Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier: tAFQlTZ0cdd4Z7rj+NA4tFEazFVDWLFXrkomO9+X7ls=
Subject key identifier: 95:A2:C5:35:19:6D:AC:72:EA:1F:1E:57:21:49:6A:5B:40:14:AD:13
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial: 03AC7FC4C0AC0B95E8EA7740822CB2A4BC8FCF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number: 012F
Signing time: Sat 29 Mar 2025 08:37:12 +0000
Manifest this update: Sat 29 Mar 2025 08:32:12 +0000
Manifest next update: Sun 30 Mar 2025 08:40:12 +0000
Files and hashes: 1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: zyaDc4Q6i9JNSG7nCQoekBMZfCTKXS8LEaXkQGe3U0A=)
2: AS215849.asa (hash: 9UZCyM4teIzSn1Im2N0q8YebSfMGXCtXc/dqDr5kuPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ac:7f:c4:c0:ac:0b:95:e8:ea:77:40:82:2c:b2:a4:bc:8f:cf:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
Validity
Not Before: Mar 29 08:32:12 2025 GMT
Not After : Mar 30 08:40:12 2025 GMT
Subject: CN=95A2C535196DAC72EA1F1E5721496A5B4014AD13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:f1:86:8c:60:5f:ea:cf:98:1c:0b:a8:90:
ce:6c:ec:c1:e2:f7:e6:51:b6:5d:5c:c0:41:c4:02:
7f:33:ab:81:6d:22:09:b7:cb:e1:81:de:03:7f:de:
cd:44:21:23:3b:fa:7b:0e:e1:eb:41:b6:33:3d:bd:
d9:19:94:08:34:76:a4:e2:6d:e3:02:9a:0f:4e:25:
a6:41:38:13:b6:32:9e:a5:83:ec:1f:1a:5c:43:d2:
86:bd:4e:7c:37:6f:84:1c:85:c7:3e:7e:a6:19:f3:
a1:b4:31:42:06:83:80:24:4e:d7:3b:cb:a5:f0:81:
4f:03:37:aa:2a:06:d2:63:16:ac:11:e2:59:be:a8:
84:e6:99:46:f3:aa:ff:f3:80:92:a5:66:2d:59:5b:
ca:ba:f8:3d:9b:ed:4f:a4:39:98:cc:66:41:16:80:
c1:83:8f:e5:a6:d5:17:8b:fa:47:b3:90:bc:26:07:
86:37:68:2e:d1:6a:d7:6d:e3:dd:a5:50:bb:6f:a1:
69:6a:29:3a:6b:62:2c:88:87:8e:3f:1a:f5:dd:01:
f9:cd:8c:5e:83:1a:29:ea:ca:7e:e0:b6:66:f1:26:
9f:81:70:70:c0:36:35:b6:87:37:90:a6:e6:d7:38:
d6:f5:1f:be:04:0e:65:b9:77:53:66:fd:47:fe:4c:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:C5:35:19:6D:AC:72:EA:1F:1E:57:21:49:6A:5B:40:14:AD:13
X509v3 Authority Key Identifier:
keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1a:c2:bf:cd:90:22:55:9f:f9:b4:b4:ee:da:d6:93:7d:dc:
09:ef:6a:84:49:24:34:c1:e5:34:ac:1d:48:02:65:75:f9:24:
f5:93:f0:73:30:65:99:54:56:59:3f:a2:de:d9:9c:1f:89:6b:
23:ba:59:5b:d3:45:6f:13:d8:de:92:fd:ca:a8:90:ca:0a:04:
79:0a:35:79:a4:3e:c9:84:c8:74:86:22:87:a9:0f:35:e2:18:
2f:af:95:ba:66:d0:97:05:30:6c:77:af:4f:e8:27:4d:7d:d3:
63:15:7e:87:f0:e1:f3:a1:8f:e4:0f:5d:eb:2f:e9:7d:c2:b6:
3f:7e:40:c8:7d:8e:d9:d2:f9:df:ac:24:f1:a3:70:d3:fb:02:
7c:b5:d5:ff:76:b5:33:58:3b:fd:d8:3d:5a:e3:6a:1b:1d:bb:
30:4b:4c:bf:64:67:5b:09:22:60:e3:8e:da:01:96:95:93:b4:
09:3d:43:4f:2a:8e:7e:b8:9f:17:63:64:d6:82:d5:61:90:a9:
91:0c:6d:59:36:5d:0b:2d:3d:be:bd:f7:4d:7c:84:92:d3:78:
e8:d4:84:24:07:21:44:86:0c:ed:ab:22:5b:b0:85:c5:33:85:
e2:99:8c:88:7e:c7:21:44:c4:0a:98:97:0a:e9:d3:b8:31:e7:
12:ee:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:13:24 2025 by rpki-client