Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json)
Hash identifier: Is1neOdXlmmFkqjilOwqPofTQxdtzeQXbymCD3G3UJQ=
Subject key identifier: 3D:89:7B:54:0F:DA:25:05:37:08:76:47:8E:09:0C:CB:30:1C:19:CD
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 4DEA0FCFF41E3904CCD1FBE735E9A7400173EE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
Manifest number: EF
Signing time: Sat 29 Mar 2025 06:08:54 +0000
Manifest this update: Sat 29 Mar 2025 06:03:54 +0000
Manifest next update: Sun 30 Mar 2025 07:18:54 +0000
Files and hashes: 1: D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer (hash: J14RTmYMzwenBicjUfmrjyMu93QKXFK8qxck8woMFpU=)
2: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: LizvwJL2nprToghg5qQqGpfO97UmahWuyDJ1ZaaEJS0=)
3: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: OrAX6n1CweUmGmSNP+fq5YuzgOhiVJnjxabTPE++qg0=)
4: 36322e3138322e3139322e302f32312d3234203d3e203236393534.roa (hash: Ik7anBwPgCuhmGi57S9xoCnrcZASk7NJHdOlyprymaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ea:0f:cf:f4:1e:39:04:cc:d1:fb:e7:35:e9:a7:40:01:73:ee:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Mar 29 06:03:54 2025 GMT
Not After : Mar 30 07:18:54 2025 GMT
Subject: CN=3D897B540FDA2505370876478E090CCB301C19CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:13:ca:64:52:7d:67:2a:2a:ab:a2:58:4a:81:
93:9d:66:56:e5:52:34:9a:e1:2d:6f:80:41:7e:73:
60:a6:b2:09:29:6b:44:9e:b5:69:c3:e9:0d:54:f4:
7e:fa:04:00:55:98:b6:3e:4d:af:26:cf:4d:75:9a:
4d:0c:80:3c:38:1a:89:f5:12:78:65:52:bf:6a:46:
16:3b:c4:5c:50:43:2e:ad:28:a1:17:c7:01:73:20:
61:ad:e6:ae:d2:d5:dd:6a:fc:32:cc:ae:03:94:95:
45:bc:e6:f8:57:28:00:a9:59:82:a7:72:6a:d0:c6:
d9:36:5d:1b:b8:15:e8:66:59:43:fe:7f:b3:be:c3:
fe:3d:99:94:a2:39:b1:23:5d:3c:56:f4:c4:16:08:
77:b4:90:1f:1f:cf:70:52:af:66:76:4e:54:0d:51:
97:6b:6e:73:2c:2b:9d:8d:d4:1a:9f:96:38:fc:99:
5b:bd:e0:58:8d:f7:4b:e2:7c:f1:1f:48:05:4a:ed:
b5:09:03:06:5e:03:b8:ce:60:2c:5a:aa:e4:d7:bc:
60:56:b4:0e:68:9f:7d:a9:03:ad:d4:b6:da:00:c7:
94:26:28:a3:c2:f3:94:6c:bb:70:6a:e2:24:14:71:
55:37:af:d2:1d:a0:21:a1:b8:f6:66:c1:11:79:9f:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:7B:54:0F:DA:25:05:37:08:76:47:8E:09:0C:CB:30:1C:19:CD
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ce:23:c4:32:4b:a1:ea:33:cc:14:31:df:eb:82:a8:5d:73:
4d:e5:af:78:70:f2:30:f6:82:70:81:6b:f5:cc:85:14:63:3e:
7b:c8:ee:8a:48:10:53:b9:e2:ea:86:ea:f1:16:4d:49:0d:08:
53:6d:e1:c7:7f:56:d4:cd:31:22:f5:29:9e:db:15:0c:ee:f4:
19:0d:a8:54:7e:6b:d7:61:70:86:bb:b5:41:09:17:03:47:9b:
46:b8:e0:57:09:20:a7:b4:a8:00:d4:93:b5:6c:84:73:c0:b6:
2d:63:08:3d:fb:a7:ac:45:f3:16:09:28:4d:83:0f:ce:23:d4:
3f:33:7f:49:3c:75:a9:68:2e:d2:1c:37:bb:ec:8a:ea:e3:82:
5c:61:e7:a2:37:59:3b:27:a6:22:4c:b3:2f:8e:4b:14:97:9d:
6e:b9:b1:ed:7a:f7:d2:58:7e:ed:7d:8e:3b:0c:98:12:07:2d:
e7:bc:b8:d5:64:11:c7:da:cd:c4:5d:40:15:bb:fb:4f:a7:a0:
0c:b0:14:73:c1:e8:81:ed:6d:49:b3:d5:0e:0f:80:e9:e9:67:
8d:c6:1f:f4:21:7b:4c:6c:3d:8b:db:c8:ad:e9:aa:0c:4d:59:
59:80:40:6f:1b:d0:85:7a:30:f3:ed:5d:fa:31:0a:ac:21:6c:
87:a2:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:05 2025 by rpki-client