Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft
File: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft (raw, json)
Hash identifier: SE3faD3EDsxMM0223RmVWb1zhQtx61mxPiNbTEkYiCY=
Subject key identifier: CA:32:09:43:7D:D2:14:5B:3F:7F:2E:27:49:A7:8E:84:EA:32:B0:FF
Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3
Certificate issuer: /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
Certificate serial: 1D3EC12E5259FF2FB3DEABE68867C839DE7A82AB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft
Manifest number: EC
Signing time: Wed 11 Jun 2025 10:08:22 +0000
Manifest this update: Wed 11 Jun 2025 10:03:22 +0000
Manifest next update: Thu 12 Jun 2025 10:19:22 +0000
Files and hashes: 1: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: 5+vQb6lOPVb905YmSSgsG+hU/u4KZQA5Mhi2G2NVX+8=)
2: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl (hash: 1obIRUDj0+iEvoH6z50Jc1lhujMu+0sue50QDyNGzfg=)
3: 326131343a373538343a346662653a3a2f34382d3438203d3e2036353137.roa (hash: xptTc8UfiLJf//oV4oJOzWfdwqREpi/ly50X2yQ1eVw=)
4: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: nIC6lswk91hjl6KPMQ+RZfHgO+0KGr/fDFoPo3gap1k=)
5: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: o0e/YZFYgXWaWgJ9eaHmXBCXoGTSBaeTvlCQTDkm3+c=)
6: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: 2LuyqKKWcdoqL1q9FKGl+zX6qwvAs9rBA48b+Sgpn8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3e:c1:2e:52:59:ff:2f:b3:de:ab:e6:88:67:c8:39:de:7a:82:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3
Validity
Not Before: Jun 11 10:03:22 2025 GMT
Not After : Jun 12 10:19:22 2025 GMT
Subject: CN=CA3209437DD2145B3F7F2E2749A78E84EA32B0FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:b9:b5:1b:df:ff:fe:4f:77:f0:06:63:03:
9e:63:87:b9:16:af:48:56:ec:e1:43:ba:f8:7d:b5:
95:bf:7f:2f:c5:d6:86:c4:cc:67:1f:15:47:76:9c:
db:0a:6e:d9:8b:3c:35:35:48:27:c8:b9:2b:e3:37:
99:1c:9e:71:ba:d9:c0:86:9d:46:46:f8:f1:45:74:
d9:79:75:74:73:be:53:9e:88:15:25:2c:62:28:e8:
8f:49:28:a8:92:19:4b:25:88:76:34:b1:4c:26:f7:
47:84:64:c4:66:90:54:a3:1c:fa:cc:41:ca:47:8b:
40:bb:e0:06:e5:95:be:1f:46:75:cb:b2:bd:53:da:
03:7d:10:e0:1e:49:eb:f8:1a:b8:89:c4:0f:02:46:
70:00:27:c0:83:64:44:30:90:8f:5e:a8:06:0f:1e:
30:d1:ba:12:cf:80:00:f7:e2:3b:1c:47:13:ed:19:
40:f8:7d:6b:3c:d8:6f:75:fd:b7:5d:f1:81:b8:a7:
6b:7e:fe:f4:65:ff:3f:a2:df:71:cf:7e:fc:b9:76:
87:94:9f:bd:9f:4f:f6:be:90:00:bd:ec:e7:30:d4:
79:35:50:6a:a5:df:e5:8a:aa:19:d1:b9:91:f0:e0:
cd:a3:50:7f:a2:90:1d:82:34:33:53:38:6d:f3:33:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:09:43:7D:D2:14:5B:3F:7F:2E:27:49:A7:8E:84:EA:32:B0:FF
X509v3 Authority Key Identifier:
keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:07:2d:a1:43:c1:59:f8:2c:ff:2d:49:dc:4f:46:68:12:
fc:08:28:14:3b:92:e9:d2:73:5e:d7:f8:21:b1:19:4b:13:2a:
9f:a2:a4:18:9e:1b:a0:30:cc:f6:7b:60:4a:dc:0a:a2:df:1c:
91:63:87:d1:9d:c3:e3:fb:49:ca:77:1d:6b:e1:a6:13:76:03:
57:7e:ae:64:37:88:d6:32:7e:70:2e:2f:62:fc:d8:66:80:3a:
88:42:f8:7d:9f:4a:ea:ca:e7:9e:5a:92:e0:68:55:bd:ce:21:
e3:c0:bb:e5:14:a9:61:65:33:29:4e:ca:d1:d1:a5:09:b7:f1:
f4:d3:de:b2:d5:4b:d7:ba:d7:df:63:dc:c0:fe:21:e9:42:21:
88:cd:f5:b4:0a:d1:8f:01:2f:d0:c3:dd:0c:ef:d6:7a:93:18:
d4:2a:06:e6:35:ba:8b:13:40:1f:a0:01:f4:3f:0f:3d:3b:6b:
34:e4:05:51:b2:85:c4:98:57:b2:47:ba:c4:42:57:c8:4a:d7:
5e:78:0a:af:85:93:a6:30:44:51:da:3f:38:8a:bf:29:ae:d6:
ba:e5:e4:2c:98:ec:99:2f:40:cf:ae:7b:8d:ed:c6:f4:01:24:
0b:5b:57:40:ca:7e:1a:05:c0:ec:5e:43:d9:92:c1:75:af:2e:
fe:1c:f6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:42:23 2025 by rpki-client