Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
File: B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json)
Hash identifier: YGKa2Alkb3w6MZfwPBukGy/pxNXiLgkFwJcu1cE5TU4=
Subject key identifier: 24:34:99:87:20:C2:67:E9:FA:CC:0F:BC:A3:D7:EA:CD:D9:3A:7A:3B
Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Certificate issuer: /CN=b056811cb944a23c757f57affd483c6fcfb80119
Certificate serial: 73E6D86907C112CB740C7245F42FCB8BE59A77AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
Manifest number: 0B52
Signing time: Fri 31 Jan 2025 16:45:35 +0000
Manifest this update: Fri 31 Jan 2025 16:40:35 +0000
Manifest next update: Sat 01 Feb 2025 20:19:35 +0000
Files and hashes: 1: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: EEac3OUGxrGGsPsOoKSe5NULe3pVgiQzz/kaBB2QHBQ=)
2: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e6:d8:69:07:c1:12:cb:74:0c:72:45:f4:2f:cb:8b:e5:9a:77:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119
Validity
Not Before: Jan 31 16:40:35 2025 GMT
Not After : Feb 1 20:19:35 2025 GMT
Subject: CN=2434998720C267E9FACC0FBCA3D7EACDD93A7A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:98:f0:cf:73:46:d5:f7:c6:c6:6f:73:88:
3b:15:c3:ca:4c:8c:1b:4d:a0:13:94:0e:9c:35:d1:
9a:dd:6d:bf:48:88:84:1b:bf:6d:96:3d:16:da:46:
6e:52:3e:9a:8b:e4:fe:50:0f:08:43:78:ed:8e:d0:
24:90:b3:5d:8d:25:66:38:cf:ca:ba:67:37:74:d0:
d4:db:e3:9f:bd:be:2e:23:0b:f6:5c:58:0d:5e:4c:
15:eb:57:7c:65:86:46:b3:41:1e:a4:98:50:e1:34:
11:f9:1d:59:1d:93:f2:27:6e:6b:a3:55:44:b2:b6:
7b:cb:cc:2d:b5:51:b6:d7:90:d4:78:5f:f7:e8:6e:
c7:63:f5:23:65:fc:0f:1a:05:14:f1:4c:68:9a:57:
9d:26:98:ce:d7:2f:fb:e4:7f:da:f1:09:ae:35:60:
5a:66:b1:cc:df:83:3d:cb:ab:b5:27:c0:64:b2:9a:
05:04:2d:b4:fc:1e:6d:4f:8c:99:3a:1c:8e:d4:14:
05:ab:83:fd:ee:2d:c7:1d:bf:3e:39:6a:77:49:a3:
21:8f:db:0e:7e:c3:c5:1c:54:5d:b3:75:c9:3e:5f:
3f:82:04:40:cb:b4:9b:d1:11:b0:e1:29:97:a6:01:
b0:94:62:8a:74:79:d3:7f:41:02:d0:ca:f5:16:64:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:99:87:20:C2:67:E9:FA:CC:0F:BC:A3:D7:EA:CD:D9:3A:7A:3B
X509v3 Authority Key Identifier:
keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:32:50:dd:e3:a9:a6:a3:5d:cc:1f:f5:36:07:4e:dc:7f:ad:
d3:17:01:aa:43:b4:2f:d0:48:64:df:e5:d4:c9:46:6c:3e:1e:
a8:07:5a:2b:75:da:ed:26:b1:e1:6f:88:fb:c1:df:19:38:f8:
ac:c8:06:cf:2a:92:61:25:ee:b5:a0:a5:12:59:ab:96:ba:e7:
95:82:6c:da:0b:76:54:66:45:ac:ab:03:26:50:0f:5b:68:32:
2c:b5:bd:bc:95:de:68:62:a0:f7:46:b5:fe:bb:99:7d:6f:d6:
7c:d7:39:d1:a3:44:ad:cf:9c:44:a5:d7:c1:70:0e:ca:04:a1:
66:fd:f9:e4:79:97:3b:3a:77:fe:99:b4:cf:e4:19:f2:f6:0b:
bc:fd:dc:98:2a:14:f4:69:ae:d2:c2:53:50:96:20:a4:09:39:
54:89:cf:ed:9c:ff:39:f3:b3:6a:14:ed:a9:13:81:ae:b6:a5:
9b:61:05:47:fc:32:6d:88:af:ae:40:4c:97:47:eb:32:d6:9f:
e0:b7:6b:ee:be:06:21:74:3c:7a:d4:13:64:ce:94:4a:d0:0e:
a9:00:62:bc:9c:98:14:ea:65:af:46:71:50:fd:9e:5f:51:4d:
f0:0a:da:24:af:d3:16:90:33:47:ee:17:39:f3:5c:a0:66:94:
79:49:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:35 2025 by rpki-client