Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/3/A709BFC4AD70A6A77E9176B8850A82B8E4C4BBC5.mft
File: A709BFC4AD70A6A77E9176B8850A82B8E4C4BBC5.mft (raw, json)
Hash identifier: T4dr2vFIZ/Yy9nnYDfZ5b/2vnoUviR5IVjlyIIAelfo=
Subject key identifier: 0D:5F:01:1D:D7:CE:A4:4F:EC:45:31:35:D0:C7:04:0B:82:55:76:88
Authority key identifier: A7:09:BF:C4:AD:70:A6:A7:7E:91:76:B8:85:0A:82:B8:E4:C4:BB:C5
Certificate issuer: /CN=a709bfc4ad70a6a77e9176b8850a82b8e4c4bbc5
Certificate serial: 636906DED842B4713B924CAEB44C922B892A2A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pwm_xK1wpqd-kXa4hQqCuOTEu8U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/3/A709BFC4AD70A6A77E9176B8850A82B8E4C4BBC5.mft
Manifest number: 38
Signing time: Tue 02 Jan 2024 11:59:22 +0000
Manifest this update: Tue 02 Jan 2024 11:54:22 +0000
Manifest next update: Wed 03 Jan 2024 15:14:22 +0000
Files and hashes: 1: A709BFC4AD70A6A77E9176B8850A82B8E4C4BBC5.crl (hash: wFFIHSv4q+tPG6zXklYTYLAh8kqdnHMyltDy4t6GLsw=)
2: 3139352e3139312e3233312e302f32342d3234203d3e20313938393830.roa (hash: 0tNg9m76owLVoibdrBY1tjWLZRscW3MX5JEOgNs6zTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:69:06:de:d8:42:b4:71:3b:92:4c:ae:b4:4c:92:2b:89:2a:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a709bfc4ad70a6a77e9176b8850a82b8e4c4bbc5
Validity
Not Before: Jan 2 11:54:22 2024 GMT
Not After : Jan 3 15:14:22 2024 GMT
Subject: CN=0D5F011DD7CEA44FEC453135D0C7040B82557688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:78:e7:56:a7:96:66:71:9d:df:0a:d5:ba:
5b:64:5d:8f:93:5a:18:0a:fa:c2:50:a7:d1:e6:22:
7a:20:d9:7e:cb:f0:22:56:02:cc:cc:31:99:05:2e:
68:3e:e3:42:5c:5b:35:b0:1e:00:3a:df:97:2c:d9:
7f:af:9e:d9:b8:d2:2c:34:20:71:0d:59:6b:a6:21:
f5:61:74:88:2a:54:6b:82:82:02:ea:1d:92:db:25:
79:f7:6d:3b:3d:95:7c:08:2b:02:60:34:e0:59:94:
d0:5b:51:b9:8f:37:da:f7:f3:96:03:e4:bf:23:f2:
34:fa:65:85:fe:87:86:d9:28:ae:8f:7b:d6:00:35:
e3:c2:20:3b:71:e5:da:cc:33:55:10:46:8e:51:28:
4d:5f:52:af:55:8c:90:c2:38:64:63:76:65:e8:b6:
3a:6f:52:a9:95:b5:41:39:76:20:83:a5:d4:25:76:
f2:44:05:a4:74:fa:9b:10:d2:c9:9e:62:8e:a5:56:
ea:6b:19:44:e7:fb:20:30:61:95:14:eb:22:d7:7a:
29:0f:38:b6:34:a3:cb:b0:63:09:83:bd:5f:0b:13:
f2:7e:45:29:48:cd:fb:c3:f3:b2:d1:a8:f8:15:18:
7a:cd:61:d2:9d:7d:c9:63:73:a6:4a:3f:c8:1a:59:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:01:1D:D7:CE:A4:4F:EC:45:31:35:D0:C7:04:0B:82:55:76:88
X509v3 Authority Key Identifier:
keyid:A7:09:BF:C4:AD:70:A6:A7:7E:91:76:B8:85:0A:82:B8:E4:C4:BB:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/3/A709BFC4AD70A6A77E9176B8850A82B8E4C4BBC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pwm_xK1wpqd-kXa4hQqCuOTEu8U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/3/A709BFC4AD70A6A77E9176B8850A82B8E4C4BBC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:03:b4:63:41:39:c6:9d:a3:69:4a:3f:7a:43:64:92:e0:
4a:9a:61:9b:f4:bf:b3:3f:8d:63:d4:2b:80:ff:06:5e:9d:b8:
dd:21:82:a2:d2:34:19:f1:54:8a:46:ca:6a:95:52:6a:f3:eb:
6c:08:49:f2:aa:b3:e0:fc:1e:bd:25:cc:84:62:b7:20:0a:d4:
e2:44:12:e9:8b:ec:9f:3b:d1:6e:c9:89:73:84:41:e9:5f:9f:
69:a4:70:45:cd:e7:07:5d:4b:cc:9b:f1:c7:0b:48:2d:81:c4:
93:8e:53:3f:50:b2:40:86:3e:83:ba:fa:86:f3:e1:2c:9e:61:
e2:39:c5:ce:49:ad:06:0c:81:fc:05:1d:07:97:51:43:5f:ae:
57:f5:ad:9c:8e:cd:cc:d5:5f:5a:76:49:7b:f5:80:f5:7c:39:
7d:bc:1c:fc:a7:17:8b:ef:79:15:05:cd:0c:00:aa:a9:2e:53:
e3:b0:b7:5b:06:f0:54:71:15:f4:7f:8e:9f:17:d9:21:d2:b9:
01:75:42:54:e1:b7:41:9e:74:22:22:3b:e0:65:a7:48:b5:7c:
e8:89:74:8b:64:02:f0:21:8a:c9:2c:9e:33:a8:c0:b1:dd:8b:
ab:99:1d:19:78:f7:fd:20:bb:0a:2d:9b:d4:3b:00:14:ba:fb:
2d:ce:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org