Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
File: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft (raw, json)
Hash identifier: T4FdvNMZ7Z0zJ6Z5lbNNYByO3GZS+3gU3K41UrDjwdg=
Subject key identifier: 99:5A:46:21:6D:30:F0:0E:59:99:65:CD:04:DA:22:F4:AC:B7:D0:58
Authority key identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3
Certificate issuer: /CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3
Certificate serial: 258F9D92A221AD236446A0D0C2D47720166E9594
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
Manifest number: 026F
Signing time: Sat 01 Feb 2025 01:42:51 +0000
Manifest this update: Sat 01 Feb 2025 01:37:51 +0000
Manifest next update: Sun 02 Feb 2025 03:57:51 +0000
Files and hashes: 1: 326130373a353463373a343034303a3a2f34322d3432203d3e20323136303839.roa (hash: qPVhlGUPjHIOWP/5yRh1nX5yknvRUgXVZrwqIGwcG6o=)
2: 326130373a353463373a343038303a3a2f34322d3432203d3e20323136303839.roa (hash: PSK/VnPkC0Wx84ZfxyLpC5q9DAlNnqbxnoS1F86zKXo=)
3: 326130373a353463373a343030303a3a2f34322d3432203d3e20323136303839.roa (hash: dr3ji63XD+oWk6cRBemGYJyGc/2BAsrYFzshGDdgAQk=)
4: 326130373a353463373a343063303a3a2f34322d3432203d3e20323136303839.roa (hash: IEkqCo1PYtZIgJs8hjaJOZoqli4MCs+0wVtFiuHrMRQ=)
5: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl (hash: IQIRl/nUZPCKSKTk5TJY7gp5+BCFv7M+a49rwLi7e5k=)
6: 326130373a353463373a343130303a3a2f34322d3432203d3e20323136303839.roa (hash: TznseHfiDZ1jpmhMm2lzqcGBWQrzFxaalzxO12gQ4iQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8f:9d:92:a2:21:ad:23:64:46:a0:d0:c2:d4:77:20:16:6e:95:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3
Validity
Not Before: Feb 1 01:37:51 2025 GMT
Not After : Feb 2 03:57:51 2025 GMT
Subject: CN=995A46216D30F00E599965CD04DA22F4ACB7D058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:5f:eb:aa:9a:ab:d9:2a:18:20:1c:9c:9a:
3b:18:ef:ee:76:fa:b6:a2:bd:10:9d:33:46:1b:87:
ee:9b:50:4a:88:55:ff:c4:84:49:24:d7:e4:d3:9c:
d3:85:7d:26:ef:63:ee:d5:e7:43:08:55:4b:a1:a5:
81:81:1d:62:ea:c3:ad:cf:b0:b9:5a:fa:5a:b3:57:
83:fb:e3:7c:56:40:b5:19:aa:1f:07:12:e1:43:d3:
a9:d7:aa:03:0d:7c:3d:6f:c5:5f:b1:37:c5:2b:06:
bc:a4:b2:57:b7:09:df:6f:c7:5f:f4:49:22:82:0a:
7b:1d:75:97:1b:ed:89:e1:d2:e7:3a:1d:99:0f:81:
e7:92:d9:4c:96:a5:fe:49:85:b6:7d:2b:dc:45:d6:
42:cd:09:df:dd:19:cd:46:5d:86:05:5e:85:9e:dc:
39:53:43:e0:10:34:d8:57:0e:e2:a6:09:4f:31:07:
d5:4c:d4:49:be:64:d8:ce:5f:ba:15:da:f3:2a:5b:
a9:1e:4d:55:34:e0:0e:07:bb:0e:3c:f4:5e:d6:18:
5e:ed:d6:bd:45:4f:be:92:4a:62:80:79:df:b7:7d:
5f:80:35:ce:ec:b1:51:42:63:35:e6:0e:89:2e:48:
d5:0e:53:c9:5f:35:20:6b:96:f3:ef:43:91:1a:63:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:46:21:6D:30:F0:0E:59:99:65:CD:04:DA:22:F4:AC:B7:D0:58
X509v3 Authority Key Identifier:
keyid:C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:d2:d6:6a:1f:0b:81:a8:cf:de:80:fe:56:f6:c6:83:11:
7a:ff:59:f3:70:04:e0:5d:a2:0f:6d:bd:f1:34:bf:aa:32:16:
a4:5d:6e:d9:ac:92:09:7a:f0:ce:76:56:72:28:6a:5c:b0:6a:
5f:c1:13:83:bf:07:ea:ab:dc:f5:22:d0:60:48:48:cf:c6:cc:
79:58:11:47:a3:6b:f4:83:c1:b3:b7:12:1a:f0:2e:cc:8c:90:
89:d3:4e:05:6d:3b:24:2e:69:3b:98:bb:66:62:c7:5d:1f:ba:
3c:83:1b:40:12:b7:6f:07:e1:fa:0f:91:d0:12:10:8c:5b:0e:
e0:fd:36:0e:21:c0:94:ea:2a:6a:73:69:28:b8:18:e9:7c:b7:
01:aa:05:17:c8:ba:d8:d0:07:14:46:28:33:c5:40:a3:a3:98:
93:0b:c7:5b:88:bc:96:3a:22:06:33:d5:19:9e:53:50:6d:1c:
f6:e6:40:5a:df:69:63:bb:a5:c8:3e:da:14:5f:57:7c:6c:9b:
e3:4d:56:95:e0:f2:6f:59:0a:e2:63:88:fb:ab:d8:ae:f0:45:
37:f4:51:19:85:4a:a5:30:fd:17:e4:b4:5a:93:a1:ae:e4:fb:
e0:19:fc:85:61:2f:59:65:3d:25:71:6b:a2:66:c7:fd:c6:fc:
e2:9c:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:59:47 2025 by rpki-client