Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier: nHANUWhrxMa0y1VQY4XxvPjZ/QTSnd5M+giLecfDId0=
Subject key identifier: 3D:15:0A:17:34:DF:BF:12:6F:0A:74:D9:84:19:FD:61:A8:44:2C:6A
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial: 33E7D1EC380843146F11DA46CFFB7AC34A3A1708
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number: 0D
Signing time: Fri 31 Jan 2025 04:51:56 +0000
Manifest this update: Fri 31 Jan 2025 04:46:56 +0000
Manifest next update: Sat 01 Feb 2025 07:42:56 +0000
Files and hashes: 1: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=)
2: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=)
3: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=)
4: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=)
5: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=)
6: 326131343a373538313a323030303a3a2f34302d3430203d3e20343031333836.roa (hash: WFUH2iQtAwQ7iI2iexnUk2ty6+pZTlY1YwlIf0QItgo=)
7: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: S/fwgJhxtVleYqtFrv1DFw+NTxNgGecunebxF3cZ9s4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e7:d1:ec:38:08:43:14:6f:11:da:46:cf:fb:7a:c3:4a:3a:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Validity
Not Before: Jan 31 04:46:56 2025 GMT
Not After : Feb 1 07:42:56 2025 GMT
Subject: CN=3D150A1734DFBF126F0A74D98419FD61A8442C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:fd:28:a6:b0:91:db:77:d5:9d:46:d4:14:
16:f5:52:d7:32:30:a7:92:aa:7f:a1:c6:82:e4:77:
70:62:a6:a9:43:bd:07:20:76:fa:c6:e4:16:13:2f:
f9:f8:af:d0:98:aa:fc:27:af:5f:69:14:0b:a8:e8:
3c:9e:30:70:3e:ec:be:20:fe:75:c0:dc:d2:15:17:
2e:5c:d7:8c:c0:d7:22:7a:32:21:e5:6a:5b:66:c5:
77:a0:61:16:a5:f8:fc:a0:ff:77:06:a7:b2:54:95:
c6:5d:8d:9d:ea:dc:3e:f4:52:42:17:11:c1:9b:b5:
2b:7e:5f:6b:34:af:ee:91:40:09:de:de:87:cd:25:
76:91:bc:f2:bb:a2:7a:39:06:c1:f3:a7:50:15:06:
7a:3e:44:11:9e:4d:87:8e:5c:c5:1d:cd:db:49:f7:
41:96:32:48:2e:36:11:0b:8a:db:b1:53:94:72:c4:
45:2f:44:f9:02:27:65:ed:f4:91:1a:7d:d5:f7:23:
7c:98:42:2e:17:a0:be:93:fe:e2:58:6e:01:1c:b1:
c2:33:ec:ce:8a:85:0f:11:aa:ce:1e:42:27:19:c7:
4e:85:83:9a:9b:61:1e:42:b9:8c:86:fa:d0:09:54:
3b:57:38:81:f2:77:e3:fb:a4:3a:58:09:49:e5:5d:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:0A:17:34:DF:BF:12:6F:0A:74:D9:84:19:FD:61:A8:44:2C:6A
X509v3 Authority Key Identifier:
keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ee:4a:2d:59:c4:82:cc:8b:80:54:b9:53:1c:c9:cd:ff:5b:
5c:60:2c:ca:ca:79:9a:ed:7b:ec:05:ae:b8:8c:67:24:d9:3f:
f7:8e:cd:7c:1c:c6:6e:08:ca:a0:e4:cd:35:a1:ea:9c:35:99:
03:75:1d:48:97:d3:79:67:15:a2:97:5f:0c:71:74:b7:1f:91:
d0:40:75:b7:44:77:fb:e0:46:94:5e:1e:69:16:45:d4:ec:89:
c5:fe:d3:cb:f3:ee:8f:ef:72:28:41:fe:ab:df:3e:86:16:48:
4a:22:0b:8b:90:7c:69:f7:e2:ca:0f:fb:31:40:fa:8c:38:f9:
5e:d5:f2:09:80:4e:50:d7:e1:8a:3b:e7:55:51:07:ae:c8:02:
7f:69:80:75:db:d9:81:bc:a2:be:98:f6:b0:d8:5e:c6:f2:65:
72:24:fb:95:8e:2e:49:f2:a4:94:db:d5:ce:aa:d4:b6:7b:9f:
52:31:20:e8:50:fd:6b:b5:c2:4d:df:96:3f:04:9a:2b:1c:da:
e4:68:79:4c:ef:2f:b2:0e:85:96:24:e2:3e:0a:05:9d:07:6e:
b9:a2:7e:1e:5a:01:65:f1:84:68:ff:c5:62:f8:58:9d:0e:1c:
13:a4:63:c7:a4:e8:2a:ac:07:64:a6:87:cc:fe:27:f1:aa:e1:
49:47:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:28:57 2025 by rpki-client