Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.mft
File: 714ABB77D5246E14D8E5D98A14657391026964C0.mft (raw, json)
Hash identifier: nOqlCLHPwH/0mgzCxgmrZob2VxjK2BBrtgd2jvPEvpA=
Subject key identifier: B1:38:F4:97:3D:89:EC:F5:E1:CE:4B:80:A1:53:45:95:85:0A:B9:F0
Authority key identifier: 71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
Certificate issuer: /CN=714ABB77D5246E14D8E5D98A14657391026964C0
Certificate serial: 1907107076D7DF0C7F83F6965BC98BEB54D1F711
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/714ABB77D5246E14D8E5D98A14657391026964C0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.mft
Manifest number: 03
Signing time: Fri 21 Apr 2023 03:34:08 +0000
Manifest this update: Fri 21 Apr 2023 03:29:08 +0000
Manifest next update: Sat 22 Apr 2023 07:13:08 +0000
Files and hashes: 1: 323630323a666166643a6630313a3a2f34382d3438203d3e20323034383537.roa (hash: 0vpMc5vKW8WuAkEKzjHJE+nUQB/BX9q3DQNtrqB1Mdw=)
2: 323630323a666166643a6630313a3a2f34382d3438203d3e203530323234.roa (hash: Fa129p51wDBrWHUjq0HCFF+cLzjS+HjcGt8SQokQX8o=)
3: 714ABB77D5246E14D8E5D98A14657391026964C0.crl (hash: 8YTU7JlVyt3tUB5uPJTClBrck4NkuqBGSUzALXYElK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:07:10:70:76:d7:df:0c:7f:83:f6:96:5b:c9:8b:eb:54:d1:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=714ABB77D5246E14D8E5D98A14657391026964C0
Validity
Not Before: Apr 21 03:29:08 2023 GMT
Not After : Apr 22 07:13:08 2023 GMT
Subject: CN=B138F4973D89ECF5E1CE4B80A1534595850AB9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:d0:25:37:72:1d:b8:eb:9d:79:26:ac:d4:
c3:72:a6:d0:b6:19:79:7e:06:62:c9:65:5b:20:02:
e7:d9:bd:ba:d5:3d:91:3d:5f:fb:eb:cc:de:26:b6:
aa:56:87:b6:e2:f3:c7:79:32:25:60:da:78:77:9d:
35:ef:78:89:dd:85:2c:d8:1d:ec:4e:06:b5:3a:c3:
bf:51:6b:b9:f8:a8:32:d0:9c:94:3e:f2:b7:f2:98:
4e:38:40:8f:75:99:10:3e:af:1e:c0:bb:6d:b1:a8:
00:95:06:b6:da:19:80:56:61:6e:07:e7:b2:bb:44:
89:55:63:1e:4f:3a:d0:c9:17:dd:9f:5c:d2:a6:a1:
92:94:22:c4:cf:dd:82:74:02:f9:9e:d3:1b:10:11:
c5:fd:e0:74:d8:b2:c1:80:eb:53:e7:4a:f5:46:56:
7f:b8:c9:9f:fd:9a:eb:53:6d:fe:92:07:1c:86:c5:
98:60:2c:9a:40:fb:a2:70:c7:cf:cb:c6:52:f9:3d:
37:b8:21:ef:24:77:fd:ea:b1:07:bd:33:b9:d1:63:
9e:70:bb:d1:7c:dc:6b:7c:f8:85:02:f1:0b:77:e2:
1f:2c:38:97:85:2b:46:ee:d5:53:d1:43:c0:aa:9a:
df:dd:30:cf:89:6d:05:00:8a:d8:57:db:f2:23:0e:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:38:F4:97:3D:89:EC:F5:E1:CE:4B:80:A1:53:45:95:85:0A:B9:F0
X509v3 Authority Key Identifier:
keyid:71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/714ABB77D5246E14D8E5D98A14657391026964C0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:25:f5:a9:9c:77:6d:93:d0:e4:47:78:fb:c5:b3:39:ff:8d:
8f:86:bd:9e:29:d9:8e:a3:3f:2d:4f:61:6f:ac:8f:25:46:c2:
3b:7e:22:d3:44:df:f5:e3:5a:1e:25:4a:3a:c8:d3:a1:2c:b3:
8e:e0:fa:a2:74:8c:1e:ee:ec:e6:89:ad:e8:df:8f:aa:75:42:
0a:7a:f9:64:8f:a9:39:87:51:c3:03:89:75:55:e8:3b:f6:ce:
11:ef:db:c4:bb:9d:27:89:ea:e9:78:f4:51:18:c3:83:30:fd:
3e:da:48:b6:ad:68:ca:65:18:28:b6:52:20:17:ca:81:ea:43:
a3:75:9b:80:92:d3:19:bd:66:91:bd:df:00:2c:9c:8a:85:d0:
99:97:45:05:97:73:d7:63:45:c4:68:4e:f3:0a:72:fd:10:6c:
48:17:b7:44:8e:b6:41:16:d9:bc:d6:6a:30:46:75:fb:21:f2:
b9:9a:a8:c5:ee:d6:6d:83:42:c3:a0:d0:23:fa:07:2d:b5:74:
7b:ea:11:57:b6:95:56:95:84:39:e5:c1:ff:63:01:3c:86:e8:
60:86:6f:36:a5:3b:61:ac:9e:13:cc:05:14:d2:25:38:95:4f:
4e:c7:ed:a0:e2:57:64:ff:32:cd:94:d0:54:a7:d0:b2:60:db:
65:6c:ba:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:22:11 2025 by rpki-client