Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
File: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft (raw, json)
Hash identifier: 0X27j3NJV/trRHzXICdaAp5haXQfDkVLwLS0CFOMKz0=
Subject key identifier: 12:FC:64:7C:96:8F:89:A9:E6:2F:C1:E1:44:39:CB:0A:4E:D7:A3:28
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial: 5B7D4C1A5DA71E1F3BE5D1050CF67F90943BC241
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
Manifest number: 01B9
Signing time: Wed 01 Jan 2025 04:12:34 +0000
Manifest this update: Wed 01 Jan 2025 04:07:34 +0000
Manifest next update: Thu 02 Jan 2025 05:55:34 +0000
Files and hashes: 1: 326130613a363034343a393030373a3a2f34382d3438203d3e2030.roa (hash: zdoHRl9eAZv7jX3eavPcp2wW0eTr8w9Ub9N1fnI5ZzE=)
2: 326130613a363034343a393030343a3a2f34382d3438203d3e20323135343433.roa (hash: N53r+fj2CPzmLYdetT5f7xYtYHnCPblA/IGh+xuvj+s=)
3: 326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa (hash: 4s76+hjle7KOmr0oXZaew7Z44NKxKS5Gb9h6WpO2Mqk=)
4: 326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa (hash: AfzgORGNBz+QXzbNFXc6g6iPrPpHM5f2+sQ8boLLtk8=)
5: 326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa (hash: 8z/u3oMp7pRsAS7NaPJ16DpgAAP2eKfJs4XUiSJwoZg=)
6: 326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa (hash: XpXMXD7WLvF9GioVgay+deJvR4n/11AkEGGwbKMgjqI=)
7: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl (hash: bDySIkUVIAoURPObyEyOt5pUS5kqYyVJtrDz/SFS7TY=)
8: 326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa (hash: ZmUx6T9QZCqdwLpnTe2pjNUl5+p3SFgFCFUVwxwmZA4=)
9: 326130613a363034343a393036303a3a2f34342d3434203d3e20323135343339.roa (hash: pd2Lrnwn2H4VmAPI0n0iBYgBDsKpqvsJNjLpsnux5z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7d:4c:1a:5d:a7:1e:1f:3b:e5:d1:05:0c:f6:7f:90:94:3b:c2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Validity
Not Before: Jan 1 04:07:34 2025 GMT
Not After : Jan 2 05:55:34 2025 GMT
Subject: CN=12FC647C968F89A9E62FC1E14439CB0A4ED7A328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:a0:33:f2:4e:ac:8c:bf:de:6b:93:0d:1f:
c0:de:de:52:3f:c0:16:ca:8c:73:83:1a:79:b4:05:
1f:95:54:04:3b:eb:c5:fb:2b:2a:ec:29:ed:82:7a:
f8:df:7d:7f:4c:90:ab:85:81:a3:77:29:d4:ed:d2:
39:06:57:4a:db:95:6c:fa:ca:bb:82:4e:03:cd:8b:
be:f9:6a:3a:26:0b:db:43:fe:63:36:e7:c6:76:14:
4b:b0:84:83:6a:55:db:6b:2d:3d:67:fe:1b:b0:a6:
3d:e0:98:7e:7d:79:88:45:54:ee:f5:23:f8:ee:f4:
ee:10:30:08:75:40:b0:da:c0:0b:d1:1c:1d:f4:bb:
d8:1a:22:9d:df:f7:64:ae:b4:da:5a:3c:87:10:8f:
43:30:3f:fb:12:a7:a3:f9:b1:f4:d3:60:2f:d2:f3:
d4:29:94:59:b7:d9:ed:84:5c:59:88:b8:53:b0:7c:
66:68:8a:74:7a:13:e0:51:a9:26:65:f1:c8:91:66:
af:75:c5:6f:bc:84:7f:1d:34:44:4c:f9:8d:7f:fd:
91:7a:90:c3:6c:e0:a5:c4:86:a0:81:85:d5:64:9d:
c2:68:cf:12:d5:49:a3:6d:b7:ab:9a:79:ed:5d:88:
96:96:bc:ac:d9:7e:a6:a2:21:37:f9:13:04:df:77:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FC:64:7C:96:8F:89:A9:E6:2F:C1:E1:44:39:CB:0A:4E:D7:A3:28
X509v3 Authority Key Identifier:
keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ee:65:fe:57:60:bb:ed:cb:c4:1d:e2:ac:87:a5:56:d0:26:
1a:63:10:d0:5d:e1:ae:ff:57:68:26:e5:9f:ef:f5:e7:63:9f:
a3:52:d8:92:d3:2f:19:bc:b1:94:b6:05:cb:c1:b5:b5:39:a5:
f9:b2:74:3e:78:25:89:8b:e6:8a:ee:2f:dd:0f:f7:de:f2:e7:
2b:60:66:02:08:c1:1a:e7:7e:aa:2c:73:91:29:0b:60:32:8f:
f4:49:96:8c:00:43:18:83:fa:c3:79:36:2a:1a:bd:2e:53:17:
e1:b3:e5:06:16:20:4c:9b:be:9d:89:03:9b:56:b1:70:e8:d3:
e0:c1:40:2f:7f:69:7d:d8:f4:bd:9c:a6:e1:9b:84:e8:94:e7:
54:be:2c:78:2c:c3:70:5d:5d:ea:59:d1:89:b5:8a:da:d8:97:
98:bf:d9:a4:57:d8:df:4a:4c:d3:5a:60:90:e6:2a:f5:98:95:
d4:3e:da:cd:bc:db:c5:5c:e9:f3:a0:0f:13:64:f6:94:01:4d:
77:e1:f5:55:ab:dc:29:4e:3b:4e:9e:2a:43:ee:dc:e5:cd:f9:
30:f6:de:09:89:4e:29:f0:41:4c:ea:a1:30:d2:96:0f:8d:f5:
55:b6:ac:13:31:cf:4e:db:55:72:17:a7:5b:3b:fe:ae:14:d9:
9c:ed:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:38 2025 by rpki-client