Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier: YZZEKyvq/jEGo/mfwtyLEweqddZNLX0cVNxlkEzGFJ0=
Subject key identifier: 21:3C:4C:E7:11:AA:9B:13:98:63:62:BF:E8:B9:AA:BB:26:86:E1:F5
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial: 323DD424099359DBC6E48BC81DA804BD41FE184E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number: 01CF
Signing time: Fri 31 Jan 2025 04:00:57 +0000
Manifest this update: Fri 31 Jan 2025 03:55:57 +0000
Manifest next update: Sat 01 Feb 2025 07:10:57 +0000
Files and hashes: 1: 3138352e3232392e3230372e302f32342d3234203d3e203538303631.roa (hash: eMEaJUhKjzifHfRSQ+k4fEgpWBIPjheGZTeseXumKH8=)
2: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: Yg6r4s+cCLaz1gVID/U17VTfp9FEAHgg91sjOb+KyTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3d:d4:24:09:93:59:db:c6:e4:8b:c8:1d:a8:04:bd:41:fe:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Validity
Not Before: Jan 31 03:55:57 2025 GMT
Not After : Feb 1 07:10:57 2025 GMT
Subject: CN=213C4CE711AA9B13986362BFE8B9AABB2686E1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:82:dc:99:1e:9f:64:40:0f:26:0a:62:99:
2c:ab:ff:25:46:ef:ec:22:9f:c7:36:57:6b:0a:ee:
7e:35:b5:e4:a1:88:b2:c1:a9:a2:5d:c1:8d:95:d4:
12:e5:a3:0d:47:46:8d:f3:dc:da:b1:4a:d9:fa:d1:
9c:37:3a:00:a1:13:d0:b3:55:e7:f4:52:da:f8:d6:
c9:54:5c:5e:c0:64:3c:9f:04:07:25:68:e7:76:d7:
28:1a:b9:64:bc:35:aa:04:ff:27:e9:bd:e1:64:3f:
a8:57:37:ce:2d:45:f8:08:2e:78:75:2d:6e:a1:0f:
3a:dd:9e:cd:a8:f9:f0:f6:5e:e5:db:b9:ba:d5:51:
f9:f5:06:c2:e8:1d:5e:98:2b:e2:63:52:71:b7:b0:
f8:90:15:eb:6f:f3:81:4f:5d:d2:93:67:30:94:21:
25:e6:ee:f2:4b:80:fc:66:44:d4:e9:99:ad:ec:e2:
93:a0:c6:67:97:58:03:82:fd:2e:98:b9:3a:4a:6e:
e2:d9:4e:ed:47:3e:ea:0f:ed:17:01:f5:8b:a6:95:
48:fb:84:02:bf:d5:6a:62:f0:82:9f:7e:49:c4:d7:
6e:29:c7:e2:ce:74:80:f1:09:c7:5f:9f:eb:17:ae:
ce:92:84:25:5f:22:51:84:3e:5f:d4:60:db:b5:41:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:4C:E7:11:AA:9B:13:98:63:62:BF:E8:B9:AA:BB:26:86:E1:F5
X509v3 Authority Key Identifier:
keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5a:a2:71:81:b5:59:70:12:03:31:b0:de:4d:8f:e6:6f:e2:
6c:41:b7:4f:b1:c6:53:f4:c7:f0:93:5e:b4:27:7b:15:a7:e4:
3e:b3:ed:8c:8b:6b:77:cd:b8:45:1f:03:af:39:ed:1f:42:96:
e4:98:e7:02:7c:dd:2b:57:1a:a6:ee:52:3a:b0:2e:a1:02:b9:
a9:4e:95:30:63:b5:8d:ee:20:f6:d8:70:9e:b1:ac:48:4e:21:
7f:a2:80:d7:b4:85:65:86:a5:2f:81:ac:fb:90:12:55:a6:af:
20:81:ab:e0:01:aa:45:d1:73:32:35:79:20:24:08:fd:a8:eb:
b5:5e:66:52:17:55:01:85:15:0e:42:06:9e:44:48:dd:5b:23:
da:5e:80:1d:37:27:9c:a8:a3:de:ab:1e:ae:bb:30:05:b1:2d:
59:cc:81:f4:e6:64:e0:1e:5b:f7:65:24:08:c3:a6:57:30:92:
93:fd:e2:82:73:d2:61:55:41:a4:51:4d:1c:ab:92:54:e8:00:
3c:8c:76:77:49:03:1e:81:06:11:70:72:d1:5a:68:1a:9f:13:
cd:05:b9:44:92:e1:8a:ff:b1:ba:ab:57:75:c9:e3:43:34:16:
73:f5:b7:ea:c3:08:e7:26:b9:e7:5a:58:fb:e0:1e:3f:94:c8:
88:0a:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:42 2025 by rpki-client