Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
File: 130671BB4F638012F828BBA2CCE785C172530C02.mft (raw, json)
Hash identifier: 8k1lhf7Vhv1WCjTWZjgPLxi4TND8Lbe9l/dIWc5Wx6Y=
Subject key identifier: 13:E9:6C:5D:40:30:0B:77:94:74:15:F9:07:AD:54:8C:48:CA:28:E2
Authority key identifier: 13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
Certificate issuer: /CN=130671bb4f638012f828bba2cce785c172530c02
Certificate serial: 5BE7C1E3B920C1F00C941F9B7E876AD2A3D3EC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
Manifest number: 0149
Signing time: Fri 07 Feb 2025 10:00:41 +0000
Manifest this update: Fri 07 Feb 2025 09:55:41 +0000
Manifest next update: Sat 08 Feb 2025 11:54:41 +0000
Files and hashes: 1: AS216265.asa (hash: 7Lz5u6dspoAf8XEf9PvYLdZiJcFIKOab5BVMust54Ec=)
2: 130671BB4F638012F828BBA2CCE785C172530C02.crl (hash: wEC0Kta/s654ftbfrUFHfOPPcCfslti4s6D7lhXMmY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e7:c1:e3:b9:20:c1:f0:0c:94:1f:9b:7e:87:6a:d2:a3:d3:ec:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130671bb4f638012f828bba2cce785c172530c02
Validity
Not Before: Feb 7 09:55:41 2025 GMT
Not After : Feb 8 11:54:41 2025 GMT
Subject: CN=13E96C5D40300B77947415F907AD548C48CA28E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:5a:8c:44:23:77:41:6a:86:a2:12:5c:5f:
e8:6d:13:dc:eb:9a:89:90:9d:11:ea:7f:fa:96:c8:
e0:2d:2b:79:2a:9a:f0:65:41:9b:3d:b9:27:3a:03:
bb:79:34:8b:33:00:03:95:d3:2d:26:2f:6f:25:bd:
02:cd:01:2e:85:f9:66:f7:ec:1d:56:07:da:67:1d:
7e:f3:87:19:ec:0f:98:24:9a:8d:64:c2:1e:30:eb:
49:07:1b:4a:d2:3e:ab:69:d9:aa:aa:da:39:15:09:
0c:cf:d9:9e:5c:4a:ac:a6:b7:42:64:f7:3b:0c:69:
52:40:3e:51:61:fb:ab:91:4e:61:f7:d5:3c:45:70:
9a:7f:b3:a4:98:77:4e:c2:cc:ca:47:4e:a5:a8:cd:
ea:de:1d:35:76:83:f4:01:e5:83:86:93:bd:9d:7f:
15:74:50:da:21:fb:cd:11:21:d8:75:18:7d:b2:9b:
d8:2a:b4:06:06:94:41:fe:37:58:95:a8:c4:17:cb:
6d:ad:09:23:cd:87:93:9d:1d:9f:20:44:74:09:46:
35:03:7f:9f:5e:27:78:4f:82:61:f4:ac:e2:f5:79:
2e:e8:4d:a8:50:23:41:72:fe:ba:b6:59:e9:35:92:
76:5b:61:d1:29:1d:34:52:40:05:ad:16:8d:59:4a:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:6C:5D:40:30:0B:77:94:74:15:F9:07:AD:54:8C:48:CA:28:E2
X509v3 Authority Key Identifier:
keyid:13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:13:8c:2e:70:91:76:01:69:6e:9b:15:25:76:57:89:4a:
c4:d1:fb:8d:77:2e:d1:6d:5e:fe:99:e3:4e:b2:ec:d7:66:dc:
a6:16:e6:66:28:9f:ae:66:24:6d:98:fc:cd:cf:b7:29:ab:89:
02:04:6b:f0:05:04:e3:a5:29:2c:c3:99:8c:96:a0:b3:ac:8e:
3a:ef:fb:a6:77:30:61:5c:46:9b:92:11:33:91:e2:32:2b:6f:
16:47:1f:7f:92:61:e5:f6:83:24:d7:8a:19:c3:f6:ec:19:54:
c4:95:a8:fb:db:49:a6:5c:fd:35:c1:56:e3:b0:07:57:78:eb:
40:15:3d:0c:37:8a:bb:ff:0e:35:9d:80:e5:c4:75:48:58:1f:
30:2d:c4:92:7e:66:2f:65:58:10:59:dd:e0:28:b8:02:91:16:
70:1b:34:fc:bc:0f:41:10:75:d8:4a:11:43:40:38:4a:be:9b:
fa:74:80:b4:81:a4:ee:de:60:25:39:85:0f:a5:79:17:49:eb:
99:27:eb:45:06:a6:36:0f:4d:fd:e3:ce:b2:f1:c7:a9:af:f1:
bb:40:8c:26:d0:33:a2:7e:61:8c:49:43:f1:61:4e:d3:b9:2b:
8f:e9:9e:bb:3a:a1:cc:dc:7a:a7:37:84:f4:eb:00:b2:cb:20:
6a:45:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:19:34 2025 by rpki-client