Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: tcWWV1HqC6jEA70KJWJRa2zjz9bkWfbNrfY55MPPrkU=
Subject key identifier: 8C:CA:68:05:E4:77:99:4E:2C:47:D7:67:A9:87:04:76:B6:BB:51:B1
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 4ED42B4ECFCB7E3891C8D5AEAF1483323934B5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 012D
Signing time: Fri 31 Jan 2025 06:53:33 +0000
Manifest this update: Fri 31 Jan 2025 06:48:33 +0000
Manifest next update: Sat 01 Feb 2025 07:41:33 +0000
Files and hashes: 1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: P1UQbAy2ZtNGjImzX2u+S0Dher2nrVTbhNKwvUWIUd0=)
2: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d4:2b:4e:cf:cb:7e:38:91:c8:d5:ae:af:14:83:32:39:34:b5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Jan 31 06:48:33 2025 GMT
Not After : Feb 1 07:41:33 2025 GMT
Subject: CN=8CCA6805E477994E2C47D767A9870476B6BB51B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:01:c0:38:0f:c0:2b:c2:b4:6f:d9:22:27:
84:22:bb:78:f1:8c:7f:25:1a:79:60:f0:83:ac:2e:
ee:1b:ef:ca:f5:7b:8e:53:46:b4:f1:1e:58:03:b2:
c4:c5:97:6a:e0:6b:55:98:26:b4:25:8c:5e:f7:60:
c7:9c:fc:2c:63:5c:89:5a:80:7d:e5:4f:45:3b:2d:
5a:dd:20:c5:16:36:55:c0:45:47:4c:e6:46:4b:23:
95:11:e8:35:01:22:c2:35:18:c4:f0:85:8a:96:31:
75:4a:d4:5b:b4:b7:66:18:b0:ec:32:6a:b0:84:55:
63:6e:1a:1f:2a:20:9d:65:74:02:f6:5b:58:d2:05:
9a:27:7d:94:e8:83:aa:ca:6d:40:c4:5e:49:68:5d:
9c:85:34:b0:fb:7e:69:a5:b5:da:ce:13:d4:47:ef:
73:40:a3:e7:07:53:28:bf:66:d2:58:c9:f9:0e:1a:
1f:00:73:90:12:01:e8:ef:80:77:91:ad:30:26:62:
a0:37:6f:dd:52:2f:bc:ff:d2:cb:15:1f:55:e2:c9:
6a:9f:da:e1:94:d0:9e:e7:c5:7b:02:a0:98:ce:5b:
c4:98:b3:68:ff:1c:34:1a:91:89:40:45:5f:cd:b6:
7c:72:3a:e6:31:ef:4f:ff:d2:81:c9:a3:b6:f8:20:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:68:05:E4:77:99:4E:2C:47:D7:67:A9:87:04:76:B6:BB:51:B1
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:27:1b:ff:c8:31:e9:4c:08:5e:b2:13:3a:05:39:4b:5d:72:
6f:68:2e:a7:b0:e2:6f:05:e5:bf:40:8c:dc:06:89:24:e2:23:
e2:3d:72:1b:1e:a0:36:3a:b7:cf:af:13:59:97:85:a1:cf:e7:
e5:7f:1b:a1:d3:b7:e8:d4:be:e6:a8:93:f5:37:0c:78:09:73:
3a:24:fc:e3:42:63:dd:75:bf:59:fa:c4:6f:95:b2:5f:d9:7c:
aa:fd:e5:b4:6f:09:2c:0f:e8:a7:1d:82:c5:cd:95:65:22:31:
a3:a2:cc:64:dd:46:33:1e:25:4f:84:7d:bf:72:03:07:54:27:
d1:2d:ac:0c:ca:0a:61:36:3e:d7:c4:21:52:5a:37:64:e1:24:
a7:02:8f:4f:a5:e9:a1:dc:1f:d6:9a:67:d8:39:a3:b5:19:3d:
ab:05:74:87:86:df:f7:5b:e5:6e:37:9c:75:be:a0:6f:cb:68:
b7:52:29:cd:9b:9d:a7:0c:b5:22:d1:58:e3:80:58:4d:75:b6:
92:ac:9a:1f:64:83:54:dd:6d:7e:bc:94:07:66:15:3d:af:57:
ff:47:d6:95:8e:06:85:de:32:b3:56:e8:f0:8b:6c:c4:c0:6b:
e6:71:db:66:f2:9f:54:68:04:41:01:92:23:69:24:d8:f8:55:
f2:ec:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:41 2025 by rpki-client