Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
File: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft (raw, json)
Hash identifier: nD+aADZZQj3eHZWvadU9ve5HJdkQrszjsTuWXaWY4lw=
Subject key identifier: FD:9D:37:30:BC:DB:B1:21:20:56:DE:20:79:5D:78:AA:71:6A:00:23
Authority key identifier: 2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
Certificate issuer: /CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Certificate serial: 375EB567FC3260D03535E2CDA00F6CFFEE876E87
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
Manifest number: D2
Signing time: Sat 29 Mar 2025 06:41:33 +0000
Manifest this update: Sat 29 Mar 2025 06:36:33 +0000
Manifest next update: Sun 30 Mar 2025 07:08:33 +0000
Files and hashes: 1: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl (hash: wVumbnQeebADqt3aXvxK0oatCaolz9jWvTkCoN+PxPA=)
2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: lmNISwXtJNWjiKcmw5GjTGP7+E6qXcw7mfSumJB2dso=)
3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: qLEvjwfoEyhWj9DVGwn8qdOomSXN46J1BxYBuAy12X4=)
4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: Nh5XT638Xw3szIHzPWQzM5n7CuKdiXjt2Xw+j5HN5b4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5e:b5:67:fc:32:60:d0:35:35:e2:cd:a0:0f:6c:ff:ee:87:6e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Validity
Not Before: Mar 29 06:36:33 2025 GMT
Not After : Mar 30 07:08:33 2025 GMT
Subject: CN=FD9D3730BCDBB1212056DE20795D78AA716A0023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:41:4a:8c:d3:4b:64:c9:a1:d8:b6:c1:50:fc:
f4:23:12:ef:28:1f:ea:2a:4f:a8:1b:fd:3e:f8:4a:
7e:56:19:07:f9:34:e8:ae:83:1d:43:50:e9:ca:eb:
f3:4c:ff:da:15:e0:95:3a:b6:bf:d8:c1:c6:0c:1a:
fa:63:d5:27:e5:a9:fc:a7:19:08:ce:bd:a0:f3:c1:
4f:2d:02:b2:b0:ed:11:06:91:bc:d8:b8:8c:cb:2f:
47:86:20:3d:ab:69:23:28:db:73:f7:40:62:e6:8d:
f0:e7:e2:58:4b:d6:71:c4:e5:57:8e:f7:81:80:ff:
9b:82:df:b4:91:b7:9f:63:04:42:f0:46:05:8c:33:
d9:df:12:24:2c:63:a5:61:1e:2c:2d:86:3d:7e:f3:
89:e9:ed:95:a1:42:a5:5e:15:4e:58:5b:0b:01:aa:
79:50:db:af:38:6d:86:b5:2c:c7:62:35:e8:7a:7a:
d8:b9:76:81:7e:5a:53:3b:f5:4c:88:33:b7:21:da:
9d:b1:e4:24:72:e6:cd:d0:87:5b:23:1b:e6:8c:cc:
ae:0e:5a:de:e4:70:ce:a4:26:65:b0:c7:26:4d:1b:
3f:4b:86:c2:b4:8f:1a:93:1d:eb:fe:55:35:19:00:
8b:96:ac:2b:4f:51:3f:48:e2:55:5b:74:7a:fe:2a:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:37:30:BC:DB:B1:21:20:56:DE:20:79:5D:78:AA:71:6A:00:23
X509v3 Authority Key Identifier:
keyid:2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ce:28:24:18:89:c6:83:22:84:68:74:66:86:2b:31:0e:61:
bd:26:94:4c:ad:8f:c1:e6:3b:37:42:80:1c:e8:60:55:ce:51:
a0:07:98:ab:6b:3f:59:28:72:46:82:94:9d:08:5d:bc:31:e3:
a1:8f:3e:52:5d:2f:16:2c:fd:4c:ca:84:58:5c:34:97:ad:4b:
79:b9:82:a1:eb:60:50:9a:3f:6a:c9:a8:4f:c2:9e:ad:cc:07:
6a:e6:e8:49:1e:2b:11:b4:3c:e3:3e:2f:91:22:be:04:ba:7f:
58:b1:98:2c:42:8b:4b:72:8f:af:56:55:b0:e3:0a:09:65:ed:
0d:65:ac:64:4e:09:ce:51:24:76:5c:7d:1c:9c:84:6c:ed:70:
b2:9b:40:62:50:0b:e5:36:dd:67:32:92:47:ae:14:de:c9:e0:
af:60:db:3a:ec:87:12:91:cc:40:92:6f:b0:0f:4d:1a:21:31:
be:d8:c8:c9:f5:ea:c2:4e:00:88:1b:5f:a7:10:c5:1f:da:90:
b7:5f:06:78:5f:5b:ea:58:b6:ab:18:95:c1:26:d3:f4:2e:ce:
f3:39:88:09:b9:45:3a:d7:b7:15:9a:3c:0a:40:d0:f4:88:c3:
d7:de:ac:f2:7a:39:54:64:94:76:eb:a3:53:a2:7d:19:2c:ff:
78:43:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:37 2025 by rpki-client