Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
File: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft (raw, json)
Hash identifier: xqQaZOSHQpl4ga9+oeemvKrBQeEImJz49YXqQiKCGEc=
Subject key identifier: FE:E1:5D:15:67:96:05:B0:A8:98:23:D3:0E:5E:75:83:E4:5E:4C:22
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Certificate issuer: /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial: 646190E18814B5D437B3CA60E14F18CBC7FEDFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
Manifest number: 67
Signing time: Sat 29 Mar 2025 05:31:53 +0000
Manifest this update: Sat 29 Mar 2025 05:26:53 +0000
Manifest next update: Sun 30 Mar 2025 07:47:53 +0000
Files and hashes: 1: AS213915.asa (hash: WNoePLBPk99sollnieSJLQGheEbE8N7gHweNXQmzvJc=)
2: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl (hash: Ax/dWt504tnzGlwerxe7b5Dz3SCObvR/DZVagtqACIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:61:90:e1:88:14:b5:d4:37:b3:ca:60:e1:4f:18:cb:c7:fe:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Validity
Not Before: Mar 29 05:26:53 2025 GMT
Not After : Mar 30 07:47:53 2025 GMT
Subject: CN=FEE15D15679605B0A89823D30E5E7583E45E4C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:08:4f:63:be:d0:4c:b3:e6:84:6c:21:c7:
30:42:11:1d:ae:9d:dd:ba:45:26:f7:44:dd:b0:8a:
51:c4:28:ab:9f:c6:f2:a9:bc:87:94:06:53:12:fd:
c8:c1:dc:8a:e1:72:61:bf:c8:4d:2f:5f:15:31:19:
97:b0:8b:cc:2f:44:46:69:c6:c0:5c:94:d0:c7:56:
d4:55:4d:fd:c8:14:ec:bd:85:ea:39:80:ff:a0:3b:
d3:e3:a0:aa:a0:ed:4f:a1:43:34:3c:5e:7b:ae:66:
70:1d:aa:48:21:ba:e9:94:36:20:8f:82:36:9b:cd:
6d:78:75:a8:cd:7e:37:ae:43:e7:fd:42:e9:a1:6f:
9c:10:a9:27:41:1d:c7:0c:e9:45:35:d1:89:8b:58:
24:68:40:c6:a0:18:27:3b:ed:b7:eb:d6:1a:1c:9f:
78:7b:ec:4a:c7:a5:18:ee:92:5e:e4:3d:2f:0a:2d:
cc:57:76:17:e4:bd:5b:56:c5:2a:28:d5:f8:68:f4:
3c:a5:27:83:42:f1:95:0f:c1:0f:2c:f9:df:60:98:
0a:7e:2e:f0:e5:5e:fc:13:04:da:9e:48:dd:90:ca:
8d:96:60:bf:b1:0a:2c:0a:40:98:b1:ac:39:ae:3e:
21:48:67:0b:4d:34:88:03:f9:66:54:ef:d0:9b:9d:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E1:5D:15:67:96:05:B0:A8:98:23:D3:0E:5E:75:83:E4:5E:4C:22
X509v3 Authority Key Identifier:
keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:29:b6:0e:df:57:c2:c4:21:86:4c:13:88:f4:1a:cb:a6:63:
b0:20:28:6d:b1:46:f0:aa:fd:c5:bd:17:eb:b4:81:70:ec:92:
ab:a7:5d:53:19:94:60:2f:e6:e6:30:c6:f5:60:06:da:c3:2a:
a3:08:c5:59:4a:43:4c:bc:98:fa:ee:91:bb:28:74:48:bc:f8:
b3:e9:8b:a8:55:b9:a6:ff:58:35:2b:c3:23:6b:51:9b:f7:66:
6e:f5:9f:67:4c:5c:43:6c:18:96:c7:93:fc:d5:bd:22:01:5b:
32:2b:44:93:1c:0a:7d:40:e6:7a:94:4d:f6:e5:7a:1c:24:40:
de:58:ee:98:d1:ef:8e:5c:15:d0:fe:fc:b7:2d:4f:e0:84:a5:
c7:71:43:d4:f0:d4:58:b8:48:03:cd:9e:56:dd:7a:6e:65:41:
e3:15:16:9b:48:0a:93:ef:c2:5b:27:ce:0f:2f:9b:e8:e4:06:
4d:39:2d:af:cc:e5:88:d7:9b:9e:54:c9:b4:3c:3a:5d:cf:42:
e4:de:18:2f:af:d4:5c:63:e5:a3:14:0d:8d:f2:7d:78:70:70:
be:f5:64:ea:a3:29:eb:cc:d8:95:69:49:23:38:3d:8e:5e:c2:
6c:b8:66:f7:47:c7:33:ec:8f:cf:a1:11:0d:f5:f8:00:16:71:
58:84:31:7e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZGGQ4YgUtdQ3s8pg4U8Yy8f+36wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGI0ODk0OTUxMmIzZjdiZjlhOTFiOGJjODk3ZTdlMThh
NDEyN2NkZDAeFw0yNTAzMjkwNTI2NTNaFw0yNTAzMzAwNzQ3NTNaMDMxMTAvBgNV
BAMTKEZFRTE1RDE1Njc5NjA1QjBBODk4MjNEMzBFNUU3NTgzRTQ1RTRDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCteghPY77QTLPmhGwhxzBCER2u
nd26RSb3RN2wilHEKKufxvKpvIeUBlMS/cjB3IrhcmG/yE0vXxUxGZewi8wvREZp
xsBclNDHVtRVTf3IFOy9heo5gP+gO9PjoKqg7U+hQzQ8XnuuZnAdqkghuumUNiCP
gjabzW14dajNfjeuQ+f9Qumhb5wQqSdBHccM6UU10YmLWCRoQMagGCc77bfr1hoc
n3h77ErHpRjukl7kPS8KLcxXdhfkvVtWxSoo1fho9DylJ4NC8ZUPwQ8s+d9gmAp+
LvDlXvwTBNqeSN2Qyo2WYL+xCiwKQJixrDmuPiFIZwtNNIgD+WZU79CbnbGdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/uFdFWeWBbComCPTDl51g+ReTCIwHwYDVR0j
BBgwFoAUS0iUlRKz97+akbi8iX5+GKQSfN0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzcvNEI0ODk0OTUxMkIzRjdCRjlBOTFCOEJDODk3RTdFMThBNDEyN0NERC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1MwaVVsUkt6OTctYWtiaThpWDUtR0tR
U2ZOMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNy80QjQ4OTQ5NTEyQjNGN0JGOUE5
MUI4QkM4OTdFN0UxOEE0MTI3Q0RELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSm2Dt9XwsQhhkwTiPQa
y6ZjsCAobbFG8Kr9xb0X67SBcOySq6ddUxmUYC/m5jDG9WAG2sMqowjFWUpDTLyY
+u6Ruyh0SLz4s+mLqFW5pv9YNSvDI2tRm/dmbvWfZ0xcQ2wYlseT/NW9IgFbMitE
kxwKfUDmepRN9uV6HCRA3ljumNHvjlwV0P78ty1P4ISlx3FD1PDUWLhIA82eVt16
bmVB4xUWm0gKk+/CWyfODy+b6OQGTTktr8zliNebnlTJtDw6Xc9C5N4YL6/UXGPl
oxQNjfJ9eHBwvvVk6qMp68zYlWlJIzg9jl7CbLhm90fHM+yPz6ERDfX4ABZxWIQx
fg==
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:54 2025 by rpki-client