Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
File: 9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft (raw, json)
Hash identifier: Rji4koVX4owYXUkIErrjb/zO+N+gf/7c4xJ9iT13dzQ=
Subject key identifier: FF:06:EB:BB:CF:1A:C7:0C:D4:65:58:4C:06:7C:E7:EE:55:6E:21:07
Authority key identifier: 9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C
Certificate issuer: /CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C
Certificate serial: 30B64CB7211BD3B47FF220EDB0E172F32A0967A7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
Manifest number: 0135
Signing time: Thu 06 Feb 2025 20:26:22 +0000
Manifest this update: Thu 06 Feb 2025 20:21:22 +0000
Manifest next update: Fri 07 Feb 2025 21:29:22 +0000
Files and hashes: 1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: ISxPaIAr0w+jmJbBaEWXIEHSE+CHx0GTfYgpjz88GTc=)
2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: TlfUIckGRAagg669M3xYDX52RxzXWa4zmUTL/zfVSIE=)
3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: sgJS+9fXpP0N1ynvWikQwztRvYYPuX1aHauJ8WKg3M4=)
4: 9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl (hash: CFgYWShYfxnvfhKfpvLEsINCahb2VooIfY74mrMeKzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b6:4c:b7:21:1b:d3:b4:7f:f2:20:ed:b0:e1:72:f3:2a:09:67:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C
Validity
Not Before: Feb 6 20:21:22 2025 GMT
Not After : Feb 7 21:29:22 2025 GMT
Subject: CN=FF06EBBBCF1AC70CD465584C067CE7EE556E2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:f6:3e:69:8c:53:13:9c:67:63:d3:5c:f7:
54:42:77:ca:59:5b:74:a6:86:43:3c:4b:ed:ba:6c:
0b:3b:35:56:56:3d:dc:36:70:eb:94:06:ed:21:3d:
03:3b:08:2c:54:67:43:93:5e:b1:02:c4:f5:9b:c4:
3b:91:e6:be:32:74:16:bc:a2:26:a3:82:0c:0d:67:
57:5d:bc:dc:0a:c3:c4:1a:ae:0d:1d:7d:b7:9a:7b:
58:24:d8:b6:6e:e6:51:14:81:b4:08:e2:96:02:42:
c8:ae:fd:00:53:e8:61:d0:10:f6:40:0c:27:80:e9:
d4:78:27:40:70:b2:54:0b:8e:4e:78:aa:21:02:d5:
b8:3f:f6:14:29:9e:ef:b7:5a:64:15:ee:21:1d:da:
26:5c:2b:ba:ce:9c:2a:4c:2d:84:fe:6c:7f:63:2d:
76:f9:89:4b:d8:c9:2b:f9:d7:15:3a:f6:a7:1c:3f:
10:45:5b:5c:83:c1:fb:3b:18:ad:e9:fb:0f:de:2d:
7b:74:5b:0f:97:62:52:e1:37:ab:69:76:47:5e:7a:
e5:4b:88:78:59:f0:ae:3e:44:d2:4d:73:97:22:d5:
31:86:db:ca:7c:23:42:99:d9:25:8b:cf:76:fe:66:
fd:b8:ce:09:b3:13:6b:c5:19:2e:51:c9:b9:78:57:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:06:EB:BB:CF:1A:C7:0C:D4:65:58:4C:06:7C:E7:EE:55:6E:21:07
X509v3 Authority Key Identifier:
keyid:9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9e:7c:f0:3e:14:bb:e0:8e:dd:b9:cc:2d:91:f7:5f:a8:ae:
58:63:86:22:1a:16:95:ca:e0:a6:a5:b0:ff:9e:3f:65:31:68:
39:ab:8a:3b:1a:7d:10:6b:98:86:5b:58:e2:75:a4:c6:bc:46:
87:f0:05:3c:ed:64:1f:40:ac:a4:ae:38:39:30:c5:26:ff:b3:
ce:fc:8f:57:e6:90:4c:01:50:09:77:cb:a9:a9:aa:ab:8a:9a:
d5:44:95:e8:f6:46:60:25:26:83:c9:9c:42:b1:02:47:ac:00:
23:05:6b:d6:03:48:0a:22:3e:1b:b3:87:7f:d6:2b:fa:8f:e2:
2b:e7:1c:41:a9:2a:0d:c0:9e:2b:f4:41:6e:35:43:b7:e7:d0:
f0:28:2f:10:67:b2:e5:af:a4:71:e3:45:a4:02:c2:bd:6d:e7:
d6:dc:2f:9e:02:0c:89:38:33:ed:0a:44:c9:22:ba:39:a6:64:
80:38:33:78:0d:91:08:82:81:5e:fe:49:91:5f:a1:4b:6b:32:
77:5c:1f:5e:7c:c4:56:94:fb:92:46:85:86:e7:e1:98:b1:80:
5b:ce:09:94:96:99:7c:a6:f5:b2:df:7b:fd:f8:4e:34:da:da:
0f:05:c6:a3:a3:8e:d7:2a:b3:65:39:da:65:22:b0:27:28:1a:
ca:12:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:29 2025 by rpki-client