Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/3FE6D102815046D2AABC20BCD541F33898FFE759.mft
File: 3FE6D102815046D2AABC20BCD541F33898FFE759.mft (raw, json)
Hash identifier: RuKDSdKKGX6ihVSlKc0vTyTDJVkQ6YXmc1Nc+076uik=
Subject key identifier: F7:22:7C:3D:F9:F1:D0:C8:27:D6:8D:FF:0B:5F:78:06:CE:4B:DE:F8
Authority key identifier: 3F:E6:D1:02:81:50:46:D2:AA:BC:20:BC:D5:41:F3:38:98:FF:E7:59
Certificate issuer: /CN=3fe6d102815046d2aabc20bcd541f33898ffe759
Certificate serial: 7D59B2B012E08578DCD03D1FA872DEF7FE8AF9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-bRAoFQRtKqvCC81UHzOJj_51k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/3FE6D102815046D2AABC20BCD541F33898FFE759.mft
Manifest number: AF
Signing time: Sat 11 Nov 2023 16:42:52 +0000
Manifest this update: Sat 11 Nov 2023 16:37:52 +0000
Manifest next update: Sun 12 Nov 2023 17:08:52 +0000
Files and hashes: 1: 3FE6D102815046D2AABC20BCD541F33898FFE759.crl (hash: a4AZsXjFj4NQnkV7V2JVeYrcBfgx3R5tnJJDaSHr5rg=)
2: AS212618.asa (hash: eLq/y1jgQYqvXwxaINwGO+uCykhmsHvE7gZpZFyx68E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:59:b2:b0:12:e0:85:78:dc:d0:3d:1f:a8:72:de:f7:fe:8a:f9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe6d102815046d2aabc20bcd541f33898ffe759
Validity
Not Before: Nov 11 16:37:52 2023 GMT
Not After : Nov 12 17:08:52 2023 GMT
Subject: CN=F7227C3DF9F1D0C827D68DFF0B5F7806CE4BDEF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:83:07:5e:9c:af:4e:f4:72:e9:ff:e1:d4:
69:14:eb:22:1d:69:82:67:4a:19:3b:d6:6b:51:b2:
5a:e7:6c:fb:ee:de:62:d6:aa:45:47:00:31:f1:b3:
88:c6:e3:d3:1c:2d:71:bc:b2:ba:34:35:2c:80:80:
e0:28:08:6c:75:2f:c1:95:0c:85:92:fb:19:ee:14:
1f:64:1d:a5:54:28:32:a4:32:09:8d:97:73:26:b8:
1f:cb:26:95:cc:da:24:62:21:1f:63:4f:27:23:fe:
e0:2a:f1:b9:28:d8:d5:39:c4:1f:4e:22:61:49:cf:
6b:6c:ab:29:ca:91:5b:84:a4:ac:32:a4:cb:3e:ee:
2d:bc:0f:b3:f7:b8:59:8c:d5:f3:05:0b:95:3e:5f:
bf:19:6a:81:96:86:3e:4f:c1:a7:79:48:a1:9b:c9:
bc:57:e0:31:90:40:12:19:62:55:de:2e:9b:7b:f1:
39:a1:d8:b7:40:6c:79:6a:c3:89:52:73:e9:20:81:
7d:fb:8f:e7:70:a4:6a:ca:bb:e9:57:23:89:d6:40:
96:47:67:92:57:45:9b:21:ce:24:89:39:50:64:a5:
b7:cf:ce:10:85:51:7b:99:aa:38:2b:24:c9:26:ce:
94:fa:1e:d4:69:8d:b6:f2:99:73:a5:a2:e8:d1:65:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:7C:3D:F9:F1:D0:C8:27:D6:8D:FF:0B:5F:78:06:CE:4B:DE:F8
X509v3 Authority Key Identifier:
keyid:3F:E6:D1:02:81:50:46:D2:AA:BC:20:BC:D5:41:F3:38:98:FF:E7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/3FE6D102815046D2AABC20BCD541F33898FFE759.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-bRAoFQRtKqvCC81UHzOJj_51k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/3FE6D102815046D2AABC20BCD541F33898FFE759.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:47:2d:e0:6d:ec:40:15:f4:72:15:5a:06:c1:39:d4:c6:
68:1d:5e:27:7d:3f:82:10:ce:6f:c2:33:47:ca:96:27:24:f6:
24:dd:70:0b:fe:7c:e0:ce:f5:9a:6b:26:c2:5a:e7:1e:6e:82:
28:ba:1c:d3:01:3d:cc:db:c0:1c:34:75:2e:11:e1:68:02:5a:
08:72:94:33:4c:c4:d4:7e:9a:25:93:fe:2a:5d:23:79:6a:97:
d2:1f:5e:5e:73:d6:e7:db:2d:82:10:ae:80:5a:23:7c:ce:20:
f2:06:9f:d3:eb:1f:bd:32:74:45:70:9f:8d:56:70:dd:dc:e8:
4b:b4:61:a6:6b:34:a2:5a:7c:65:79:39:15:2b:cd:f3:44:82:
18:b6:53:1b:65:21:59:c4:cc:15:17:5b:06:87:e1:26:ee:95:
76:f8:bc:d8:a1:6c:a6:f0:41:af:b8:1d:e6:3f:7c:b2:c1:be:
5c:43:b3:ff:8f:50:28:72:3f:a8:c8:87:8a:1b:dc:de:cc:52:
7e:f6:a0:91:7c:a3:b0:6b:af:56:6d:93:0a:a5:cf:7f:14:18:
bf:11:46:a7:3b:0f:e4:87:f5:1d:cb:4c:20:be:7a:e3:07:86:
62:04:9c:9a:b9:cb:cf:f2:de:8d:af:3b:6a:de:a8:98:ed:83:
23:00:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:41 2025 by rpki-client