Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier: GkDp5OO2ZMILhhFCytw7gCK/1Oo8bdhD/mHBv50s72Q=
Subject key identifier: 43:10:C1:9A:88:4D:92:8E:65:1A:FB:95:13:77:61:D4:8C:DF:DF:E9
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer: /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial: 782A6AE76919AD4AA424A63B2D2BB441D44FE971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number: 12
Signing time: Fri 28 Mar 2025 23:14:45 +0000
Manifest this update: Fri 28 Mar 2025 23:09:45 +0000
Manifest next update: Sun 30 Mar 2025 01:02:45 +0000
Files and hashes: 1: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: GO0Vgba+3Lr1NUkTE9r8fV4bk16TdqxxEDm8kZPBNrU=)
2: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2a:6a:e7:69:19:ad:4a:a4:24:a6:3b:2d:2b:b4:41:d4:4f:e9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Validity
Not Before: Mar 28 23:09:45 2025 GMT
Not After : Mar 30 01:02:45 2025 GMT
Subject: CN=4310C19A884D928E651AFB95137761D48CDFDFE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:e5:be:8a:72:f9:b8:25:d1:b3:1d:c7:61:
58:5c:7e:da:87:c1:4c:49:e6:f7:56:de:84:e5:79:
b5:90:43:6c:e9:84:ba:4f:57:84:c1:5b:8b:06:36:
97:0c:15:5f:31:72:9a:b0:ec:21:1e:00:fe:5f:8d:
33:a8:46:ff:16:63:ba:bb:41:5a:94:17:01:6f:02:
45:6b:97:52:09:e5:e0:46:c0:29:ec:6c:cf:5f:83:
5c:ad:78:41:c7:31:b4:74:ce:35:4f:b3:4b:39:39:
fd:a7:72:b3:53:18:61:a6:f7:df:41:9e:48:99:bf:
1f:2a:5a:1e:83:53:d5:03:d2:d7:27:1d:41:7e:f0:
32:6e:88:13:47:d0:28:33:c3:c9:46:df:7d:87:ab:
41:35:bd:16:4a:da:89:87:f6:e0:65:09:3a:6a:a6:
aa:04:4c:0d:bc:b7:21:04:52:ed:ff:19:f5:a1:40:
91:60:cb:2c:39:f9:87:9c:2e:9d:ae:df:0c:34:a2:
a5:21:f1:29:61:47:c2:a8:2d:dc:d8:29:14:0c:d1:
79:28:67:57:95:d0:59:63:dd:8c:c8:3b:d9:14:0a:
5b:f7:fe:95:f7:d0:c9:95:46:dc:b5:34:f0:7c:fe:
de:6a:b8:ed:b2:46:9f:16:07:bf:1a:84:fa:7f:a1:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:C1:9A:88:4D:92:8E:65:1A:FB:95:13:77:61:D4:8C:DF:DF:E9
X509v3 Authority Key Identifier:
keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:af:45:ef:42:4b:ce:c6:d4:8f:48:ef:f5:40:8f:21:85:
34:f5:7e:72:cd:8f:43:f9:71:ec:93:13:68:3d:c5:1e:1f:25:
21:b6:dc:1f:77:fb:62:de:28:1a:0d:ea:85:69:96:81:3c:30:
db:e0:f3:cb:a6:39:58:66:3e:b0:5f:d7:6d:d7:66:d3:c7:98:
6e:d3:30:40:2e:1a:a5:3e:b8:a0:fa:4b:8b:35:d8:5e:f8:02:
5e:99:e0:91:68:29:8d:9d:bf:3d:1a:87:b5:c7:d4:2a:90:92:
0a:26:92:8e:23:80:73:03:4f:43:9c:6f:b5:4b:b9:22:3e:4e:
94:e8:26:04:d8:51:e0:2c:4b:7d:5e:a2:9b:94:b9:f1:e6:f7:
d6:ea:09:48:db:da:1c:97:f3:db:6d:28:d0:e7:b2:2c:cd:78:
6e:32:69:15:4a:88:41:52:67:b5:22:81:ac:be:4e:1e:9f:91:
1e:3d:3e:03:ab:08:3a:f8:a8:6a:c1:67:f3:ee:60:9f:f2:d4:
2d:9d:85:f6:a0:d3:65:45:36:e2:e4:f0:ad:3a:0f:dd:bf:3d:
54:b8:f2:1b:7f:43:bf:e0:e7:6c:14:f9:2c:4c:d1:15:56:e8:
47:0e:20:b3:a3:2f:f5:4a:25:b3:37:bf:8b:72:33:9b:9f:b4:
07:e1:5c:0a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUeCpq52kZrUqkJKY7LSu0QdRP6XEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGUzNDM0ZjEzYTU3MmJmNWUxODlmMWI3ZmExNDhmNWQx
MDdmNmY1NzAeFw0yNTAzMjgyMzA5NDVaFw0yNTAzMzAwMTAyNDVaMDMxMTAvBgNV
BAMTKDQzMTBDMTlBODg0RDkyOEU2NTFBRkI5NTEzNzc2MUQ0OENERkRGRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJ+W+inL5uCXRsx3HYVhcftqH
wUxJ5vdW3oTlebWQQ2zphLpPV4TBW4sGNpcMFV8xcpqw7CEeAP5fjTOoRv8WY7q7
QVqUFwFvAkVrl1IJ5eBGwCnsbM9fg1yteEHHMbR0zjVPs0s5Of2ncrNTGGGm999B
nkiZvx8qWh6DU9UD0tcnHUF+8DJuiBNH0Cgzw8lG332Hq0E1vRZK2omH9uBlCTpq
pqoETA28tyEEUu3/GfWhQJFgyyw5+YecLp2u3ww0oqUh8SlhR8KoLdzYKRQM0Xko
Z1eV0Flj3YzIO9kUClv3/pX30MmVRty1NPB8/t5quO2yRp8WB78ahPp/ocpTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQxDBmohNko5lGvuVE3dh1Izf3+kwHwYDVR0j
BBgwFoAUTjQ08TpXK/XhifG3+hSPXRB/b1cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWJjOWEyZTctNjFlOC00ZTcwLTk0MmQtYzU0NWNmMDY3
NGMzLzAvNEUzNDM0RjEzQTU3MkJGNUUxODlGMUI3RkExNDhGNUQxMDdGNkY1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RqUTA4VHBYS19YaGlmRzMtaFNQWFJC
X2IxYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YmM5YTJlNy02
MWU4LTRlNzAtOTQyZC1jNTQ1Y2YwNjc0YzMvMC80RTM0MzRGMTNBNTcyQkY1RTE4
OUYxQjdGQTE0OEY1RDEwN0Y2RjU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBKvRe9CS87G1I9I7/VA
jyGFNPV+cs2PQ/lx7JMTaD3FHh8lIbbcH3f7Yt4oGg3qhWmWgTww2+Dzy6Y5WGY+
sF/Xbddm08eYbtMwQC4apT64oPpLizXYXvgCXpngkWgpjZ2/PRqHtcfUKpCSCiaS
jiOAcwNPQ5xvtUu5Ij5OlOgmBNhR4CxLfV6im5S58eb31uoJSNvaHJfz220o0Oey
LM14bjJpFUqIQVJntSKBrL5OHp+RHj0+A6sIOvioasFn8+5gn/LULZ2F9qDTZUU2
4uTwrToP3b89VLjyG39Dv+DnbBT5LEzRFVboRw4gs6Mv9Uolsze/i3Izm5+0B+Fc
Cg==
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:50 2025 by rpki-client