
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier: C6CxqRDieCWLhLFqPPpkfPPXG08pw/XJfxIFo19D/jE=
Subject key identifier: D1:62:4A:8B:E7:97:9C:EC:C6:50:A0:26:17:4F:BD:F6:41:FB:16:C2
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 778D1544745855F8210B4CD84C744C63F5A92E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number: 036E
Signing time: Sat 29 Mar 2025 07:09:01 +0000
Manifest this update: Sat 29 Mar 2025 07:04:01 +0000
Manifest next update: Sun 30 Mar 2025 07:25:01 +0000
Files and hashes: 1: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: qd/Ph9A9CDfvAqGd41KcEdWklkdgtsq8rhp02l/ctEQ=)
2: 38342e33382e3235342e302f32342d3234203d3e203634323637.roa (hash: 9kep0y5iWWXIJpO3TiiRho2v0RZ/t5nwkbbRFjNIkHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8d:15:44:74:58:55:f8:21:0b:4c:d8:4c:74:4c:63:f5:a9:2e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Mar 29 07:04:01 2025 GMT
Not After : Mar 30 07:25:01 2025 GMT
Subject: CN=D1624A8BE7979CECC650A026174FBDF641FB16C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:cf:04:48:8a:0b:4c:ff:10:09:0f:15:b0:
63:47:dd:ba:fb:9f:b4:07:35:4b:96:fd:e8:0c:3e:
e9:7c:3d:9e:1f:57:12:f0:ac:53:ac:04:10:4a:25:
70:21:b0:f7:b4:0f:36:98:1a:45:b6:d9:76:eb:fe:
04:b6:71:9d:53:a5:18:82:11:10:66:74:4c:49:5c:
dc:58:13:e1:f8:b3:bd:93:a8:88:9e:c3:d4:92:ab:
79:04:ab:9e:2e:c5:73:7c:cd:2c:88:4c:53:b9:be:
80:46:02:c5:d4:34:b8:48:b8:b8:49:4a:a1:ff:8f:
1b:58:36:d8:84:89:eb:d9:49:50:d1:35:1d:37:c2:
20:a8:b1:d4:60:d7:20:e9:a5:83:91:6e:49:bb:88:
4a:a7:e1:8b:de:5b:c7:29:b0:16:a3:39:3d:4b:f4:
ce:bb:43:d7:31:8b:91:d1:30:fb:8b:54:07:52:ba:
45:c7:1d:b3:a4:7a:37:26:8b:4a:75:e4:f2:da:49:
db:1a:ff:6e:be:ef:ea:63:ac:6a:10:69:bd:22:6a:
85:0e:44:52:2c:4c:b2:32:03:5a:da:ff:e0:94:30:
59:b9:d0:5e:91:df:86:2f:a9:e3:33:b7:4c:a2:e9:
b1:6d:3d:77:43:00:26:1d:eb:9b:64:a1:4e:d6:8f:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:62:4A:8B:E7:97:9C:EC:C6:50:A0:26:17:4F:BD:F6:41:FB:16:C2
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:73:7a:3a:27:8d:1b:a8:e2:51:ad:7d:27:42:d5:33:f4:
22:e8:0d:74:d6:65:98:ce:a1:79:16:85:f6:c7:e6:4e:be:67:
ae:94:6c:be:1b:c7:30:93:6f:6b:fc:c1:cf:ae:88:47:7e:19:
9b:aa:b4:cc:83:7a:fa:cf:0c:37:21:7b:f6:83:fb:95:34:d4:
c8:59:18:1c:bf:5f:f8:fe:d9:ab:12:67:58:0d:db:30:60:12:
e4:01:ab:0a:38:63:2b:b8:d9:93:d9:91:7d:af:89:b0:79:1a:
7d:62:a9:1b:4c:d8:d6:53:a3:0c:54:0b:98:b5:60:1a:6b:01:
fe:9b:60:27:ce:b2:93:a4:9e:93:9d:b5:e5:84:ec:d8:a0:b9:
08:96:d8:74:2f:12:34:79:c2:47:26:81:2d:59:d8:ac:c7:da:
07:3a:a5:40:f9:52:26:84:5d:28:ab:30:71:2b:31:3b:f4:c7:
32:8a:7b:86:b2:03:fa:66:60:6d:bd:cf:8b:b5:9a:53:a3:b7:
05:27:47:2c:3b:c9:63:9c:d2:fd:e0:6d:f4:0e:9f:39:33:72:
e0:ab:2d:58:a6:1d:01:99:f3:d0:7f:89:24:f9:b2:cc:c9:3f:
7a:82:27:d3:a9:2e:5c:34:e2:77:0c:ce:29:51:65:74:79:88:
a0:02:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:15:06 2025 by rpki-client