Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: o6OaqorRIBXMjpJ6wL+YRbw/NoSmEUKrIbZVUH7Rj+0=
Subject key identifier: 29:5B:4E:76:2F:53:85:AC:64:2C:C1:23:1F:12:36:F9:48:31:BD:FF
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 0109C6B0BD836632E49C2AF57245BFCF7EE82152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 01DA
Signing time: Sat 29 Mar 2025 04:06:15 +0000
Manifest this update: Sat 29 Mar 2025 04:01:15 +0000
Manifest next update: Sun 30 Mar 2025 07:11:15 +0000
Files and hashes: 1: AS215828.asa (hash: pljuqamxoFyrKyOB146Yq2hAbS4GhBcCYl/vXn6L4AI=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: dakIjZtNQM3rFBtjKUGGV6LJBih7KKgyeXgYF1n+bq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:09:c6:b0:bd:83:66:32:e4:9c:2a:f5:72:45:bf:cf:7e:e8:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Mar 29 04:01:15 2025 GMT
Not After : Mar 30 07:11:15 2025 GMT
Subject: CN=295B4E762F5385AC642CC1231F1236F94831BDFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:3d:a1:ac:07:e4:ff:f4:a0:b0:33:17:0c:
4c:0d:2b:e5:f7:ab:ee:43:c0:3f:5a:93:d4:7b:8c:
05:78:37:95:37:02:c9:4d:ca:ea:45:6e:0b:03:03:
ac:ef:92:a6:32:d0:cc:22:70:72:12:26:2c:5e:51:
d8:5a:ab:a8:7f:ad:cd:8d:57:ef:cd:3c:7f:40:e4:
a9:8d:32:1b:62:e9:96:2e:b0:bb:56:ae:75:3b:6b:
41:83:8e:ce:d2:ac:2c:7b:68:7e:93:4f:dd:7a:0f:
58:ce:f0:56:50:62:d6:4f:8a:3b:dd:26:9a:05:2e:
c8:b3:e0:ef:79:38:ba:09:87:82:39:8e:69:a2:8b:
90:7b:13:22:75:20:ac:cc:e1:6e:1b:bc:e8:b7:25:
47:59:e8:ee:91:0c:e6:bf:99:38:d8:58:4d:1b:7a:
0d:1a:aa:0c:68:02:0b:51:41:5c:1d:c7:a0:29:32:
a2:11:54:23:a9:61:e4:c4:9b:a3:dd:48:d8:31:4e:
a0:d2:bc:2e:73:2b:4c:0b:11:f4:5c:ef:29:9f:21:
dc:f5:63:05:e8:3f:a2:79:ba:cf:3b:3c:41:60:a1:
c5:cb:cf:06:bd:76:ab:26:4f:48:76:0b:56:7c:76:
56:a7:69:a3:33:11:cd:87:80:df:55:74:a2:8a:f1:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:4E:76:2F:53:85:AC:64:2C:C1:23:1F:12:36:F9:48:31:BD:FF
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bf:b1:da:3d:21:ba:e3:c6:4b:7f:7e:1a:b0:bc:be:16:bd:
2d:09:20:d7:ad:d5:3b:e3:4e:2e:b4:e6:6a:0a:d5:23:7f:10:
67:89:ff:89:4a:93:fe:9a:38:27:0e:d4:a7:2a:6a:24:9d:f3:
f9:e8:09:94:64:3b:45:e4:a5:dd:c1:85:db:72:17:08:e1:48:
a2:65:63:39:1a:02:2d:65:9f:d0:dc:98:4e:5d:bc:8d:91:50:
50:1f:9f:44:f6:3b:1e:21:e6:66:62:70:14:01:e5:05:e2:c2:
fd:54:79:05:bd:a1:60:c6:3a:30:68:f0:d6:77:04:d8:8b:3b:
2c:3c:29:92:9d:6f:b8:56:13:93:cc:e2:5c:a0:3a:58:f8:16:
77:11:e5:88:60:e7:cf:4a:15:a9:87:0c:79:d5:6c:8d:7b:f0:
a5:34:ea:79:9b:a7:31:e4:3d:83:04:c3:31:13:34:de:98:6f:
35:ca:e7:13:bd:b9:a1:d3:cd:60:80:4e:4c:26:0c:1c:b1:84:
8f:93:ea:a5:7a:60:b1:8a:0b:12:ff:98:82:6d:02:7d:44:c1:
77:68:36:08:24:0a:5c:44:47:0e:1f:4a:9a:fc:5c:df:31:98:
21:35:71:af:aa:a4:62:bc:40:88:ce:f7:f1:8e:0a:93:1e:29:
59:96:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:51:04 2025 by rpki-client