Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
File: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json)
Hash identifier: z7mM7raC0i1Q4pvvCBaJd9Z2Z7loql4+1LTlGO79j30=
Subject key identifier: 71:A8:5C:D9:D7:5B:2B:58:97:ED:2C:94:B7:D7:2D:C8:AA:18:C1:5F
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial: 3B88C04C8B10DBEF1A3F5808824CEE445AA6D727
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
Manifest number: CB
Signing time: Sat 08 Feb 2025 17:08:06 +0000
Manifest this update: Sat 08 Feb 2025 17:03:06 +0000
Manifest next update: Sun 09 Feb 2025 20:37:06 +0000
Files and hashes: 1: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: d6ms+CWZuDscVXHj6eNPGqO+N8MPtCRQHjxf1HtjfgA=)
2: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: f1kwp1pVj428upOZeWP8Kx1/MXUqD+MdikMze7amu7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:88:c0:4c:8b:10:db:ef:1a:3f:58:08:82:4c:ee:44:5a:a6:d7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Validity
Not Before: Feb 8 17:03:06 2025 GMT
Not After : Feb 9 20:37:06 2025 GMT
Subject: CN=71A85CD9D75B2B5897ED2C94B7D72DC8AA18C15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:81:c8:69:8d:fd:2e:43:73:0b:cb:e7:e0:b6:
ea:d8:c9:02:a1:51:42:46:fe:1a:70:54:27:9e:80:
f4:1f:34:7c:e9:5a:9d:b5:5c:a9:eb:87:15:93:12:
c6:1c:36:b8:4b:b2:cd:f6:75:36:9d:20:a9:2f:be:
21:c2:a5:58:1a:cf:02:aa:eb:0b:3a:1f:b4:be:74:
59:0d:67:b8:ca:97:8a:2e:6e:18:ff:de:06:09:4d:
9e:9f:01:f6:f9:8c:8a:1a:63:7c:b9:52:3f:ef:16:
39:1c:e4:a6:e1:c4:bf:a4:a3:d7:39:20:e3:13:4d:
84:04:f6:2c:e2:8b:9d:17:ab:7e:63:05:df:0c:0e:
9f:86:c0:74:2e:e4:aa:c7:d1:a0:8f:d8:e4:8c:78:
56:ad:f9:d0:b7:2f:ca:f3:88:12:27:ea:59:f0:d7:
71:67:2f:90:44:12:96:a1:63:49:50:f3:6f:4b:ac:
4d:1a:7c:10:c4:75:57:b0:3d:f6:24:25:d1:c9:c6:
01:4e:b3:d5:b5:f2:a5:5b:43:0d:0f:5b:3b:00:58:
ab:d5:97:c8:75:83:06:51:b6:2d:60:ab:d4:ba:02:
fb:23:04:aa:3b:0d:8e:de:1e:23:5e:21:c9:ab:b7:
12:0d:54:50:b6:83:0f:7c:a4:ab:c9:ec:0a:ca:75:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:5C:D9:D7:5B:2B:58:97:ED:2C:94:B7:D7:2D:C8:AA:18:C1:5F
X509v3 Authority Key Identifier:
keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:16:1b:d2:35:5c:3b:11:15:a1:de:97:81:e2:64:3c:15:3d:
0e:a1:08:95:88:9e:d2:04:29:11:4a:27:8f:63:6e:48:af:2c:
ae:bf:fb:f9:38:89:26:c9:3b:da:db:92:32:ac:87:91:1f:9e:
b6:1a:49:81:bb:ef:74:b8:05:1f:38:a3:94:d0:2f:9d:4c:a7:
6c:93:26:67:f0:85:ff:ca:73:b8:7f:99:a0:ce:11:d5:aa:a1:
da:eb:c1:a2:03:11:4e:52:77:32:51:6d:75:2d:d7:a6:56:98:
f4:19:83:54:b5:d8:5f:fc:64:4d:5a:cc:e2:df:87:27:29:cf:
7e:88:34:c4:d6:4b:74:70:36:97:af:47:09:d7:8d:78:e9:12:
f7:1b:de:e8:3a:e5:78:c9:81:1f:ea:70:a7:ea:52:c1:d7:96:
e6:c7:80:1f:97:01:27:0f:e1:b8:97:b7:a8:e9:d0:c5:a3:a5:
36:ba:a5:52:3a:f6:a9:33:9f:77:c1:21:77:2a:5f:85:c7:e7:
9f:e0:dc:61:a8:2a:30:8c:e2:d8:5b:d7:e4:09:a9:6b:91:6e:
1e:cc:4d:6c:6f:c9:06:4b:d9:5d:35:df:87:c3:42:84:98:94:
f1:a2:22:d6:e6:0a:f7:68:c8:dc:db:d4:06:37:59:90:65:c3:
0e:37:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:19 2025 by rpki-client