Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
File: 775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft (raw, json)
Hash identifier: iFY/Nqs5DUljscPLEjpNgqqn58UP4WgHFfJQms0eiIY=
Subject key identifier: 5B:84:73:52:2A:BE:47:0A:5D:DD:6C:C4:68:7F:F4:C1:0A:FD:C2:07
Authority key identifier: 77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B
Certificate issuer: /CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
Certificate serial: 3AAFA33ADE7AE3EB74C92C52C42055B0FF9625AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
Manifest number: 03
Signing time: Fri 31 Jan 2025 09:47:29 +0000
Manifest this update: Fri 31 Jan 2025 09:42:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: AS213768.asa (hash: STN7/gpSTzTnV+2a1yuX1MKiPFhViLW1NgtMlmyfpUI=)
2: 775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl (hash: i0ZkDT983Zq8qxjlDcdWC3L9ZJKkTzMoe0nXsc9XeeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:af:a3:3a:de:7a:e3:eb:74:c9:2c:52:c4:20:55:b0:ff:96:25:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
Validity
Not Before: Jan 31 09:42:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=5B8473522ABE470A5DDD6CC4687FF4C10AFDC207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:0c:fc:4a:98:bf:5c:b9:28:a3:48:62:ad:
25:61:48:3f:e6:f7:5a:c8:fe:78:d0:60:8e:ed:d4:
ab:88:5a:ec:60:c5:52:73:7a:28:d7:23:a3:3f:a4:
99:30:e8:c5:04:b1:3e:a7:c7:59:12:80:a9:91:85:
a8:0a:c0:42:40:01:16:c3:d0:e2:e5:e7:12:2f:4a:
81:bb:fc:b5:82:a8:ed:e7:57:0b:97:be:9f:b3:f0:
e7:9f:f3:25:a0:a5:dd:21:33:8b:16:8b:a5:5e:8f:
0b:84:27:3d:d5:08:08:ba:35:a0:11:05:13:6a:60:
3c:3f:a9:65:c1:37:e6:84:37:39:d9:f4:7e:f3:5a:
71:9c:4f:1b:52:92:df:ac:c8:d3:69:b9:c4:ce:1c:
16:b9:d6:28:a7:02:28:d7:c4:c6:a8:4d:9f:60:ab:
bd:80:91:a2:e4:e6:e5:62:9b:2d:7e:8a:6f:6f:e1:
53:73:27:c6:59:52:9e:f3:d3:52:13:55:6f:05:4a:
2c:c1:23:5a:f8:ab:17:c6:72:f2:10:80:bb:2f:8d:
ae:da:77:f2:fd:fd:da:5d:6d:78:62:09:84:5d:0a:
10:03:09:82:1b:af:c9:51:8e:1b:88:27:e0:1e:7e:
aa:62:04:88:2f:ff:e3:85:b5:89:92:b3:07:09:a0:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:73:52:2A:BE:47:0A:5D:DD:6C:C4:68:7F:F4:C1:0A:FD:C2:07
X509v3 Authority Key Identifier:
keyid:77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b0:ed:dd:ae:c7:81:23:99:5f:e2:86:dc:a2:ed:1f:12:91:
af:e3:dd:07:2c:e6:77:f0:14:4f:46:19:46:2c:8e:a0:d2:9f:
f3:34:f9:26:4e:e5:fe:a9:80:d7:a7:80:79:af:a0:1b:76:fb:
81:0a:3f:6c:f2:57:c9:31:5c:d8:d6:64:71:9e:e5:4b:fd:5b:
b2:f1:38:41:36:c6:09:26:fd:0f:03:92:90:fa:3c:a3:b5:f8:
da:07:60:d3:bb:3c:07:6c:66:92:38:ee:05:4d:a0:b2:2c:52:
3a:4e:15:d9:01:7b:cc:96:b9:36:d3:82:7b:41:0c:c3:e3:98:
11:71:37:1f:d4:64:af:15:00:90:92:5e:dc:c9:89:26:1f:7c:
4d:ed:31:ad:e7:14:78:e1:83:03:2d:fa:0f:20:5f:af:75:7d:
26:7f:ba:92:38:e5:d0:f3:45:e1:6f:0a:1c:66:e2:2a:c6:ec:
fe:b9:b8:6d:d7:8f:5b:aa:44:73:a8:39:5f:43:b5:c6:e8:b6:
b9:df:cd:1a:78:7e:41:d5:46:55:17:0e:3b:42:f1:af:63:65:
13:fd:06:59:8c:ec:99:b6:6a:1d:45:f9:62:38:94:f2:57:2a:
7c:65:ae:92:e5:1d:5f:d3:8e:5f:7e:31:43:4f:45:cb:f8:52:
63:b8:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:16:23 2025 by rpki-client