Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
File: 9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft (raw, json)
Hash identifier: M9Z0QGRLwM1GxlTrE8LlssUczb/nhpen+c0pSqgEwgw=
Subject key identifier: 35:1F:F0:E0:3A:44:73:7C:45:F1:8F:91:F9:F8:3B:E0:36:B3:49:EB
Authority key identifier: 98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
Certificate issuer: /CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
Certificate serial: 7735C8A37810A761E97F3FF350E0819DF7FA17A0
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
Manifest number: 2F
Signing time: Mon 17 Feb 2025 18:48:46 +0000
Manifest this update: Mon 17 Feb 2025 18:43:46 +0000
Manifest next update: Tue 18 Feb 2025 20:28:46 +0000
Files and hashes: 1: 9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.crl (hash: KwXu6+vaL3P023cPAY7iMkRCb9KoSh/j3KTDeVijW5k=)
2: 326130363a613030373a3a2f33322d3332203d3e20323135363439.roa (hash: r2Odt3IY0KcEXOjg3ZomCmpglxo3i3Egjj6VgNOH1vU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:35:c8:a3:78:10:a7:61:e9:7f:3f:f3:50:e0:81:9d:f7:fa:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
Validity
Not Before: Feb 17 18:43:46 2025 GMT
Not After : Feb 18 20:28:46 2025 GMT
Subject: CN=351FF0E03A44737C45F18F91F9F83BE036B349EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:5c:c7:be:14:c0:de:09:11:74:fc:70:61:
13:96:6c:77:a4:52:2d:87:78:98:d0:cc:78:0c:2c:
6e:bc:6e:26:5c:33:81:a7:11:3b:bb:8b:85:c1:a9:
b0:43:49:22:65:6e:cf:97:1f:da:45:4c:2b:de:fc:
a3:2f:b6:ab:0a:d3:56:f9:0a:cc:9b:b0:9e:34:66:
14:fa:51:86:44:82:5b:8e:61:97:89:dc:8a:c1:8b:
f1:41:17:67:f9:df:98:2e:27:07:5a:d7:e0:03:7e:
0c:b0:3e:61:4e:92:51:89:a6:48:38:b4:f0:e7:35:
a3:46:94:a4:a9:de:46:42:66:a8:80:02:3a:79:55:
d0:aa:1e:7a:aa:30:d1:9b:df:6b:14:96:fa:0e:04:
5d:58:29:5b:48:28:70:50:b4:35:a2:26:3c:dd:e6:
74:ab:8d:93:01:65:08:f8:de:2d:8d:92:f8:1f:0a:
e1:c8:84:cd:86:9f:6e:45:41:dd:b3:b8:97:3e:e3:
c8:67:57:84:94:39:7f:4d:74:4b:46:01:f4:a6:cf:
e6:08:3e:f5:a3:52:00:57:86:94:f3:86:34:e6:35:
37:39:08:c6:8e:b9:50:dc:91:46:5c:1f:5a:61:86:
a5:d7:bd:2c:bc:18:6c:d7:4b:d3:09:2e:65:2b:a9:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:F0:E0:3A:44:73:7C:45:F1:8F:91:F9:F8:3B:E0:36:B3:49:EB
X509v3 Authority Key Identifier:
keyid:98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1a:f9:b0:0a:16:22:29:ce:4e:80:1f:33:e9:f8:f2:0c:99:
be:5b:29:f7:b9:0b:74:79:b3:f5:36:38:16:7b:d6:ab:c6:bb:
f7:67:9b:97:77:6b:f6:c2:74:92:c1:cf:e3:f0:b9:82:fb:35:
b3:47:73:6f:22:7b:f0:72:ae:bf:dd:b9:db:6e:77:5e:6a:77:
ad:e7:af:c1:5b:80:4a:82:5b:2e:22:31:f3:31:dc:86:51:df:
d1:4a:80:2d:41:f1:4c:ec:e7:84:80:b2:79:07:fa:db:04:96:
04:80:43:cb:60:80:61:8d:ed:64:0e:f0:07:fc:50:a3:dc:39:
ac:7a:9f:ad:c1:7e:73:06:5b:9b:02:e3:bc:18:43:7e:66:66:
e1:f6:1b:fe:14:d5:e0:7f:83:59:9d:61:c2:15:2f:9d:0d:3e:
43:00:51:79:fa:d3:32:6f:a2:e9:fe:84:e3:f6:c7:54:b4:5c:
52:82:f9:70:21:40:6e:a1:84:5a:dc:04:5b:e0:ac:02:35:85:
a2:fa:66:6a:ba:2e:32:78:f5:4d:b9:e3:a2:c3:79:66:47:e6:
8e:71:46:53:bf:f3:46:77:c2:b7:e0:35:7d:c3:f7:82:67:fc:
48:a2:04:82:ee:f5:e4:04:85:fc:b1:ce:3f:7a:29:c3:19:c0:
6e:81:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:20 2025 by rpki-client