Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft
File: 849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft (raw, json)
Hash identifier: ih71qoReXxaQAUocvt+2AVsfp4uarTCVIma2tmmmbPc=
Subject key identifier: 3D:C9:FD:B4:EE:BE:F1:1B:EF:9F:11:7B:6E:C4:66:B8:EC:D4:0D:9B
Authority key identifier: 84:9A:6D:8B:FA:C2:BC:81:C0:BB:3A:DB:0F:1B:FC:68:BB:BE:06:3F
Certificate issuer: /CN=849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F
Certificate serial: 57199A0C4F23D2DFC855E4B05058800CEAF54DFE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft
Manifest number: 7E
Signing time: Fri 20 Dec 2024 13:29:27 +0000
Manifest this update: Fri 20 Dec 2024 13:24:27 +0000
Manifest next update: Sat 21 Dec 2024 17:17:27 +0000
Files and hashes: 1: 849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.crl (hash: G5ih1RKYh3OBb1pMXbgi79gTVQBQ5LCqALaES6kdxFM=)
2: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: t1cRwTYq7eUC/NgS3JVL6aQkzgWYOlFVUcR/T01og2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:19:9a:0c:4f:23:d2:df:c8:55:e4:b0:50:58:80:0c:ea:f5:4d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F
Validity
Not Before: Dec 20 13:24:27 2024 GMT
Not After : Dec 21 17:17:27 2024 GMT
Subject: CN=3DC9FDB4EEBEF11BEF9F117B6EC466B8ECD40D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:30:1a:01:68:53:e3:f1:6b:3a:ed:00:d9:
c5:a6:b5:95:e1:4a:15:cf:89:cb:de:83:db:fe:c5:
16:86:3a:b0:84:cd:99:cf:21:de:cf:18:c4:94:a5:
19:60:11:fa:92:f4:f9:72:31:7f:f2:05:33:af:c5:
7b:7b:2d:f5:f3:8c:d5:f1:44:c6:df:4b:31:65:7d:
a0:aa:74:df:5a:eb:23:10:22:98:b7:ab:8c:7b:a0:
8e:43:03:9d:74:63:d6:e0:0f:7c:ab:d2:aa:73:9c:
f4:40:28:d5:7c:0f:5f:43:7c:53:2a:83:10:72:86:
34:95:46:98:df:58:08:28:c2:6e:30:c5:dc:dd:c7:
1b:14:c9:4d:ab:61:8a:20:80:39:5a:d2:69:15:92:
18:07:bb:ac:c7:b1:34:82:76:f7:9a:23:dd:94:18:
55:65:75:76:85:ef:64:98:cc:3e:6f:7e:65:89:ff:
a4:d2:c3:9d:25:ee:5e:4b:e4:68:ce:bb:0b:e3:72:
13:09:84:79:2a:7d:e9:e9:73:72:72:7b:9d:26:6c:
11:3a:50:e7:03:cf:1e:2a:b8:e9:ac:92:40:28:ae:
aa:5f:21:f3:6d:93:b5:e3:08:67:bc:ef:fa:4a:1f:
c1:14:2e:79:17:6a:ab:2a:49:3b:9d:0f:a9:72:87:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:FD:B4:EE:BE:F1:1B:EF:9F:11:7B:6E:C4:66:B8:EC:D4:0D:9B
X509v3 Authority Key Identifier:
keyid:84:9A:6D:8B:FA:C2:BC:81:C0:BB:3A:DB:0F:1B:FC:68:BB:BE:06:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bc:84:d3:7f:0c:83:ae:f1:14:db:ae:f1:da:0e:09:24:14:
4a:a7:e1:b9:3d:85:07:40:a7:39:e6:88:86:29:c9:a3:05:9e:
04:b1:b4:f5:6f:84:43:00:0f:a1:07:b4:bd:09:7f:22:eb:cc:
00:c9:d6:26:7d:d2:b5:37:25:c0:0d:17:4d:8f:e0:4c:56:92:
fb:90:81:77:90:77:62:0a:07:9d:dc:e7:4b:e3:45:4a:15:b3:
e3:03:a3:dc:8a:dd:54:94:22:99:b8:72:29:d5:f7:08:1e:66:
0b:88:ee:06:b1:62:1b:f2:e3:ea:19:83:b1:87:64:06:cf:2a:
58:c0:fe:38:08:cd:dd:64:6d:28:75:70:6a:a5:67:48:ea:84:
5c:0b:bf:e5:11:5c:bc:dc:fa:15:31:ad:02:d2:0e:1e:7b:7b:
39:8c:ee:74:14:6b:08:64:6f:96:8d:23:26:5c:a7:3f:88:89:
4c:90:83:c0:04:aa:0d:ac:4b:6d:85:d1:2e:52:bb:65:b6:a2:
e3:a9:52:c6:6d:6b:ef:4d:68:89:29:fa:77:ca:85:9a:7d:a3:
04:c2:83:48:8b:49:79:f9:56:79:5a:19:b3:e7:e2:14:78:82:
19:51:6d:20:1a:4a:f5:a0:1d:26:b5:f9:87:f0:b3:24:3b:71:
30:0c:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:41 2025 by rpki-client