Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/2B6E7D29F16ACB46C58258CA9084E431DAB0E783.mft
File: 2B6E7D29F16ACB46C58258CA9084E431DAB0E783.mft (raw, json)
Hash identifier: c5NoX7bT1jJ9OlRXwq9D8SpjVe/c+8ahi9lAG8OONX0=
Subject key identifier: AB:C3:9A:3B:6D:9D:18:E6:45:DF:8B:D7:68:71:5F:53:68:B9:11:7C
Authority key identifier: 2B:6E:7D:29:F1:6A:CB:46:C5:82:58:CA:90:84:E4:31:DA:B0:E7:83
Certificate issuer: /CN=2b6e7d29f16acb46c58258ca9084e431dab0e783
Certificate serial: 269D3ED4B9A35F010F3777E99CDBD708A608FC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K259KfFqy0bFgljKkITkMdqw54M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/2B6E7D29F16ACB46C58258CA9084E431DAB0E783.mft
Manifest number: 0148
Signing time: Fri 24 Nov 2023 01:10:58 +0000
Manifest this update: Fri 24 Nov 2023 01:05:58 +0000
Manifest next update: Sat 25 Nov 2023 01:22:58 +0000
Files and hashes: 1: 3134362e31392e32322e302f32342d3234203d3e20323039323432.roa (hash: Od4TVyPIR589SIObgjWhNda5l+IHDnxDnIRMh0W2s04=)
2: 2B6E7D29F16ACB46C58258CA9084E431DAB0E783.crl (hash: YLFvhzkCSxti53nK+g51mlGeUF7OEAhHXVrJwgFVcCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9d:3e:d4:b9:a3:5f:01:0f:37:77:e9:9c:db:d7:08:a6:08:fc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6e7d29f16acb46c58258ca9084e431dab0e783
Validity
Not Before: Nov 24 01:05:58 2023 GMT
Not After : Nov 25 01:22:58 2023 GMT
Subject: CN=ABC39A3B6D9D18E645DF8BD768715F5368B9117C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:18:55:76:f5:43:4b:91:42:a4:fb:ff:f0:
7e:73:41:f8:55:5d:ae:d4:e6:02:b2:b4:4f:cd:c2:
1b:b1:fd:af:72:58:8b:d9:97:8f:1f:cd:9c:5b:12:
ad:23:bd:c5:7a:db:76:a4:1d:a0:75:3d:31:83:18:
85:b3:d7:e3:56:fc:75:62:03:48:28:b7:f6:63:8a:
67:d8:b8:ed:58:4c:dd:5f:bd:ce:8f:16:4b:c1:ab:
52:d0:68:c4:24:77:1c:4a:12:af:69:16:4d:b0:89:
0f:5b:b7:ab:c0:ae:7b:a1:00:cc:42:62:0c:47:79:
03:c3:42:34:7d:2a:b2:aa:af:8a:cb:57:cb:14:90:
f5:9a:68:21:b7:76:05:41:d1:b1:b0:7a:a3:fd:bb:
c2:10:a3:02:2c:7b:f7:4c:7c:d4:dd:c6:e3:1c:2d:
d6:89:9c:1c:e1:fc:a3:de:51:b6:ab:f8:dd:96:68:
93:bc:44:6a:0c:60:22:15:4c:09:ad:7d:6a:ad:59:
4d:45:22:6f:83:bb:45:a7:07:7a:c1:35:de:9d:2f:
3d:97:e3:6f:e9:4b:4e:c6:d0:b5:18:75:c1:f1:84:
c3:8f:68:ab:eb:05:f2:e0:f2:39:77:60:55:1b:42:
e2:d8:f3:cc:f6:52:fd:07:dc:ce:f5:ba:7b:70:39:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:9A:3B:6D:9D:18:E6:45:DF:8B:D7:68:71:5F:53:68:B9:11:7C
X509v3 Authority Key Identifier:
keyid:2B:6E:7D:29:F1:6A:CB:46:C5:82:58:CA:90:84:E4:31:DA:B0:E7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/2B6E7D29F16ACB46C58258CA9084E431DAB0E783.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K259KfFqy0bFgljKkITkMdqw54M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/2B6E7D29F16ACB46C58258CA9084E431DAB0E783.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:aa:29:ae:70:80:a3:c6:9a:f8:05:6d:e0:29:dd:9a:6d:f6:
87:bf:24:b4:57:ac:50:6d:08:1a:7a:01:ca:d2:a6:37:e1:d1:
a9:35:c8:e7:e2:da:e4:66:47:10:e6:3d:a9:10:ef:e2:a3:9b:
a5:54:53:09:32:19:00:a3:ed:40:27:34:39:a2:34:be:b5:9a:
86:63:06:8f:66:75:f1:f6:3d:3f:3e:02:80:80:ac:52:33:bc:
f2:ef:5b:f6:62:b7:3f:14:ac:3d:c7:be:2c:f8:f6:b8:4f:8e:
98:fe:1b:1e:8d:f0:ba:33:d4:a6:f6:73:fc:6c:10:b1:56:b3:
59:22:39:7a:4f:c3:05:6a:5f:35:fa:14:ff:3f:32:41:0f:d2:
9b:e3:7f:fc:01:51:a5:28:36:ae:e3:ee:cb:f1:52:6a:25:4d:
92:c2:18:60:db:ca:87:9c:f4:51:c0:20:67:a5:7a:53:a5:5c:
ce:7c:c0:e6:0f:e8:9a:88:e3:5e:00:0d:81:1d:11:b2:8f:4d:
a4:32:8f:cd:20:b3:67:85:b7:ee:c5:70:85:e8:f3:02:70:8d:
7b:ba:f4:67:04:9a:02:44:0a:d5:b9:55:6c:cb:d1:37:c1:d7:
be:9e:37:f6:c2:49:d4:5c:a9:9b:17:8f:5e:b2:b8:56:10:91:
a9:da:16:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:52 2025 by rpki-client