Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft
File: 34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft (raw, json)
Hash identifier: ZYuzTofhkqEmgB4Qr5gDOpZMy/w5pYqPK4iVAmt+k1s=
Subject key identifier: BE:42:A4:A6:8D:85:94:CC:6F:78:B1:85:CF:8D:C3:98:47:1E:C5:72
Authority key identifier: 34:F7:2D:63:FC:3B:CE:5A:5B:FE:EB:6B:F5:FF:3C:9F:CF:67:88:BE
Certificate issuer: /CN=34f72d63fc3bce5a5bfeeb6bf5ff3c9fcf6788be
Certificate serial: 044A45A99B3E33821484FD7B2F80C5231224E558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPctY_w7zlpb_utr9f88n89niL4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft
Manifest number: 17
Signing time: Sun 07 Jul 2024 17:57:05 +0000
Manifest this update: Sun 07 Jul 2024 17:52:05 +0000
Manifest next update: Mon 08 Jul 2024 21:15:05 +0000
Files and hashes: 1: AS210563.asa (hash: OVcVbxv2yghugx6XQJ2vkpUtVJKiqPCDOdgKU5TuyCI=)
2: 34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.crl (hash: vKZ/jlet4OwWSl60N6aDvBvYnxV4w87hD9k/ALo3ESk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4a:45:a9:9b:3e:33:82:14:84:fd:7b:2f:80:c5:23:12:24:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f72d63fc3bce5a5bfeeb6bf5ff3c9fcf6788be
Validity
Not Before: Jul 7 17:52:05 2024 GMT
Not After : Jul 8 21:15:05 2024 GMT
Subject: CN=BE42A4A68D8594CC6F78B185CF8DC398471EC572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:54:da:14:de:48:75:20:05:2e:6b:b8:81:
86:24:b8:2d:cb:3a:d7:92:a7:89:99:27:56:2a:16:
53:8e:e6:06:e3:ec:76:2f:f4:f6:2f:a0:ed:1c:bc:
94:32:cc:ef:b7:d6:0b:54:3d:fd:d1:c9:42:00:65:
c7:79:ba:07:9f:76:3e:3d:00:07:1c:07:d4:ee:84:
1f:ee:c9:e4:36:07:3f:cb:54:f8:cc:2a:c7:bf:ac:
27:23:dd:f4:77:c4:65:2f:b3:b4:1a:f1:8e:d4:ba:
e0:a8:f6:ac:ea:d6:56:2b:45:3d:70:07:6d:8b:b3:
2b:83:cc:52:8e:55:ff:50:dc:7d:c7:05:d2:60:09:
01:0f:a4:35:fd:49:e0:36:35:e7:a0:a5:ae:79:7b:
88:79:e1:a0:b1:9f:e4:ca:eb:e8:5b:54:08:d3:e3:
a3:10:fd:f0:46:9e:26:2f:54:dd:9e:e7:77:48:31:
61:1b:e1:b3:9e:87:9e:26:41:98:27:24:1e:0d:eb:
10:05:9e:a7:1d:6f:8a:66:97:85:8f:d7:e5:25:57:
b0:9f:3c:81:56:fd:60:1f:23:25:93:6c:f1:5c:5f:
7f:e5:75:f9:92:7b:ca:c8:5c:f3:1d:d2:bb:26:99:
d9:c9:82:3e:3d:ba:c8:0a:4d:75:3e:69:7b:94:50:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:A4:A6:8D:85:94:CC:6F:78:B1:85:CF:8D:C3:98:47:1E:C5:72
X509v3 Authority Key Identifier:
keyid:34:F7:2D:63:FC:3B:CE:5A:5B:FE:EB:6B:F5:FF:3C:9F:CF:67:88:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPctY_w7zlpb_utr9f88n89niL4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/8/34F72D63FC3BCE5A5BFEEB6BF5FF3C9FCF6788BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:83:65:fb:c3:a0:40:ca:d0:47:0d:de:48:8d:fd:30:d6:51:
0e:b9:57:43:ea:8b:76:6e:e7:cb:9f:a6:2c:cc:82:25:95:25:
90:b2:f6:a2:65:18:9c:9e:a9:d3:aa:a8:92:2c:f8:e1:79:0e:
00:5b:56:ab:f5:6f:ee:ad:a0:8e:e3:bb:47:df:26:17:66:52:
9f:9e:d1:fe:9d:06:95:91:77:d3:9f:08:84:93:74:bb:03:fd:
6a:e6:61:7a:06:63:df:d5:70:a2:2b:f5:de:7f:32:fa:34:40:
d0:87:fa:df:b4:83:d3:ee:fd:8a:13:df:20:04:13:ce:3c:34:
ea:64:f8:a3:39:d3:85:d9:d8:0d:c1:d7:80:28:72:eb:bb:e6:
ae:1a:ff:c3:3f:ca:37:6e:f1:3a:f0:68:4f:5e:03:16:28:2e:
a9:05:b3:c1:6f:c9:8b:4b:d2:88:cb:08:7f:8a:31:48:75:cb:
30:bd:9a:9e:4d:5e:a3:3f:9d:4b:52:93:81:7c:8b:08:54:37:
77:3e:35:5e:01:aa:f8:a7:cb:c4:78:ac:ac:0b:07:f2:22:ed:
1d:1d:c9:9d:2b:47:6c:97:03:ff:d7:07:8e:45:84:bf:88:e4:
38:ad:21:1a:0d:c8:35:f3:4f:af:a7:a8:47:5f:16:7d:19:04:
54:d5:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:26 2024 by rpki-client on console-fra.rpki-client.org