Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft
File: 94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft (raw, json)
Hash identifier: qb7DQ9ozX+1oK28zaFwikYQ/6q8yd/06g58LEo5llyE=
Subject key identifier: 1A:76:41:B6:7D:A4:F7:13:D1:BB:B7:97:45:9F:57:3E:DB:F2:88:74
Authority key identifier: 94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4
Certificate issuer: /CN=94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4
Certificate serial: 7354397344C21903D9E870CB5DCC12E05A5BDC58
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft
Manifest number: 01A9
Signing time: Thu 06 Feb 2025 03:19:32 +0000
Manifest this update: Thu 06 Feb 2025 03:14:32 +0000
Manifest next update: Fri 07 Feb 2025 05:49:32 +0000
Files and hashes: 1: 94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.crl (hash: OuosEVmENjmGk4FSAO8TGs9LbxRlAqYfc0g3PhBaUrM=)
2: 3132382e3235342e3230352e302f32342d3234203d3e203437323732.roa (hash: Ta6ZRrzsiBqSiC/F8bv/X4Kr7SwSmv9MXisgrAM2vZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:54:39:73:44:c2:19:03:d9:e8:70:cb:5d:cc:12:e0:5a:5b:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4
Validity
Not Before: Feb 6 03:14:32 2025 GMT
Not After : Feb 7 05:49:32 2025 GMT
Subject: CN=1A7641B67DA4F713D1BBB797459F573EDBF28874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:7d:d0:a2:4a:fb:b0:cb:c3:38:09:9d:24:
2a:8a:a1:31:54:ad:31:19:90:dc:6d:50:89:a3:74:
9c:ba:32:22:a4:b5:7c:c9:40:7d:66:ce:52:df:a3:
ef:6e:2b:ea:a7:ae:58:10:d9:1b:05:ae:13:19:53:
f4:da:e0:42:b3:d3:e6:d7:09:90:50:02:72:ab:81:
46:2a:0b:d1:c9:27:8d:05:bd:e4:e0:85:fd:13:34:
99:bf:2d:cf:ee:3f:00:70:7b:fb:5d:4e:db:be:89:
03:61:41:a1:2c:8b:86:83:23:03:fa:5c:9f:05:45:
ed:45:c3:ca:3d:52:10:a4:66:a5:1f:d8:13:df:8d:
4d:63:aa:d1:b5:5a:55:30:48:6b:9b:be:c5:30:e8:
f6:63:13:c4:f9:05:d1:32:3e:7d:ce:20:84:7d:8e:
cf:1c:a8:0e:e1:7d:ae:cb:07:2b:7e:f8:2c:2e:87:
0b:99:b5:a1:e1:37:32:6e:24:3c:e6:de:ac:59:02:
ec:ee:aa:11:c4:d0:60:65:38:68:50:a8:3f:ba:b6:
60:b8:61:57:6c:6a:5a:73:04:97:81:9d:a5:e1:56:
35:a0:00:75:a0:a0:2d:11:c3:0b:8d:44:89:26:e8:
0b:fe:34:2c:eb:1b:be:ab:3e:a9:ce:81:79:46:98:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:41:B6:7D:A4:F7:13:D1:BB:B7:97:45:9F:57:3E:DB:F2:88:74
X509v3 Authority Key Identifier:
keyid:94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:77:d6:73:4d:88:3b:27:41:5c:f6:17:a2:42:c8:7f:28:6b:
7a:c1:70:27:55:41:1c:85:d0:33:8e:fd:bc:c1:91:dd:d3:32:
1d:63:ca:74:90:9d:37:bc:a9:f4:1c:0b:4b:1e:bf:a5:6a:21:
e0:50:dd:f0:1e:7d:0e:e0:4d:b9:23:1d:7f:52:c3:b0:a8:29:
c2:2d:48:a4:26:dd:96:6b:53:2a:23:ab:43:85:2f:98:7d:81:
dc:43:c8:28:c4:c6:b2:8d:fe:bd:71:49:08:2a:4f:e9:c6:ad:
a9:c4:35:4d:12:77:92:20:b4:56:73:d6:74:86:0a:d4:0c:43:
1f:32:6c:a0:3b:4a:9a:f7:5c:fc:90:75:54:da:7a:06:8b:ed:
09:d6:45:1f:9e:84:24:18:22:fe:21:95:b5:a5:4b:76:fe:38:
7d:10:ac:33:44:3c:aa:e9:0d:37:48:6e:78:b1:30:db:32:5d:
95:d0:cd:5c:06:a8:a4:50:19:0a:da:8d:91:a5:64:63:0f:73:
ba:96:42:dd:43:2d:ae:7f:ce:77:dc:bf:12:f6:4f:46:2c:48:
cf:8c:52:f9:d4:2b:12:e1:27:1a:ec:49:13:9f:ba:a1:73:7e:
06:43:6f:84:ef:ea:02:a0:4b:a3:2c:97:90:2f:30:7b:20:11:
84:ee:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:46:03 2025 by rpki-client