Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
File: B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json)
Hash identifier: T7x4VbmG+fK2b1hLatzYbMaqo3Xsywzp1b26DLdEEDw=
Subject key identifier: 35:AB:4B:D1:AB:8F:9D:F9:7A:A4:3B:39:2F:B4:2D:0E:A8:EB:0C:34
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial: 1EDD92243A564B421960EAFED62CF4C20869A6FA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
Manifest number: 013A
Signing time: Fri 28 Mar 2025 18:06:29 +0000
Manifest this update: Fri 28 Mar 2025 18:01:29 +0000
Manifest next update: Sat 29 Mar 2025 21:38:29 +0000
Files and hashes: 1: 326130363a313238333a386130303a3a2f34302d3438203d3e203439353831.roa (hash: gBieaZGJ5L+QqyErSi4heD4kl6dbm+qNP3MmrGyriTY=)
2: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: Bbj3dkfLCLvHSBOV2mo0X/dvVWVRNeC0CCNXaIH1NSU=)
3: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: cv8UxB2UmGQ4ZwCTapz8o5keOr8xgsLUOiJ3EoQ/i1A=)
4: 326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa (hash: gPJ2xtgaJ2u1CChDcJQcPQZ6ELKiSlG4etMyKHn7PrU=)
5: 326130363a313238333a386130303a3a2f34302d3438203d3e203538323132.roa (hash: YZpotsKD9ZB83zCyNpO+v7EKpdTTUoxfnp0qcrS+xCQ=)
6: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: dd3FrIdYxmcCZ+0yiqqDqpbbY31J+y6oBOm7qM8H0EU=)
7: 326130363a313238333a386230303a3a2f34302d3438203d3e203439353831.roa (hash: ZZHKzu7U47wWkzKCw0YWl/V9OGDXEe019Cy47FHxVQk=)
8: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: NwxUM+Bu0lOfXqc/NSfMdy0y0UUCQqdUXqKBNCkgBgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:dd:92:24:3a:56:4b:42:19:60:ea:fe:d6:2c:f4:c2:08:69:a6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
Validity
Not Before: Mar 28 18:01:29 2025 GMT
Not After : Mar 29 21:38:29 2025 GMT
Subject: CN=35AB4BD1AB8F9DF97AA43B392FB42D0EA8EB0C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:f3:1f:fd:c3:d0:5a:98:7a:de:5d:14:ea:
33:78:e6:af:8e:a1:54:13:30:30:0a:63:bb:11:42:
49:01:01:ad:12:cf:77:c1:c8:58:db:2f:6f:3c:75:
98:5e:6b:45:3c:a8:f1:16:ac:02:7c:8b:9f:20:08:
32:f4:d1:15:48:9a:45:e9:2b:15:0f:38:66:e2:7f:
17:2e:12:37:88:6b:fb:6d:47:68:9e:be:ca:6f:5e:
cd:5a:71:d0:e4:b5:53:3b:52:2b:37:92:8d:be:1f:
a8:a5:75:bf:aa:50:b6:66:40:5c:55:b5:3d:62:e0:
d6:b8:f6:41:67:37:f9:dd:b9:8b:25:61:cb:65:db:
89:97:89:14:07:d2:60:1d:2f:f2:6f:94:10:c0:07:
34:7b:fd:ea:00:ed:d9:dd:0b:cb:ff:6d:d9:a6:96:
40:e2:5c:f2:3e:65:d0:e9:41:31:47:c6:d0:f1:57:
f7:c7:4b:de:73:48:4f:86:e4:cb:1a:97:ab:8c:f1:
9e:fb:55:60:03:ee:6d:01:f5:10:c1:57:e2:60:63:
9c:17:38:8f:c1:eb:c5:87:ff:9e:82:55:54:a7:a4:
b4:f2:00:44:e1:d6:c4:99:b3:25:3e:0a:65:b9:70:
a3:ea:a3:60:a8:7e:53:eb:05:e6:2a:77:91:60:b9:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:4B:D1:AB:8F:9D:F9:7A:A4:3B:39:2F:B4:2D:0E:A8:EB:0C:34
X509v3 Authority Key Identifier:
keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:75:58:af:07:95:ac:91:08:33:6b:52:5e:a7:ed:03:f3:
f9:43:62:c6:c9:6f:2b:88:e8:d4:8c:12:95:3a:36:86:9c:68:
70:8c:bb:f8:05:c6:de:e7:47:f3:bc:e1:df:a6:40:f1:6d:99:
f6:e9:93:b8:38:30:64:7d:0d:85:27:fc:07:ae:fb:b9:6e:67:
ac:3d:e7:c1:f5:ca:f1:45:ac:d4:dd:9a:f9:e5:01:2a:f5:e5:
06:e6:bf:a6:5f:60:55:24:40:f5:59:a4:c5:f1:94:d0:2d:81:
b9:17:ff:ba:50:70:0a:48:10:4e:86:ca:4a:ff:e7:96:9c:a9:
ff:26:a1:6a:87:25:45:62:a4:4c:39:aa:b2:d1:07:ac:56:72:
52:e1:b4:86:ea:e2:d1:9f:00:0c:81:8a:ae:56:8e:73:e3:b7:
9c:eb:db:3f:c2:fa:67:ae:63:c2:ec:8b:1a:9f:8c:92:7a:f7:
1e:77:11:87:da:53:b4:ab:15:13:cf:b9:56:71:9e:e3:fc:71:
42:d9:34:0e:7b:20:86:a2:96:42:08:8f:3e:41:e1:b0:13:2c:
fa:4b:a0:35:79:e3:69:21:13:02:72:2b:be:6a:d9:cd:73:42:
e8:78:d6:23:b4:e5:85:69:72:c2:62:5e:80:c9:5c:05:4f:c8:
96:d7:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:44:42 2025 by rpki-client