Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier: Dk5difUSR7e8zLkpswRG85kH7rK/BbLj/zW3v9BK0ZA=
Subject key identifier: 0E:C3:A7:63:5F:8D:F0:E5:A6:F5:51:20:7B:9C:96:06:A8:80:F1:88
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial: 5518406427688FE5DAAB14FABD74B2686E81ECE3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number: 4E
Signing time: Sat 29 Mar 2025 03:05:21 +0000
Manifest this update: Sat 29 Mar 2025 03:00:21 +0000
Manifest next update: Sun 30 Mar 2025 06:40:21 +0000
Files and hashes: 1: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=)
2: 326131343a373538313a323030303a3a2f34302d3430203d3e20343031333836.roa (hash: WFUH2iQtAwQ7iI2iexnUk2ty6+pZTlY1YwlIf0QItgo=)
3: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=)
4: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=)
5: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=)
6: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=)
7: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: xup/Q5S37xeIVntNphpKv1kvjnzlU/G5GMumexJyseE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:18:40:64:27:68:8f:e5:da:ab:14:fa:bd:74:b2:68:6e:81:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Validity
Not Before: Mar 29 03:00:21 2025 GMT
Not After : Mar 30 06:40:21 2025 GMT
Subject: CN=0EC3A7635F8DF0E5A6F551207B9C9606A880F188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:cb:66:58:32:55:5c:c3:7e:18:6e:a7:bd:
cf:f8:f7:ff:73:1b:82:6d:92:c2:d2:a6:7f:df:de:
ba:99:e4:3f:6f:4a:6c:9a:36:7c:0a:d4:6b:02:5d:
bc:f4:b8:4b:63:3d:8f:fb:22:76:b3:df:03:88:7a:
ca:8f:c4:a7:ac:a2:81:7f:f4:8d:69:71:a3:d8:59:
c6:fc:c9:25:76:6b:d3:c8:0d:cd:f7:f3:44:d0:df:
51:0d:31:dc:a8:03:15:dd:3c:90:59:64:8f:15:ba:
92:c0:1f:4b:bd:45:80:0c:11:d9:90:5e:51:be:52:
2a:63:d2:0e:e4:28:cd:82:64:45:23:a1:90:63:2a:
70:e1:0c:39:65:e8:6f:39:23:2f:56:be:b4:65:ca:
db:99:0f:c7:49:3d:e6:a1:f6:db:6f:aa:9c:55:31:
0a:f3:da:82:fc:66:57:83:7e:64:90:b5:c5:70:e8:
44:39:c0:b9:53:16:36:53:c6:ff:41:35:8b:c4:d2:
20:13:8f:d4:37:24:0a:56:17:3f:8f:87:54:45:ab:
29:33:cf:f8:2a:f7:03:c2:4f:b2:8a:e6:6b:b5:8b:
d5:6a:89:94:fc:24:7f:f3:c1:36:61:a4:55:e1:6d:
bc:f0:59:f6:d5:ef:a8:48:87:d1:71:ce:a7:91:e2:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C3:A7:63:5F:8D:F0:E5:A6:F5:51:20:7B:9C:96:06:A8:80:F1:88
X509v3 Authority Key Identifier:
keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:ff:30:d5:24:77:66:46:20:31:be:d1:3c:cb:14:09:ce:
67:56:f3:8f:2b:a2:2c:46:06:3b:a5:b9:fc:9e:43:0c:af:6e:
47:c3:b6:62:8c:97:eb:33:c0:1b:98:2a:ef:b5:bf:54:04:0b:
f7:35:73:a8:cb:02:36:e2:a0:ae:13:a6:9f:6f:ab:f5:ad:7f:
0b:9f:8c:5d:b9:47:fb:27:ce:ce:7e:4c:75:14:28:1d:2b:55:
38:1d:0a:96:89:a6:a4:8e:02:c2:90:e5:d3:be:5f:2b:50:c4:
8a:b3:f7:2f:fe:75:ce:5b:40:4e:33:f9:83:81:9d:ed:cc:7d:
d6:b4:69:46:4b:d6:d8:53:f0:dd:54:78:14:c5:b9:9d:f4:e7:
09:2f:d1:77:b6:7b:a7:d5:b5:e8:cf:37:28:59:8f:91:39:50:
d7:19:14:44:0a:ed:8b:18:b9:e1:f9:60:23:ca:b0:1a:11:d7:
bf:5f:19:05:b7:47:fe:f0:c9:cc:c4:7c:d2:dc:47:8c:17:9d:
57:7a:01:2f:28:35:79:39:16:1e:68:6a:c1:8c:ae:a5:0d:2d:
79:fb:ce:41:89:6e:06:13:3c:05:d7:92:02:c0:65:59:ea:df:
91:13:28:37:66:86:bc:f1:c5:29:97:65:e8:d9:40:9b:3b:8c:
2a:1e:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:20 2025 by rpki-client