Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft
File: 5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft (raw, json)
Hash identifier: 4jev3EvPV/Fp0Dk7se45gfI4WjG8bsKCu6joQW3cpVQ=
Subject key identifier: F3:94:02:BB:F0:8C:43:0B:E1:19:64:37:DF:67:D6:29:9A:3B:DC:80
Authority key identifier: 5A:16:7C:3F:9E:B9:84:FB:15:C8:F4:95:7E:17:F1:2C:5D:36:9D:B9
Certificate issuer: /CN=5a167c3f9eb984fb15c8f4957e17f12c5d369db9
Certificate serial: 6A4BC8F13D7BDC44C508F2AD88FA322387506B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhZ8P565hPsVyPSVfhfxLF02nbk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft
Manifest number: 21
Signing time: Sat 24 Feb 2024 01:08:20 +0000
Manifest this update: Sat 24 Feb 2024 01:03:20 +0000
Manifest next update: Sun 25 Feb 2024 04:06:20 +0000
Files and hashes: 1: AS215828.asa (hash: Fxfwfr5n7GD1j53pOKpyaoup6ugjXTTvdRQBZlSKmow=)
2: 5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.crl (hash: 2brgBqKYAovIL/1USD9r26HCZt19uToJUNgxgrlYtIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4b:c8:f1:3d:7b:dc:44:c5:08:f2:ad:88:fa:32:23:87:50:6b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a167c3f9eb984fb15c8f4957e17f12c5d369db9
Validity
Not Before: Feb 24 01:03:20 2024 GMT
Not After : Feb 25 04:06:20 2024 GMT
Subject: CN=F39402BBF08C430BE1196437DF67D6299A3BDC80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3d:1d:2f:70:fd:cc:59:ec:9b:95:8d:1d:8f:
eb:72:7e:e6:28:d4:8e:18:9c:56:a3:6d:3e:63:57:
bd:24:a6:49:44:aa:97:7d:cf:83:58:21:31:40:f8:
fe:50:bd:62:09:c2:58:81:b3:54:8c:cc:a3:60:0f:
21:d4:f6:86:6f:e7:df:bb:b3:d0:0a:20:8b:97:18:
6a:d9:e3:32:ad:42:53:df:54:84:6c:21:a0:8f:4a:
90:dc:fc:b1:a2:4e:53:be:5e:60:dd:7f:58:a7:58:
1b:49:16:b9:4c:f3:87:97:e0:e5:62:cb:67:8b:8a:
06:fa:66:ae:12:d6:99:7a:5a:2e:cf:4d:e8:f1:a4:
71:87:6f:04:dc:0f:95:07:e5:27:8c:bc:ad:93:a0:
32:b2:df:2e:1d:80:44:6b:e4:0c:70:11:8a:b7:43:
ae:59:ea:6d:13:19:01:6c:75:d6:b5:ee:55:ba:54:
d9:40:7f:1a:06:38:e5:d8:1d:0f:b3:28:c4:cc:b8:
a7:a6:9b:5f:05:fc:9a:3b:ec:02:7a:80:73:66:b4:
0c:5c:08:8a:d7:51:2e:9a:41:87:f4:da:24:c9:25:
63:2c:51:b6:db:71:df:f4:ac:33:7f:65:9c:c1:ee:
21:48:11:71:93:d8:40:a9:d1:33:f3:45:0e:4d:a4:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:02:BB:F0:8C:43:0B:E1:19:64:37:DF:67:D6:29:9A:3B:DC:80
X509v3 Authority Key Identifier:
keyid:5A:16:7C:3F:9E:B9:84:FB:15:C8:F4:95:7E:17:F1:2C:5D:36:9D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhZ8P565hPsVyPSVfhfxLF02nbk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/0/5A167C3F9EB984FB15C8F4957E17F12C5D369DB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0b:0a:3c:91:3c:05:9f:0d:bf:d1:9e:e3:83:9a:ae:d1:9b:
e5:09:f0:34:99:78:b1:d0:93:1f:34:e8:3b:14:c0:33:79:34:
1a:67:c5:66:2a:e9:13:a0:8e:f6:5a:dc:b3:86:73:64:d7:cc:
d8:31:ef:16:fe:79:32:8a:ca:5e:1c:59:ff:c7:82:43:5f:73:
c3:2a:10:89:a9:4e:c2:b3:1a:91:db:66:0f:56:0e:db:6b:32:
22:7c:36:34:8b:09:a0:2a:18:2e:09:35:21:3d:f5:6d:55:13:
b8:34:90:cb:02:4b:5c:6f:8d:3a:3c:15:f7:67:68:62:90:68:
73:90:a3:c3:ce:17:3b:65:78:11:c8:31:0f:d6:fd:46:74:93:
4d:7d:8e:c2:77:1e:46:06:2d:dd:53:a3:27:35:2f:24:14:d5:
df:d0:dd:af:d0:49:c2:70:f3:97:b6:88:7a:15:8e:60:d6:95:
35:78:b6:69:f4:e7:e1:58:91:1e:54:e3:01:2a:85:94:b8:31:
4a:b5:91:49:bc:f2:9d:59:f0:9c:7d:76:65:c0:15:7f:d4:47:
ed:c8:24:a0:85:be:8a:6f:c7:0b:43:75:3c:dc:a9:72:54:17:
4e:0a:17:d3:ca:ae:46:4c:64:ac:10:3f:91:8a:c9:e7:27:55:
44:46:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:10:18 2025 by rpki-client