Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.mft
File: E8658A49C9CA09E89EB53A0969F6652FED345D78.mft (raw, json)
Hash identifier: lsV4HXvBrFj4GkGLBARhvr1HGTQsFyP5jN5/ERI7wNM=
Subject key identifier: DB:A0:DA:E2:57:78:60:3F:B8:44:3F:0E:6B:5C:5A:37:96:70:38:D0
Authority key identifier: E8:65:8A:49:C9:CA:09:E8:9E:B5:3A:09:69:F6:65:2F:ED:34:5D:78
Certificate issuer: /CN=e8658a49c9ca09e89eb53a0969f6652fed345d78
Certificate serial: 4B1409A871B4DBCD71BE8046CE0E97F1801F0859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GWKScnKCeietToJafZlL-00XXg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.mft
Manifest number: 02
Signing time: Tue 23 Jul 2024 19:49:43 +0000
Manifest this update: Tue 23 Jul 2024 19:44:43 +0000
Manifest next update: Wed 24 Jul 2024 23:46:43 +0000
Files and hashes: 1: E8658A49C9CA09E89EB53A0969F6652FED345D78.crl (hash: fEiH2X6Qf/O4Q3b1+OXuuTThUxDP2YASVW0W0gMn/yY=)
2: AS209025.asa (hash: FliDH+WtqC2XL3MP38ouvYx/WqgkgO0pr3I0LhFlIig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:14:09:a8:71:b4:db:cd:71:be:80:46:ce:0e:97:f1:80:1f:08:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8658a49c9ca09e89eb53a0969f6652fed345d78
Validity
Not Before: Jul 23 19:44:43 2024 GMT
Not After : Jul 24 23:46:43 2024 GMT
Subject: CN=DBA0DAE25778603FB8443F0E6B5C5A37967038D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:4d:d0:05:33:c8:55:09:36:5a:ca:03:f7:
22:1d:2f:22:06:0d:85:84:1f:95:ac:6f:8c:df:68:
c8:b6:1a:05:71:0e:6e:ce:e0:9a:43:a7:41:7e:c5:
9e:0a:0b:e0:d7:aa:31:40:7e:a1:98:2b:d4:8f:7b:
c8:70:66:e2:01:3d:40:1b:d6:ea:18:4d:75:45:81:
f6:5f:88:cb:db:b4:64:a3:b9:c3:c1:fb:93:e4:47:
f4:fa:d9:91:79:37:56:dc:58:53:d9:9a:5a:88:30:
60:9c:d3:fa:b6:70:27:d6:9b:10:b0:89:89:17:0e:
34:85:eb:1b:86:1a:f3:be:63:20:9c:41:40:f5:31:
7c:3a:de:96:74:5c:f3:07:70:89:2f:d0:f8:fd:c5:
fb:1e:65:82:bd:4b:47:07:96:3c:36:aa:e5:38:09:
c0:cf:dd:c6:7f:f1:5b:1b:79:0e:02:4f:61:9f:ab:
fd:fe:c4:85:63:ad:27:28:10:74:f5:de:b6:1c:de:
e0:1e:34:84:dc:b8:58:f4:de:fa:15:7a:65:29:2e:
12:9e:03:c3:46:17:4f:be:6c:ef:28:f3:2f:a1:f5:
4d:cb:99:70:06:23:6c:67:0b:ca:0f:34:4a:c0:44:
60:68:34:f7:14:31:d9:62:d8:11:9c:8b:44:0f:3f:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A0:DA:E2:57:78:60:3F:B8:44:3F:0E:6B:5C:5A:37:96:70:38:D0
X509v3 Authority Key Identifier:
keyid:E8:65:8A:49:C9:CA:09:E8:9E:B5:3A:09:69:F6:65:2F:ED:34:5D:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GWKScnKCeietToJafZlL-00XXg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3a:86:74:e4:73:01:10:20:43:0e:f4:5a:65:77:34:02:65:
bd:a3:46:9b:7e:17:ae:27:1b:59:61:89:4c:ad:b5:76:5e:47:
66:98:6b:05:16:e9:0e:2a:e3:63:83:8c:bf:f2:af:aa:0b:90:
55:74:49:cc:d1:aa:9b:23:26:07:a4:72:f4:f5:a3:3b:df:31:
aa:29:fe:4b:22:a2:4e:01:e3:bb:4e:23:bf:1e:4e:0e:e0:a8:
be:b3:92:7b:0d:9c:3b:66:54:cf:67:1f:a9:9b:00:53:7a:71:
56:4a:88:d3:49:64:d2:c0:19:e1:0f:b1:c8:c0:c0:e3:2c:c2:
da:dd:eb:9d:9d:ce:48:4b:79:b8:1a:d3:5f:7a:ef:e6:74:6e:
ae:7d:5d:eb:bf:f4:bb:e5:15:33:0f:af:51:69:84:a4:db:f3:
52:91:d6:d1:1a:60:d9:51:f3:d1:0b:9a:16:ee:e2:11:2a:59:
5d:08:86:e6:a1:56:ff:e1:51:35:4d:ca:a7:c8:8a:75:e9:0a:
03:44:49:57:c2:86:25:ef:dd:04:16:1b:6a:56:fa:2e:dc:43:
a3:84:82:1f:d4:dd:1a:3c:85:9f:6d:db:67:4c:dd:15:de:6f:
40:4e:08:2c:9b:40:95:71:50:f0:8f:c8:4f:28:5d:1c:6c:dd:
7a:79:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:55 2025 by rpki-client