Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
File: DA90910C27E0A78D5F8A404E69C260275561C59B.mft (raw, json)
Hash identifier: 93v9rht3ZYyLrYNsvwlR/e0Bq+5CiG6+le3+niSfuAc=
Subject key identifier: FE:74:8F:42:2A:0F:29:27:22:87:D5:C7:FE:D2:37:DB:FB:A9:4E:50
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Certificate issuer: /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial: 79B75A32067F655B0BC919DB6C6D5A2B6C531F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
Manifest number: 0301
Signing time: Mon 15 Jul 2024 13:36:15 +0000
Manifest this update: Mon 15 Jul 2024 13:31:15 +0000
Manifest next update: Tue 16 Jul 2024 16:58:15 +0000
Files and hashes: 1: 34352e3135342e362e302f32332d3234203d3e20383334.roa (hash: sEM+wvMa6H1pJO7WzojPoW/d6861xG/ziCdqwi+Y+Do=)
2: DA90910C27E0A78D5F8A404E69C260275561C59B.crl (hash: wbj37jwnGYRpmZz4fLD7s6gHIv+OaUuOrT2b0oop/Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b7:5a:32:06:7f:65:5b:0b:c9:19:db:6c:6d:5a:2b:6c:53:1f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
Validity
Not Before: Jul 15 13:31:15 2024 GMT
Not After : Jul 16 16:58:15 2024 GMT
Subject: CN=FE748F422A0F29272287D5C7FED237DBFBA94E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:a2:ae:10:7d:71:9d:4a:70:99:d8:c6:1f:
f9:31:36:ac:ba:26:92:75:49:08:c4:69:10:c5:4e:
fd:7d:5a:fe:b6:f0:2f:55:30:50:10:a9:15:c8:0f:
6c:df:19:e3:d2:94:36:a9:1c:3b:30:75:1c:57:b5:
fd:73:be:37:a2:fe:61:89:d5:e3:7c:ad:66:92:1f:
1b:97:53:c0:bb:b1:78:d3:5c:92:2b:ac:76:0c:8b:
55:4f:af:21:e0:c3:0d:e2:a0:9a:9b:04:27:d0:bf:
1d:28:b0:2d:90:c2:45:9a:66:c6:5d:08:fd:b0:87:
0e:8d:fb:05:2e:a5:1f:a1:00:73:ea:97:03:91:5b:
8f:61:ce:ff:45:94:68:8b:ec:05:07:46:5a:d9:e5:
4a:3e:17:67:e8:74:7b:78:26:ef:d7:46:22:29:19:
e9:50:3d:b5:fc:d4:4d:b5:3c:85:ba:f1:07:48:6e:
97:8b:8d:8b:96:d1:f4:6f:35:be:c3:5a:f9:b7:1b:
ea:13:72:15:11:7c:16:25:9f:ca:aa:b5:cd:42:20:
55:df:36:2d:69:6c:6a:ee:fa:6e:81:33:e6:26:b5:
f1:80:56:5f:5b:f0:aa:c1:49:07:23:e3:aa:e8:29:
82:a6:53:f6:35:d2:53:d0:8e:fb:62:a5:05:f6:be:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:8F:42:2A:0F:29:27:22:87:D5:C7:FE:D2:37:DB:FB:A9:4E:50
X509v3 Authority Key Identifier:
keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b6:7c:8d:09:49:87:2c:fd:0c:69:3b:3c:5e:8e:4a:27:d8:
35:23:4c:c0:e3:42:7d:3a:a6:c2:ba:c9:4e:36:0a:b1:02:6d:
30:23:b5:2a:f6:33:84:03:38:8c:d2:c9:92:30:30:5c:00:20:
7b:2d:94:d8:33:fa:00:1d:ad:12:6f:db:32:87:e9:6b:dd:14:
a7:8c:12:70:cb:f8:d0:d2:28:ce:ca:97:10:43:94:8d:ab:e9:
6f:23:74:c5:82:18:f4:c6:e0:f8:f5:2c:38:21:73:40:ae:59:
a6:5f:a9:4d:dc:ca:81:5e:43:6a:07:ac:92:30:e6:b7:49:54:
9e:d9:10:53:64:d4:e2:ad:75:02:71:4d:c8:c6:4e:1a:47:5d:
36:6e:2d:2b:80:47:fa:da:b8:96:ca:ed:fb:d1:1b:13:fa:41:
85:a3:45:c6:2b:c6:51:9b:cf:38:09:cd:8e:23:03:f9:f8:7b:
1f:9e:69:a1:0c:be:dd:c7:b7:72:7c:7c:12:b9:d2:9a:ea:c1:
a8:4c:92:74:8f:68:d4:a3:cc:b0:d9:75:99:97:fb:48:58:fa:
89:f6:79:88:24:fd:49:4e:0b:29:2b:4c:5d:01:d0:d9:10:4c:
c1:e3:f5:e2:f4:55:cb:56:d3:57:f2:6b:11:cf:88:01:d0:d7:
b2:f7:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:28 2025 by rpki-client