Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.mft
File: 449D34B3AE807293E23A0F8D13D8F4581073B255.mft (raw, json)
Hash identifier: 6IfKPd+yfUF8b8cNK2Z2pO6EI6l5TysB412KlMt9bck=
Subject key identifier: 22:5B:BA:81:BF:09:8A:56:56:61:69:84:C4:8C:30:F2:71:78:15:4E
Authority key identifier: 44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
Certificate issuer: /CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Certificate serial: 0912A2373701592C475F0425BDF6DEBDA0367872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.mft
Manifest number: 015C
Signing time: Tue 05 Dec 2023 18:40:59 +0000
Manifest this update: Tue 05 Dec 2023 18:35:59 +0000
Manifest next update: Wed 06 Dec 2023 19:04:59 +0000
Files and hashes: 1: 449D34B3AE807293E23A0F8D13D8F4581073B255.crl (hash: k45EoFrW7bF3brZFkIIcdIV44vCtlrDBfICp9zHoSFc=)
2: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: XA8Z0UGN6UN8fQLjlYbFDCpbyjGG4cbx3Ss5Lz2cJgY=)
3: 3134362e31392e35332e302f32342d3234203d3e203633303233.roa (hash: JfqItKBXDdBK3/M9521plj4220aUSBOBo4T2760VQNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:12:a2:37:37:01:59:2c:47:5f:04:25:bd:f6:de:bd:a0:36:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Validity
Not Before: Dec 5 18:35:59 2023 GMT
Not After : Dec 6 19:04:59 2023 GMT
Subject: CN=225BBA81BF098A5656616984C48C30F27178154E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:0a:10:c4:ef:a2:9e:57:95:6b:97:4e:46:
50:e3:50:2c:0b:fc:be:b9:6b:43:72:f0:8a:ed:ac:
6c:89:d4:01:ad:f5:ec:c3:97:78:a0:b6:9a:d9:8f:
85:3f:52:2d:c1:f0:31:13:d6:5d:c3:54:81:d7:f9:
3d:4f:18:28:4c:f5:63:df:e2:8a:8f:f0:87:99:8b:
5f:2d:2d:63:52:f7:26:dc:15:56:cb:48:f0:9b:87:
2a:a4:05:e1:3e:96:70:c7:20:bc:53:0a:16:12:3e:
19:86:35:5f:c0:55:ea:df:16:38:7c:c4:4a:a4:cb:
22:c5:92:01:b1:fb:83:d2:14:1d:99:a3:31:fd:a9:
0a:17:ec:78:ef:a5:4d:5e:ef:61:81:64:7b:d8:6f:
31:0b:4d:8c:56:94:17:6d:e6:a1:b8:95:c4:dd:e9:
4a:d2:39:45:d5:40:ea:01:b6:41:d5:06:2d:9d:61:
d7:f2:34:0d:22:c8:cb:5e:6f:8b:b7:1d:37:31:b0:
fc:f7:e7:7d:01:d9:01:04:c1:96:ba:1a:ae:79:f8:
7e:f6:6d:32:18:7f:83:d4:93:2a:5d:3c:aa:b6:9e:
27:8a:5f:87:07:39:17:36:73:7e:4f:86:dd:af:40:
4d:e8:7f:27:cc:f8:8e:08:d3:08:dd:2c:29:51:eb:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:BA:81:BF:09:8A:56:56:61:69:84:C4:8C:30:F2:71:78:15:4E
X509v3 Authority Key Identifier:
keyid:44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:09:8a:6c:6f:02:d5:d7:b9:3e:41:86:f7:f5:2f:6a:d4:e1:
31:88:b1:de:17:7b:9b:04:b7:8c:9f:21:31:b5:6b:f6:e9:32:
74:3e:f2:54:24:5f:da:7b:9e:bf:b6:d3:42:4b:91:d6:3a:e4:
21:01:c4:4f:f2:f3:6d:3b:e9:7d:bb:a1:fc:33:72:3f:dd:9c:
1a:ce:f5:bb:ab:d1:b1:f4:11:56:39:41:86:6e:c5:fb:35:84:
be:ac:24:03:64:b4:87:54:60:23:5e:51:23:24:ab:a2:89:b4:
37:de:b6:30:97:75:d5:5f:93:08:15:34:2b:03:ac:bb:3a:83:
a8:6a:b5:cc:dd:0c:e1:60:19:31:bc:e4:77:7e:2e:4b:51:85:
04:7d:15:4a:37:68:6b:9a:49:da:39:8f:eb:41:3a:53:29:01:
af:f1:d1:1c:5e:46:82:ee:2f:08:fb:12:cf:89:81:64:f0:38:
57:3a:a8:26:07:3a:26:eb:05:9c:f0:1e:96:c6:b3:41:d1:d6:
3c:e0:fb:87:cc:e2:d6:f0:b6:3b:06:7e:de:ea:0a:e2:c3:2d:
b7:15:a9:79:60:5d:55:bc:7c:38:88:ea:59:ec:85:17:23:85:
e7:a0:c0:36:f5:59:33:01:7a:3c:96:43:d0:b2:2b:4f:44:16:
72:8c:e7:0b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCRKiNzcBWSxHXwQlvfbevaA2eHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5ZDM0YjNhZTgwNzI5M2UyM2EwZjhkMTNkOGY0NTgx
MDczYjI1NTAeFw0yMzEyMDUxODM1NTlaFw0yMzEyMDYxOTA0NTlaMDMxMTAvBgNV
BAMTKDIyNUJCQTgxQkYwOThBNTY1NjYxNjk4NEM0OEMzMEYyNzE3ODE1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPQoQxO+inleVa5dORlDjUCwL
/L65a0Ny8IrtrGyJ1AGt9ezDl3igtprZj4U/Ui3B8DET1l3DVIHX+T1PGChM9WPf
4oqP8IeZi18tLWNS9ybcFVbLSPCbhyqkBeE+lnDHILxTChYSPhmGNV/AVerfFjh8
xEqkyyLFkgGx+4PSFB2ZozH9qQoX7HjvpU1e72GBZHvYbzELTYxWlBdt5qG4lcTd
6UrSOUXVQOoBtkHVBi2dYdfyNA0iyMteb4u3HTcxsPz3530B2QEEwZa6Gq55+H72
bTIYf4PUkypdPKq2nieKX4cHORc2c35Pht2vQE3ofyfM+I4I0wjdLClR68afAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUIlu6gb8JilZWYWmExIww8nF4FU4wHwYDVR0j
BBgwFoAURJ00s66AcpPiOg+NE9j0WBBzslUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmFkODNlOGYtMDAyMy00OGY4LTg0NzMtNzkwOWM5OWFj
MzA4LzAvNDQ5RDM0QjNBRTgwNzI5M0UyM0EwRjhEMTNEOEY0NTgxMDczQjI1NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JKMDBzNjZBY3BQaU9nLU5FOWowV0JC
enNsVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYWQ4M2U4Zi0w
MDIzLTQ4ZjgtODQ3My03OTA5Yzk5YWMzMDgvMC80NDlEMzRCM0FFODA3MjkzRTIz
QTBGOEQxM0Q4RjQ1ODEwNzNCMjU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAmKbG8C1de5PkGG9/Uv
atThMYix3hd7mwS3jJ8hMbVr9ukydD7yVCRf2nuev7bTQkuR1jrkIQHET/LzbTvp
fbuh/DNyP92cGs71u6vRsfQRVjlBhm7F+zWEvqwkA2S0h1RgI15RIySroom0N962
MJd11V+TCBU0KwOsuzqDqGq1zN0M4WAZMbzkd34uS1GFBH0VSjdoa5pJ2jmP60E6
UykBr/HRHF5Ggu4vCPsSz4mBZPA4VzqoJgc6JusFnPAelsazQdHWPOD7h8zi1vC2
OwZ+3uoK4sMttxWpeWBdVbx8OIjqWeyFFyOF56DANvVZMwF6PJZD0LIrT0QWcozn
Cw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:10 2025 by rpki-client