Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft
File: 491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft (raw, json)
Hash identifier: mtjXi+OCBdhzFN4dUqpaRwhuWDmbImCNQEWTuLp/P7w=
Subject key identifier: B6:5B:34:59:5A:9E:70:03:29:95:E1:80:BA:F1:9C:1D:D5:F2:8C:37
Authority key identifier: 49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A
Certificate issuer: /CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A
Certificate serial: 59779887FCABB2A2A7C8729CC6BFFE175787E56F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft
Manifest number: 9A
Signing time: Mon 06 Jan 2025 12:38:00 +0000
Manifest this update: Mon 06 Jan 2025 12:33:00 +0000
Manifest next update: Tue 07 Jan 2025 15:45:00 +0000
Files and hashes: 1: 491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl (hash: kyBUqnAyGx6f6hCchIwlZTqzh1pjkBb8zHYMun1veCc=)
2: 326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (hash: lVtF5NwM/y4VEdugMwdt8tI1sYxZq/0nAd61eRBWSSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:77:98:87:fc:ab:b2:a2:a7:c8:72:9c:c6:bf:fe:17:57:87:e5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A
Validity
Not Before: Jan 6 12:33:00 2025 GMT
Not After : Jan 7 15:45:00 2025 GMT
Subject: CN=B65B34595A9E70032995E180BAF19C1DD5F28C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:b6:f5:b3:d3:27:18:a5:66:a3:5d:33:83:
78:09:6f:15:d2:13:b0:09:22:51:b7:62:ad:70:4a:
17:73:f3:b9:2e:e2:64:9f:52:d7:2e:3f:4f:c0:87:
67:e5:09:fc:a3:24:e2:87:8f:a5:30:b0:cf:26:25:
fd:e8:57:fa:a1:90:e9:c3:56:d8:0b:f6:c5:91:06:
5f:50:7f:1e:51:76:9b:41:ec:ea:61:ec:6d:e5:45:
c5:ca:1d:67:cc:60:9b:e2:cf:34:06:b7:42:59:21:
ed:73:37:85:c2:bd:a5:e0:4d:b0:fe:f9:6f:92:46:
a7:10:cb:39:55:88:15:b7:1c:b4:d7:b2:b3:bc:32:
8e:e8:63:71:6b:03:4e:bb:82:d1:e4:e7:75:37:f8:
9a:3c:7f:fc:bf:00:96:1d:49:8b:3e:65:26:84:82:
07:2e:b4:21:6a:72:6a:c1:31:b5:99:cf:e9:11:2e:
1f:e3:70:2a:b8:24:a0:a5:89:f2:4f:5d:4e:34:22:
5f:95:23:10:db:d2:1a:c9:22:5a:64:ae:9d:a4:d0:
ac:c5:0e:ae:c3:cc:b4:0a:48:b3:1e:8f:e8:2f:e5:
5a:79:d9:e6:57:c4:69:ec:3f:95:eb:bf:a3:b5:0b:
82:4e:8d:a0:88:0e:7c:75:98:21:46:98:f1:8f:f5:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5B:34:59:5A:9E:70:03:29:95:E1:80:BA:F1:9C:1D:D5:F2:8C:37
X509v3 Authority Key Identifier:
keyid:49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:05:65:17:69:9f:e9:45:64:ec:ab:b0:53:fe:5f:2a:77:d5:
25:14:df:04:85:6e:e9:4e:20:cd:bc:cb:d0:f8:fd:43:21:c2:
f4:ff:e3:bd:84:28:90:1e:32:2e:02:3d:e5:ce:ad:a1:12:e6:
c2:4b:70:d9:fd:8d:3f:1b:48:9e:40:68:ab:3e:17:ca:cc:90:
34:7d:44:b0:ae:a4:c7:f7:c3:f5:ae:7a:c7:5d:e9:cc:51:d6:
d8:b7:ba:6a:04:6a:9e:05:8c:e1:03:60:34:73:a1:cc:6c:9b:
e1:ce:42:a1:74:03:37:b1:fc:79:33:81:a8:96:92:58:20:58:
d1:06:f0:b9:cb:bf:1d:1c:60:c7:e9:5e:16:ca:d0:a1:5d:42:
f9:76:4c:b7:c1:10:ee:0a:61:36:16:a8:2a:48:59:b0:fb:e9:
2f:4f:27:4b:a1:ee:8a:ed:f8:a5:31:25:f9:bf:9b:03:a0:d5:
d0:3f:c1:06:07:2a:99:20:96:8a:1b:c4:bd:b4:31:b0:ba:55:
15:f7:ea:a6:9e:1b:93:42:ce:36:5c:a3:53:7f:d3:33:2d:48:
7e:60:34:55:f6:db:fa:91:31:fb:91:e7:f9:f5:a7:5d:4e:2c:
f7:ab:c2:9d:00:69:9e:1b:92:c8:44:ae:c3:1f:38:6b:e9:ae:
1b:3d:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:53 2025 by rpki-client