Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.mft
File: A91B6523E1C9781A34EC2BE5316C06F044E9BB64.mft (raw, json)
Hash identifier: Z4JY2qD9rY1Mofw28lCRRndwWhxUmdg4NJSrmRgMdu0=
Subject key identifier: D4:C4:AB:EA:37:9D:26:AA:11:3C:0E:8F:64:61:EB:E1:4D:97:EE:D0
Authority key identifier: A9:1B:65:23:E1:C9:78:1A:34:EC:2B:E5:31:6C:06:F0:44:E9:BB:64
Certificate issuer: /CN=A91B6523E1C9781A34EC2BE5316C06F044E9BB64
Certificate serial: 72F6621BB9E086D359D80D6FB1A3A48AFEEFD819
Authority info access: rsync://rpki.co/repo/AS205432/0/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.mft
Manifest number: FE
Signing time: Mon 27 Nov 2023 16:48:28 +0000
Manifest this update: Mon 27 Nov 2023 16:43:28 +0000
Manifest next update: Tue 28 Nov 2023 19:05:28 +0000
Files and hashes: 1: A91B6523E1C9781A34EC2BE5316C06F044E9BB64.crl (hash: eq0oTLeb8Bg/0fseUGLGVMaqSbhnKOi//TXhp6/oZDQ=)
2: 326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa (hash: hH0EXbdveeImJQc1EhH0L+hOa62pXa2OMFLpudruz/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f6:62:1b:b9:e0:86:d3:59:d8:0d:6f:b1:a3:a4:8a:fe:ef:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6523E1C9781A34EC2BE5316C06F044E9BB64
Validity
Not Before: Nov 27 16:43:28 2023 GMT
Not After : Nov 28 19:05:28 2023 GMT
Subject: CN=D4C4ABEA379D26AA113C0E8F6461EBE14D97EED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:de:c1:2b:08:74:e5:0a:67:ac:3e:12:27:
ce:9c:58:e0:c5:66:11:33:7b:36:55:04:20:ba:fe:
cd:4b:34:2b:3a:cd:05:bb:e7:64:6f:52:07:7d:50:
61:67:c8:74:70:be:2c:a8:83:a7:1f:f8:82:0f:8c:
78:a8:e9:63:f4:c9:61:75:b4:c9:e7:91:fc:9d:90:
1f:13:41:ba:d6:12:02:5e:04:33:38:24:c7:b3:7e:
b9:6d:38:d2:ec:41:07:11:55:2b:ad:77:c9:e2:61:
49:bb:86:ef:a0:f5:55:ef:d2:f8:65:ba:77:f2:59:
36:c8:83:5f:9e:10:06:ee:e1:11:18:f1:f2:e2:b7:
1b:72:34:c1:09:b3:eb:cd:27:31:57:7c:4a:c3:69:
2b:d3:e1:18:bf:bb:61:e9:e1:a0:f5:e3:29:04:2e:
35:bb:68:5d:b8:51:02:21:77:f4:19:e6:0c:cf:0f:
84:13:b0:fe:6b:57:a3:f3:01:f7:ab:af:f6:ff:1f:
90:7e:08:9b:d7:16:24:54:d1:4a:15:53:c1:cd:84:
e0:e9:61:77:91:b7:db:12:e6:27:fa:eb:c6:71:7c:
7e:ed:f6:8c:3b:44:39:62:8d:cf:4f:0e:cb:85:b7:
bc:ee:28:3d:ce:34:2a:de:a6:2f:7c:86:65:1a:1a:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C4:AB:EA:37:9D:26:AA:11:3C:0E:8F:64:61:EB:E1:4D:97:EE:D0
X509v3 Authority Key Identifier:
keyid:A9:1B:65:23:E1:C9:78:1A:34:EC:2B:E5:31:6C:06:F0:44:E9:BB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0f:d7:aa:f1:7f:46:95:25:bb:6f:c6:05:15:06:3e:6c:b9:
c7:9b:cb:b7:cd:fd:8b:95:c5:e4:41:c5:bd:22:b8:16:ae:da:
cd:65:67:c8:9a:f4:3c:57:f9:a3:6f:3d:c7:d8:c0:8f:ea:e1:
45:28:2e:e4:a9:92:f8:4d:3a:33:1f:10:15:a2:a5:ae:bd:4a:
c5:7a:72:20:c6:cd:73:d8:f5:70:d4:a4:74:2a:6c:eb:4c:21:
40:40:c7:9b:f4:fb:cd:70:3b:53:5f:c5:5b:81:92:4a:16:b0:
bf:50:5c:fa:34:66:c7:bf:84:98:91:39:c8:56:29:99:0f:0a:
a3:c8:b0:a1:12:37:3a:c8:a3:3a:fb:b1:10:6c:67:a7:b5:b5:
b2:47:1c:80:98:f3:af:71:11:ac:92:6c:bc:12:b1:fb:5c:af:
53:aa:06:ec:b5:c5:ec:3e:e4:8f:9a:35:0f:e6:0a:8d:87:f3:
38:a2:09:b2:a0:3a:ee:9e:7e:0e:3a:c8:6b:09:9e:b9:f7:72:
60:8d:5a:b7:6c:41:00:0a:98:ad:e0:91:06:77:82:44:aa:7d:
59:f3:6e:20:e7:b4:7d:37:54:cb:c6:c8:bb:65:0d:87:30:b1:
9f:7c:e2:69:8c:79:d0:fa:61:e9:3b:93:05:49:a6:20:ea:3c:
28:53:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:30 2025 by rpki-client