Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
File: 97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft (raw, json)
Hash identifier: 81XJnp2PUY8bJymmYHXMiusC0E6c4GrQbhMvyfPJtlc=
Subject key identifier: 89:D9:3A:7D:65:D7:62:0E:3E:72:32:97:0B:15:AE:4D:84:AC:85:E4
Authority key identifier: 97:C1:75:00:5F:7A:B9:B6:9D:CD:B4:F3:A6:08:FC:78:FE:5A:A7:C7
Certificate issuer: /CN=97c175005f7ab9b69dcdb4f3a608fc78fe5aa7c7
Certificate serial: 4221C448249F76B277C1DC522822B089A6C398BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
Manifest number: BF
Signing time: Wed 05 Feb 2025 23:28:54 +0000
Manifest this update: Wed 05 Feb 2025 23:23:54 +0000
Manifest next update: Fri 07 Feb 2025 03:03:54 +0000
Files and hashes: 1: AS44324.asa (hash: qZJVHxdF5FfdnE3dVG3B8plRnsnzKlh8Fckyf+XqKXg=)
2: 97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.crl (hash: z0tu0Yh4wxaKzq7/S6wVxCnUAgLGsHa0izv8Ezm5ycc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:21:c4:48:24:9f:76:b2:77:c1:dc:52:28:22:b0:89:a6:c3:98:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c175005f7ab9b69dcdb4f3a608fc78fe5aa7c7
Validity
Not Before: Feb 5 23:23:54 2025 GMT
Not After : Feb 7 03:03:54 2025 GMT
Subject: CN=89D93A7D65D7620E3E7232970B15AE4D84AC85E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:43:19:fb:92:d5:db:5d:e2:8e:bc:75:27:
b8:d9:bb:a2:52:03:2a:a2:47:77:3b:8a:cf:37:a5:
30:80:3b:59:b2:0c:01:0f:41:18:f8:e2:12:90:25:
31:19:52:b2:d0:65:23:3d:ad:33:4f:51:0d:5a:ae:
b8:bd:2c:02:69:3c:97:9e:33:17:0f:3f:8f:6a:5f:
61:e8:e5:70:6e:4b:0d:f3:4c:4d:5a:2a:30:f6:fe:
26:b5:af:4a:99:3d:9f:e7:b3:a8:20:0f:1d:6d:70:
2f:db:a0:6e:ba:a1:fc:3a:e9:39:c5:ae:8e:7b:8e:
59:41:d7:ee:da:e9:37:7e:3d:1e:08:54:6b:f0:85:
9a:44:b5:65:f9:14:18:16:66:4a:64:c0:df:3c:b7:
ee:c4:a9:71:4d:14:02:80:26:84:7d:df:63:a3:9c:
e9:c0:72:19:dc:52:eb:83:5f:8a:2b:48:2f:5a:c5:
a2:cb:a4:dc:1f:d9:63:a7:d1:fe:85:40:01:02:1c:
6c:ce:17:4b:a0:fb:7f:4c:7a:f3:c1:59:f5:12:e4:
c2:e8:fe:de:9b:09:32:4e:e5:e8:18:20:f2:ce:9b:
24:b1:ec:44:71:1f:f9:88:38:6e:2f:30:c9:70:f5:
8b:4c:a3:90:84:d3:88:70:af:10:59:58:a8:85:a4:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:3A:7D:65:D7:62:0E:3E:72:32:97:0B:15:AE:4D:84:AC:85:E4
X509v3 Authority Key Identifier:
keyid:97:C1:75:00:5F:7A:B9:B6:9D:CD:B4:F3:A6:08:FC:78:FE:5A:A7:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6b:cc:5f:17:ab:df:c3:93:6a:66:fc:22:63:63:6d:60:c8:
ee:ba:ef:be:6f:22:aa:5b:7c:4d:d6:dd:08:e4:ac:25:6b:08:
88:e2:24:54:0b:a2:88:c9:f7:42:03:ba:30:4b:9a:45:2b:58:
54:4a:58:95:87:e2:de:68:64:ab:f7:42:35:56:0c:67:91:a1:
02:21:30:ca:45:f6:e5:d7:1c:ca:b2:6b:bc:a0:44:c9:58:8b:
71:9b:04:dd:bb:6a:1e:bc:ca:ca:1b:f2:af:3e:7a:0d:88:e2:
25:f8:58:bc:9f:86:91:15:ff:57:dc:65:4c:63:97:9d:9b:c5:
cd:40:73:fe:8f:5c:9e:0a:06:74:cd:d2:ff:53:88:d6:8b:56:
e5:68:a7:a5:7c:64:68:60:b7:93:69:91:b6:3a:3f:07:f2:fe:
b8:db:06:a6:8c:2c:77:b4:0e:cd:dc:68:ae:d1:7c:b4:e1:89:
14:dc:d0:7e:67:6b:db:9c:ec:ef:44:9a:4e:8a:e8:e8:f0:f4:
e6:74:36:26:36:9d:a3:a0:81:91:55:62:dc:2b:df:1a:3a:c6:
48:8c:20:b9:af:de:9c:bc:ee:17:08:dc:67:5c:b7:0d:a6:f7:
87:31:b2:da:a0:66:1d:73:f7:de:d3:4c:13:dc:05:7d:71:e8:
45:19:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:29:16 2025 by rpki-client