Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft (raw, json)
Hash identifier: 9RlL14vmC1KIhhGT/oawRrn+hRUAzAYAiuKJ0qaMJY0=
Subject key identifier: B1:49:9E:9E:A6:C5:70:7A:22:5A:24:FC:2B:73:6E:81:F6:F1:38:E1
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial: 17021085C1DBF0E6D8A285630420DD655442CE91
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
Manifest number: 3D
Signing time: Fri 28 Mar 2025 22:58:47 +0000
Manifest this update: Fri 28 Mar 2025 22:53:47 +0000
Manifest next update: Sun 30 Mar 2025 00:16:47 +0000
Files and hashes: 1: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (hash: DIViRQ42D8a6zmXRGDITJIbQAy0ZAwqWkHiJUlX7JBk=)
2: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl (hash: 7jf028lZDmRs6ZNqhUliyHv4iRmrGkguvnGTWmjgVao=)
3: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: om6MZdplPIcdMRLg/3Q5DKtj7YbX8M+yf1GQW3Oq+ZQ=)
4: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: RiTHbb6fM/K2yy/mDsB7YR5onXWmom6kg2M7y+5zKRM=)
5: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: 0VzNqelmh9PtWDyjtgcpmxTMLlHeWcLjX+PbF1U5A6A=)
6: 326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (hash: X78kIHzCx8GwjAHLfghBDH3zgTlpD7RiwUqFd+uoabw=)
7: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: BEjJ0mCyxM+M2001Ah7G9U0Oou9u2J4fEBtY9+LLOoo=)
8: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: utfcOtV0ira9oI60/XtqWPcWDjYS5TA34R10kidjjZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:02:10:85:c1:db:f0:e6:d8:a2:85:63:04:20:dd:65:54:42:ce:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Validity
Not Before: Mar 28 22:53:47 2025 GMT
Not After : Mar 30 00:16:47 2025 GMT
Subject: CN=B1499E9EA6C5707A225A24FC2B736E81F6F138E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:34:e1:db:81:6c:73:ce:3d:4f:ed:c6:f3:
a2:3a:08:22:92:0c:96:d4:74:02:80:ef:21:85:b6:
87:3a:2a:5a:37:90:95:2a:f8:1e:f0:55:d9:9a:bb:
69:3a:02:30:d9:6d:af:f1:59:b0:44:4f:eb:61:0b:
42:29:4d:14:99:5a:da:9b:a4:8d:28:e7:82:60:57:
3e:f9:28:6a:7a:c3:1d:fe:b2:27:c5:31:dc:9d:96:
83:3f:f7:35:89:cc:2b:a8:ec:a7:df:a3:07:0a:09:
ef:04:4f:e0:7d:cf:b1:ce:68:fd:a5:d9:77:9d:2b:
70:6a:bf:e3:cc:0a:30:8d:f3:a2:b5:70:47:ae:83:
a6:d9:c5:9b:fa:14:d0:2a:fc:65:05:e1:78:e4:17:
00:ac:2c:f4:fc:1a:bf:ba:f5:c8:18:91:60:ce:a7:
7f:9c:db:6a:82:8d:8f:c0:21:3c:80:d5:91:5e:4d:
a0:c8:6d:d2:83:2b:bd:26:2a:f8:b3:0f:96:ef:65:
63:77:1e:ba:c1:fe:25:3e:b8:9f:30:45:8f:02:27:
0e:e4:d3:7d:19:26:da:9e:40:c7:ba:e7:8f:f3:c7:
c8:c0:18:74:3d:32:98:0e:a2:ed:d7:42:65:bb:89:
97:39:2a:28:ac:28:4d:03:b6:97:c3:f2:55:5a:8d:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:9E:9E:A6:C5:70:7A:22:5A:24:FC:2B:73:6E:81:F6:F1:38:E1
X509v3 Authority Key Identifier:
keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:92:93:0d:d3:fa:18:83:33:9a:c4:fc:3e:40:ab:e4:60:6f:
80:67:33:15:42:58:cc:db:9a:08:0b:51:86:55:cb:6b:b4:17:
49:15:d3:a9:fb:45:80:54:bf:e5:cc:0e:0f:22:1d:cf:01:73:
80:06:49:be:bf:11:e7:3f:82:a6:52:8e:4b:b0:f6:e3:80:27:
cd:23:c2:3c:8d:25:1a:81:2c:48:1d:15:bd:19:ff:3d:9b:07:
28:89:fe:7c:04:b3:2a:ea:4e:11:ce:fc:8e:a7:80:ad:ec:44:
df:fa:7b:e5:6f:de:51:5f:ab:fd:ba:0c:e8:88:f8:d1:df:b3:
54:8f:4c:2a:0b:73:c9:d6:18:17:54:7f:83:e3:b3:7a:88:df:
98:45:91:5f:a4:83:45:27:b9:6e:b3:e6:0e:1f:c8:70:9a:b2:
c3:44:c9:24:cc:b6:fa:ce:d7:9f:c8:29:ea:22:cf:f3:8f:49:
5c:be:44:a4:86:56:b9:71:ed:8b:0e:fc:ff:73:32:06:35:dd:
88:71:8a:98:54:a4:20:53:af:ae:f1:54:11:44:30:e8:0d:b1:
b2:bb:fb:8e:74:04:2b:a1:a5:fa:67:83:06:b6:9b:63:f2:d3:
9d:f2:de:fd:b7:fe:78:23:af:22:17:2f:16:eb:7f:9f:08:ea:
b4:f0:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:21:47 2025 by rpki-client