Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
File: 677F663CDAA5996868019B05D109BAAD3558BE3A.mft (raw, json)
Hash identifier: jtZr11ZpT6IlsO1FCiX7Wi9/1mANF4v64FwaeRjRobA=
Subject key identifier: ED:DB:5C:BC:B6:B2:F4:E1:16:D2:AF:95:DD:26:BE:46:58:2C:26:0C
Authority key identifier: 67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A
Certificate issuer: /CN=677f663cdaa5996868019b05d109baad3558be3a
Certificate serial: 60C13ADF4E2C7754840B47E1C44BED31B8836D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
Manifest number: 020C
Signing time: Sun 19 Jan 2025 15:35:36 +0000
Manifest this update: Sun 19 Jan 2025 15:30:36 +0000
Manifest next update: Mon 20 Jan 2025 16:45:36 +0000
Files and hashes: 1: 677F663CDAA5996868019B05D109BAAD3558BE3A.crl (hash: EuUMLlIq5XslCmsLh6kJtozxUyFebZ2Fjpl5da6b9/c=)
2: AS200454.asa (hash: w+51MVcJkoUD9Q4KBkqz3noB47lpiLjozmRyEEeC6Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c1:3a:df:4e:2c:77:54:84:0b:47:e1:c4:4b:ed:31:b8:83:6d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677f663cdaa5996868019b05d109baad3558be3a
Validity
Not Before: Jan 19 15:30:36 2025 GMT
Not After : Jan 20 16:45:36 2025 GMT
Subject: CN=EDDB5CBCB6B2F4E116D2AF95DD26BE46582C260C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:ab:82:d4:c1:a5:ce:a2:ac:03:68:35:76:
55:99:da:56:20:d9:60:14:bd:47:af:ef:29:3c:75:
b7:6e:49:fc:2b:ff:4c:70:6e:b0:22:39:9d:dd:1c:
1e:c2:3d:23:3e:d1:5b:50:7a:b9:11:c1:0a:a4:a9:
f8:5d:15:f5:0a:34:2c:54:48:01:66:14:f8:8a:31:
65:df:d0:ae:69:30:f0:03:fd:e7:1a:44:07:9c:d6:
1a:43:01:9c:cf:70:67:42:15:ff:08:11:00:d4:a7:
49:96:ed:2d:55:f5:26:3e:ae:e5:36:8f:8b:bc:6e:
c7:69:14:83:f7:e6:b2:8f:04:c3:52:71:86:b4:10:
4e:ec:0b:b9:c3:56:0a:9d:d1:20:0b:c0:70:86:07:
df:23:12:ce:58:cb:34:f1:9d:5a:70:71:97:69:6c:
c8:a7:ac:be:22:eb:18:45:7b:6f:8d:03:34:c7:e8:
ca:c8:60:40:d7:fc:35:fa:63:47:7d:0c:25:97:ee:
c3:e7:4d:f5:fb:7e:7d:c8:bb:73:b3:ab:3e:c3:18:
bf:69:1a:1c:c0:34:7a:5e:20:11:9b:67:45:d0:c3:
2c:a7:23:26:db:47:7b:a1:2f:4d:4c:b6:86:28:d4:
84:68:83:79:4a:50:43:a2:6e:ee:26:bc:ed:19:87:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:5C:BC:B6:B2:F4:E1:16:D2:AF:95:DD:26:BE:46:58:2C:26:0C
X509v3 Authority Key Identifier:
keyid:67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d1:48:60:a4:41:2b:b0:22:0c:c2:e2:6a:28:67:53:c0:0c:
d6:37:7f:d4:74:c4:ef:78:50:b9:84:30:64:13:ad:6e:19:8b:
d5:b2:e1:65:5e:9d:ee:fa:9c:c6:b1:da:5d:03:24:87:48:dc:
35:92:28:ed:8a:e2:e2:9b:e6:4c:30:02:8c:f5:4c:c1:8e:32:
bb:54:01:ff:b5:81:c9:20:4e:eb:33:b8:6b:14:84:7c:a4:04:
aa:bb:ab:61:03:07:1e:f4:df:77:88:1c:3d:59:4d:4c:f4:40:
b3:d7:e8:67:0f:92:b3:d6:d0:bd:f6:b8:50:09:03:d6:96:f8:
c8:dd:d4:b6:f0:71:94:cb:cc:50:3e:b3:f7:56:27:dd:70:4d:
03:c2:cc:4d:b4:b7:5a:0a:c2:40:50:ce:54:8f:6b:7d:d3:c4:
02:cb:a1:79:1f:e2:1d:f8:2d:e6:4d:40:94:72:3d:38:a0:44:
06:bf:ad:34:c8:e0:31:9e:06:f3:41:78:7b:d6:9a:93:aa:65:
1c:9a:af:f3:e2:00:70:03:af:70:89:9e:49:32:c0:7f:54:52:
54:ad:3e:a9:97:8b:87:fc:6c:48:2c:d0:45:da:25:cf:fb:10:
77:21:59:59:fb:9f:b5:51:7d:61:dd:39:de:cf:4f:d8:d5:6b:
73:e3:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:26 2025 by rpki-client