Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.mft
File: AFEA1F33E4145F82FED94ECD283D6160AC108679.mft (raw, json)
Hash identifier: oZSR0IPF1dqCgRIal17mhm46RlwIvkvchMRAXQh6WbE=
Subject key identifier: A6:3B:C9:F9:A3:11:6B:27:E4:C8:01:36:AF:73:73:22:AA:4C:08:DD
Authority key identifier: AF:EA:1F:33:E4:14:5F:82:FE:D9:4E:CD:28:3D:61:60:AC:10:86:79
Certificate issuer: /CN=afea1f33e4145f82fed94ecd283d6160ac108679
Certificate serial: 0B15A261B87265C9C9A12F81922115D19D5D1CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-ofM-QUX4L-2U7NKD1hYKwQhnk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.mft
Manifest number: 16
Signing time: Tue 31 Dec 2024 00:37:13 +0000
Manifest this update: Tue 31 Dec 2024 00:32:13 +0000
Manifest next update: Wed 01 Jan 2025 02:30:13 +0000
Files and hashes: 1: AS199310.asa (hash: tS8Rj5WNt0cSdOxdg80ytLAXKL1tJyC+gdBFa1sxjgU=)
2: AFEA1F33E4145F82FED94ECD283D6160AC108679.crl (hash: auhyWiWblQX1b3GRZDFrxL7wXGj+F2wRjxDORvdK8Lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:15:a2:61:b8:72:65:c9:c9:a1:2f:81:92:21:15:d1:9d:5d:1c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea1f33e4145f82fed94ecd283d6160ac108679
Validity
Not Before: Dec 31 00:32:13 2024 GMT
Not After : Jan 1 02:30:13 2025 GMT
Subject: CN=A63BC9F9A3116B27E4C80136AF737322AA4C08DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:82:cd:10:fe:97:b7:8c:c7:77:91:9d:ea:
00:8b:a9:b2:51:2c:b2:10:7a:71:3f:fe:90:3d:6e:
f9:11:8b:86:e9:ae:ad:c1:24:83:a3:80:bc:f8:63:
eb:92:6a:fd:75:e6:b4:da:4a:95:b0:fa:0d:eb:44:
df:b1:4c:da:8f:39:a4:6b:ea:cd:0e:c1:2d:7b:32:
cf:94:92:73:9b:97:c2:64:c4:35:d3:f3:97:9c:b1:
42:d5:98:10:31:08:32:3d:ba:e4:b3:81:ec:f8:76:
46:ba:de:77:62:bf:c9:08:b3:6e:e7:ce:0a:7a:3c:
3a:81:14:c4:6f:44:b4:f3:a9:c7:a7:75:58:53:d5:
64:12:bc:cc:69:a0:13:be:dd:d6:5e:e8:fb:08:11:
33:75:a0:e2:40:47:2a:46:58:e7:4f:01:f6:1d:23:
a3:8d:24:d1:d9:00:75:e7:8d:10:09:ce:27:ea:23:
5a:47:a1:46:0c:71:f3:a1:b2:fd:79:1e:ef:50:a1:
e6:d6:40:b5:dc:e7:c9:cb:c2:20:a2:a2:92:ef:b6:
90:a4:54:14:70:fc:a8:1d:52:f4:4d:62:3f:e8:1c:
5f:32:4c:94:0c:a3:6d:e5:a6:78:0d:c0:67:07:5d:
4c:b7:93:9c:e9:68:0e:bc:54:bd:b5:21:0e:cf:eb:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:C9:F9:A3:11:6B:27:E4:C8:01:36:AF:73:73:22:AA:4C:08:DD
X509v3 Authority Key Identifier:
keyid:AF:EA:1F:33:E4:14:5F:82:FE:D9:4E:CD:28:3D:61:60:AC:10:86:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-ofM-QUX4L-2U7NKD1hYKwQhnk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:70:ee:ea:bc:13:06:1c:25:6b:72:c4:b9:ac:2b:d4:91:6f:
04:96:1b:ae:23:26:45:dc:da:28:1a:7c:d2:cf:20:5e:cc:86:
51:7e:22:7b:ed:a1:8e:0e:85:bc:e7:d5:7a:5a:15:2a:0c:92:
74:0b:20:c3:37:64:2d:71:e6:dd:70:11:8f:bf:4b:63:92:b9:
73:9d:55:54:e0:bf:b3:90:5c:cc:3a:a8:47:62:ee:fd:a3:31:
ac:5e:a2:2f:9c:40:fd:67:a2:d7:a9:90:41:3c:bc:59:a4:31:
c2:8d:77:bb:b7:0c:48:ed:e4:2e:09:70:ad:da:dc:63:7b:ac:
5d:4b:7c:81:7b:69:9f:e9:d5:d0:ca:e5:da:17:c7:51:de:73:
74:14:7f:7c:a7:fc:ce:b1:95:8e:45:b8:5a:b0:8b:3c:b8:bb:
a5:c8:f6:61:44:33:fc:c4:63:1b:46:70:83:b2:20:01:ef:76:
90:d8:d7:b9:72:be:49:a6:76:b0:1e:99:77:eb:ad:d2:32:db:
1d:4d:09:13:44:f0:12:2c:d9:57:7d:16:4b:d7:f5:ee:90:0d:
7d:9f:2c:76:40:ab:93:76:80:5a:27:61:90:e1:c3:d7:13:a2:
5e:a6:2b:ee:33:f1:a8:66:98:e1:c1:00:0a:f3:22:bf:9c:08:
53:9c:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:02 2025 by rpki-client