Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.mft
File: DE87352238D030DC2AB690BC1B25FE640745DB3C.mft (raw, json)
Hash identifier: dwaz8cP5vcBl5cklKi29JECHtSiRsIpaP32qhLXSVdk=
Subject key identifier: AB:9F:CD:E8:B8:FA:45:3B:B9:C8:57:97:87:43:B5:20:CB:65:C6:E1
Authority key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Certificate issuer: /CN=de87352238d030dc2ab690bc1b25fe640745db3c
Certificate serial: 29A654F014BA0E3BB9615C3F96A314233C5AABBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.mft
Manifest number: 12
Signing time: Tue 02 Jan 2024 06:16:39 +0000
Manifest this update: Tue 02 Jan 2024 06:11:39 +0000
Manifest next update: Wed 03 Jan 2024 10:00:39 +0000
Files and hashes: 1: DE87352238D030DC2AB690BC1B25FE640745DB3C.crl (hash: VIkMK78c9oejjuFh/SLeClA8ZRqaHGKOghHKnVZdIsI=)
2: 326131333a656634353a3a2f33322d3332203d3e20323136333938.roa (hash: nQjtV45jZ2Up3nBBJeikcEdVLWeYDPXJaUcoqa/B15k=)
3: 3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa (hash: Jh79SHTlvOgsQEXA5V4QsYse2QQPVjWnpWK0W62txK0=)
4: 326131333a656634343a3a2f33382d3338203d3e20323136333938.roa (hash: 0tnY+YPqWkhSf4ujI1Pn7x4JrZD92/Hu0JppJI0nWK4=)
5: 326131333a656634303a3a2f32392d3239203d3e20323136333938.roa (hash: AVMVpSekOrO5+Eix9jlqxGleCv9STmnIylnCihyMQII=)
6: 326131333a656634363a3a2f33322d3438203d3e20323136323839.roa (hash: 7CC4yBgy97hefXfjs3zHCdwd3O9oqfjfQSpTGHeU/sk=)
7: 326131333a656634373a3a2f33322d3332203d3e20323136313536.roa (hash: S78+OpGj4uaP8BNrYS7ZGeTkCuNPT0jP5ccqJ498cqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a6:54:f0:14:ba:0e:3b:b9:61:5c:3f:96:a3:14:23:3c:5a:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87352238d030dc2ab690bc1b25fe640745db3c
Validity
Not Before: Jan 2 06:11:39 2024 GMT
Not After : Jan 3 10:00:39 2024 GMT
Subject: CN=AB9FCDE8B8FA453BB9C857978743B520CB65C6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:b7:e5:44:09:74:ad:a9:0f:52:4c:cb:2c:
18:03:d5:53:8d:97:a7:7a:af:0c:e7:40:12:1e:0b:
56:90:0f:c9:48:ba:25:7e:64:71:7f:39:cb:88:09:
39:08:3c:6d:33:2c:c8:d3:6b:57:6c:4e:ee:e0:80:
79:52:a1:c0:35:14:99:c2:3d:ce:92:a7:0e:fc:47:
04:ca:24:08:c2:43:96:81:40:bb:09:e3:be:f9:8d:
86:98:93:0a:97:f0:6f:5a:d6:a1:83:93:48:13:be:
e7:b6:67:d2:10:cf:69:42:ac:c1:1c:f5:60:58:2d:
fa:91:67:93:e1:f2:7f:de:ed:a7:27:b7:0f:63:bd:
a3:73:fa:57:0c:b2:cf:89:6d:e6:2a:7e:f9:a3:27:
f3:4f:d8:d7:d5:92:09:f6:ea:f6:88:0a:56:7a:c4:
9f:77:01:98:ab:d9:ec:e1:50:42:11:b2:ad:77:a0:
82:17:2f:16:ea:f2:ce:03:1c:ba:d6:92:33:b0:a9:
b3:1d:f0:c7:0f:0c:db:52:ef:32:2b:74:30:9d:20:
4e:ab:ba:cc:32:23:2e:3a:a4:a5:a6:cb:08:be:9d:
e3:f9:c2:65:65:6c:49:9c:7f:64:d7:2d:ca:fb:a1:
9d:d1:80:91:1e:e3:bd:a1:78:5e:09:07:86:be:2f:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:CD:E8:B8:FA:45:3B:B9:C8:57:97:87:43:B5:20:CB:65:C6:E1
X509v3 Authority Key Identifier:
keyid:DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:9f:61:a4:53:94:f6:35:73:48:5d:e4:10:8b:1b:35:b6:
6b:ee:63:81:3f:0c:70:29:ae:ad:82:01:54:67:0e:9e:ed:38:
6b:f3:0d:ce:be:ca:fb:6a:ca:2a:8a:c9:a0:78:60:9b:c3:16:
fb:ba:e7:99:b1:47:9a:79:af:ba:6e:84:fd:a5:f1:6c:12:42:
30:16:1c:e9:be:a7:e4:82:2f:59:b9:1c:c5:8c:9b:01:4e:c4:
cc:b2:c2:cc:f1:19:a8:3a:66:97:3d:cf:f7:a0:e7:63:55:a3:
24:a8:eb:d6:49:f9:4f:dc:86:83:67:23:21:78:93:dd:53:4a:
88:e4:63:ea:9e:84:b1:2f:bc:47:3d:6c:0a:34:80:e4:35:5f:
61:06:c2:70:23:b4:69:a9:9f:07:d9:de:55:36:e8:41:e2:fb:
99:fd:a7:1e:48:f4:f5:93:c1:de:76:8d:3e:b4:7b:bf:f0:80:
5e:91:bb:a4:80:3b:e1:f5:a5:ae:b9:dc:0c:2b:8c:fe:90:79:
4f:3e:71:55:8f:8e:bd:c3:15:e8:48:41:ff:73:1f:a8:13:4f:
f5:70:3f:9c:8d:df:8a:ae:be:b3:ac:2f:6f:b9:b7:8a:9e:63:
48:dc:24:48:a0:99:d2:08:51:b3:13:d8:a2:69:e9:74:30:84:
f6:2e:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org