e7:
d9:5c:27:fa:82:ef:f0:f9:20:f3:a5:3b:e7:1b:b2:45:fa:cc:
9b:8d:6f:51:cc:3a:24:70:ac:e8:8b:20:5b:6d:70:3a:2d:ac:
e6:61:29:97:d7:47:d2:ec:5e:09:e2:bd:cd:67:f6:05:aa:60:
cc:ec:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:32 2025 by rpki-client