Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft
File: 3509F37A88DA7D8DF5D8355261259C1D418E541C.mft (raw, json)
Hash identifier: kdB+gSJVc83C20iDb2pv1c20OBZn41XNdGmZ28PS+7s=
Subject key identifier: 54:C7:90:8A:07:7A:82:22:5C:7E:63:B7:39:CB:EB:D2:AB:4A:D0:6F
Authority key identifier: 35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
Certificate issuer: /CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Certificate serial: 4FFEADE63F485D1A4DEE0179EA426F056A7B1A45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft
Manifest number: 14
Signing time: Wed 09 Apr 2025 19:03:20 +0000
Manifest this update: Wed 09 Apr 2025 18:58:20 +0000
Manifest next update: Thu 10 Apr 2025 19:42:20 +0000
Files and hashes: 1: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: osL3/jDdIUC4nSO/8sgXvP/URENbIO8+dFSvIWvh0hs=)
2: 3509F37A88DA7D8DF5D8355261259C1D418E541C.crl (hash: PcjhntQDOSLvphEyH58UMVJaTlhpHyk6Q6x64d4jZBc=)
3: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: iOS92ZOzfdaYAwVAG52es9WixwgK6RzegWQ/R4buDFc=)
4: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: DW9x/Ypi7+2R2UY9/K8dZ/0qnoPd2+cxPJg/Of/mWSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:ad:e6:3f:48:5d:1a:4d:ee:01:79:ea:42:6f:05:6a:7b:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Validity
Not Before: Apr 9 18:58:20 2025 GMT
Not After : Apr 10 19:42:20 2025 GMT
Subject: CN=54C7908A077A82225C7E63B739CBEBD2AB4AD06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:11:c4:8b:c7:99:c7:8c:25:10:f8:78:36:
35:18:f2:c1:35:4c:80:26:bc:68:b2:3c:5c:2a:b1:
74:f6:46:3b:ca:3c:19:82:c3:19:43:8a:ab:8c:b4:
5b:45:eb:21:51:f8:41:77:a7:09:7e:25:82:2c:d1:
08:90:61:a4:0f:8e:d4:1f:8c:73:32:8b:d5:58:af:
45:91:26:e0:bf:61:f0:5b:b4:30:f9:54:58:b9:8b:
26:8a:d2:25:63:83:17:39:75:7e:0a:78:48:55:50:
b2:98:b3:c0:c0:4b:2c:42:bc:21:c8:a8:6b:19:b5:
d4:74:36:89:ba:78:81:dc:15:ae:0f:e0:64:56:fa:
46:33:48:4c:78:27:8d:1d:a5:32:32:83:da:ad:c8:
e0:67:b3:b4:97:2e:6c:53:b6:50:b6:f0:e4:e5:25:
c1:de:f0:6e:e6:a9:17:47:d0:3f:7a:5d:af:36:93:
c1:43:9e:80:c8:3d:45:42:ff:0d:cc:8a:c5:ec:88:
90:52:78:0e:e2:b2:0a:77:bf:d7:e2:f3:15:63:de:
be:10:e1:84:7d:64:a5:24:69:3a:af:04:50:de:78:
73:5c:71:9f:ce:64:25:4d:a3:96:03:a6:0e:3a:c7:
93:96:18:27:1d:e7:a6:6c:01:73:b3:8f:73:78:d0:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C7:90:8A:07:7A:82:22:5C:7E:63:B7:39:CB:EB:D2:AB:4A:D0:6F
X509v3 Authority Key Identifier:
keyid:35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6a:1a:62:d9:ff:2d:10:66:90:5d:7f:87:c1:12:9c:fc:db:
65:fa:5a:c5:fd:39:4e:ab:cd:e9:3c:a1:f9:2d:3a:e0:d2:19:
0d:66:60:3b:41:d8:41:05:78:f0:2c:3d:7d:9e:7a:66:46:c1:
54:e6:13:7a:5d:e0:76:91:95:af:79:b4:fe:85:d4:29:a4:b3:
02:c6:0c:c5:ce:93:59:32:70:32:58:ba:13:d5:04:9e:16:d4:
ab:63:60:03:6b:93:dc:b0:62:d0:66:09:91:8e:9d:86:4b:ba:
37:79:24:db:c5:e7:c7:aa:03:e5:69:11:7d:7c:fe:28:0a:91:
92:8d:7d:d0:67:a5:0b:ee:a9:a9:42:e7:e6:b4:fd:87:4d:f4:
8d:50:2c:32:de:c5:fa:0e:ee:c4:88:77:f8:56:b4:92:87:63:
9d:f9:29:45:3c:49:eb:6c:de:c5:95:86:fd:1c:87:c9:f4:78:
1a:e4:ab:86:89:7f:e0:c7:84:b3:f8:9d:70:62:2b:f9:0d:96:
11:da:d0:d2:80:a4:63:23:79:4a:dc:2e:08:e8:7f:7e:f1:5d:
77:07:d7:43:2c:35:cc:05:5b:0e:70:69:1c:d9:db:e5:1e:a4:
e9:53:c6:a8:65:47:8d:8e:e9:f3:46:44:43:41:44:dd:77:26:
7f:71:c9:e8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUT/6t5j9IXRpN7gF56kJvBWp7GkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwOUYzN0E4OERBN0Q4REY1RDgzNTUyNjEyNTlDMUQ0
MThFNTQxQzAeFw0yNTA0MDkxODU4MjBaFw0yNTA0MTAxOTQyMjBaMDMxMTAvBgNV
BAMTKDU0Qzc5MDhBMDc3QTgyMjI1QzdFNjNCNzM5Q0JFQkQyQUI0QUQwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxRHEi8eZx4wlEPh4NjUY8sE1
TIAmvGiyPFwqsXT2RjvKPBmCwxlDiquMtFtF6yFR+EF3pwl+JYIs0QiQYaQPjtQf
jHMyi9VYr0WRJuC/YfBbtDD5VFi5iyaK0iVjgxc5dX4KeEhVULKYs8DASyxCvCHI
qGsZtdR0Nom6eIHcFa4P4GRW+kYzSEx4J40dpTIyg9qtyOBns7SXLmxTtlC28OTl
JcHe8G7mqRdH0D96Xa82k8FDnoDIPUVC/w3MisXsiJBSeA7isgp3v9fi8xVj3r4Q
4YR9ZKUkaTqvBFDeeHNccZ/OZCVNo5YDpg46x5OWGCcd56ZsAXOzj3N40FT7AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUVMeQigd6giJcfmO3Ocvr0qtK0G8wHwYDVR0j
BBgwFoAUNQnzeojafY312DVSYSWcHUGOVBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj
NTk2LzAvMzUwOUYzN0E4OERBN0Q4REY1RDgzNTUyNjEyNTlDMUQ0MThFNTQxQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNTA5RjM3QTg4REE3RDhERjVEODM1NTI2
MTI1OUMxRDQxOEU1NDFDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8wLzM1MDlGMzdB
ODhEQTdEOERGNUQ4MzU1MjYxMjU5QzFENDE4RTU0MUMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlahpi
2f8tEGaQXX+HwRKc/Ntl+lrF/TlOq83pPKH5LTrg0hkNZmA7QdhBBXjwLD19nnpm
RsFU5hN6XeB2kZWvebT+hdQppLMCxgzFzpNZMnAyWLoT1QSeFtSrY2ADa5PcsGLQ
ZgmRjp2GS7o3eSTbxefHqgPlaRF9fP4oCpGSjX3QZ6UL7qmpQufmtP2HTfSNUCwy
3sX6Du7EiHf4VrSSh2Od+SlFPEnrbN7FlYb9HIfJ9Hga5KuGiX/gx4Sz+J1wYiv5
DZYR2tDSgKRjI3lK3C4I6H9+8V13B9dDLDXMBVsOcGkc2dvlHqTpU8aoZUeNjunz
RkRDQUTddyZ/ccno
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:26:10 2025 by rpki-client