Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/1/D9FDB8C643E658B50EB8C6087DA945DBF596803B.mft
File: D9FDB8C643E658B50EB8C6087DA945DBF596803B.mft (raw, json)
Hash identifier: obNnj8ZQW3Xmw9l//6BxMtYudb3ULzxpHj14pSuRZ/0=
Subject key identifier: 07:64:24:D9:5C:F6:F5:9B:2F:8E:AF:F9:70:ED:0D:14:B0:C5:6D:7E
Authority key identifier: D9:FD:B8:C6:43:E6:58:B5:0E:B8:C6:08:7D:A9:45:DB:F5:96:80:3B
Certificate issuer: /CN=d9fdb8c643e658b50eb8c6087da945dbf596803b
Certificate serial: 2E2AF07691928D404E209833647EDBB1C8601C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f24xkPmWLUOuMYIfalF2_WWgDs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/1/D9FDB8C643E658B50EB8C6087DA945DBF596803B.mft
Manifest number: 72
Signing time: Tue 09 Jul 2024 03:50:46 +0000
Manifest this update: Tue 09 Jul 2024 03:45:46 +0000
Manifest next update: Wed 10 Jul 2024 07:01:46 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: Y6fYwHZG4T/cjeuX/Sbp8Wm0GCovB3LqakNYYdYKeNM=)
2: D9FDB8C643E658B50EB8C6087DA945DBF596803B.crl (hash: IoXqyy4Z3GfG4KbB+T1E4cDL1YnziQ6VNAEYRHknZlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:2a:f0:76:91:92:8d:40:4e:20:98:33:64:7e:db:b1:c8:60:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fdb8c643e658b50eb8c6087da945dbf596803b
Validity
Not Before: Jul 9 03:45:46 2024 GMT
Not After : Jul 10 07:01:46 2024 GMT
Subject: CN=076424D95CF6F59B2F8EAFF970ED0D14B0C56D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:66:62:19:3d:f7:65:a4:1a:2d:67:41:2f:
30:ca:8a:bf:21:c7:61:a7:26:75:a0:84:a9:d2:a9:
19:68:93:c2:e8:77:09:f0:a8:22:45:60:61:07:83:
87:35:23:72:f1:d4:d2:ba:24:5c:b7:58:75:29:fe:
29:a2:79:64:b3:d5:b3:e3:3a:70:da:f6:b4:de:bd:
9d:13:a8:46:cb:9c:4b:7c:b7:21:50:19:89:ea:96:
12:19:e7:84:06:b4:2e:b3:4a:0b:ea:f2:a1:96:ff:
45:8c:1e:d8:89:c4:a9:c1:5c:3e:18:0e:48:f5:fe:
f1:75:ca:d5:ad:c1:be:1e:51:ce:57:1b:02:4c:6d:
5f:9a:8f:cc:22:37:bd:47:3a:04:c2:1f:2d:9d:bf:
80:1c:97:73:b5:b8:32:fd:8b:13:d4:be:ee:09:83:
94:e5:3a:5d:dc:54:73:4d:a4:79:db:17:90:fa:76:
d8:ea:cc:71:11:25:29:6c:72:16:9a:f9:30:76:90:
5e:13:f5:c2:88:52:aa:d4:4f:1b:de:9a:84:da:ce:
20:5d:62:aa:cd:b2:ab:b4:3f:66:55:1e:f1:75:b5:
64:00:ac:a5:4e:e0:7d:f2:3f:53:05:85:69:b0:ed:
d0:57:92:19:a6:9d:8c:20:6f:15:b1:7a:ad:e6:1f:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:24:D9:5C:F6:F5:9B:2F:8E:AF:F9:70:ED:0D:14:B0:C5:6D:7E
X509v3 Authority Key Identifier:
keyid:D9:FD:B8:C6:43:E6:58:B5:0E:B8:C6:08:7D:A9:45:DB:F5:96:80:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/1/D9FDB8C643E658B50EB8C6087DA945DBF596803B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f24xkPmWLUOuMYIfalF2_WWgDs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/1/D9FDB8C643E658B50EB8C6087DA945DBF596803B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bb:2a:53:c8:84:7c:6c:6b:1d:ac:f4:cf:d5:07:15:97:aa:
65:b0:a8:a1:57:1a:f6:fc:99:e6:b5:c4:fc:63:48:31:90:e6:
f0:c4:92:6e:7f:f0:10:1b:66:8a:ae:4f:9f:20:3f:8f:4f:01:
52:b8:e2:11:7d:d9:b1:65:77:b9:ad:0e:01:65:c4:8f:e9:7c:
90:6c:8b:84:68:8b:10:f9:6c:a7:b3:2a:3b:09:00:9d:22:54:
e3:a6:eb:3b:76:8a:4d:6e:24:ec:a9:8f:f0:98:db:f2:d5:63:
bd:0b:97:fd:12:ae:d5:5b:71:bc:88:e3:75:80:44:e8:0d:52:
33:51:05:c2:f9:ca:b0:f8:ec:8a:59:5b:aa:35:91:4b:6a:78:
d4:f3:bc:b2:8c:02:7c:18:ff:fa:43:5a:bd:4b:6d:ed:62:ef:
ba:bb:66:38:70:6e:6e:ed:85:26:e6:d8:39:d0:2c:46:38:50:
9b:31:10:01:22:89:1a:87:35:da:82:b2:15:cc:59:76:7b:f1:
c9:aa:f4:33:5f:6a:f5:42:15:85:9c:81:3f:54:91:02:bb:4e:
f6:59:0d:80:cc:88:94:f3:77:f3:25:3b:69:a3:f9:ea:9e:c2:
56:ab:fa:85:44:78:ef:b0:51:79:42:78:4f:7f:2f:64:b4:12:
df:d8:fe:a6
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 12 01:59:46 2024 by rpki-client on console-ams.rpki-client.org