Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
File: 775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft (raw, json)
Hash identifier: TPTp+WSFkZwrOjlWZxuzhrgv2BJtbnP6BoxoOPnQbsY=
Subject key identifier: D6:02:E7:1B:5D:2E:45:08:55:12:57:29:75:B5:0B:CD:D0:26:DB:BA
Authority key identifier: 77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B
Certificate issuer: /CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
Certificate serial: 0DD17B03F5C4DCDC446D193FADA7AF4F0D154EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
Manifest number: 24
Signing time: Wed 26 Feb 2025 07:04:47 +0000
Manifest this update: Wed 26 Feb 2025 06:59:47 +0000
Manifest next update: Thu 27 Feb 2025 08:13:47 +0000
Files and hashes: 1: AS213768.asa (hash: STN7/gpSTzTnV+2a1yuX1MKiPFhViLW1NgtMlmyfpUI=)
2: 775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl (hash: 042lP3ewSciYpcOMpu4HnoAFnxMMWxx8OhuREEcVWfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d1:7b:03:f5:c4:dc:dc:44:6d:19:3f:ad:a7:af:4f:0d:15:4e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
Validity
Not Before: Feb 26 06:59:47 2025 GMT
Not After : Feb 27 08:13:47 2025 GMT
Subject: CN=D602E71B5D2E45085512572975B50BCDD026DBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:81:08:9a:5b:28:ab:02:78:2e:b5:94:ac:
ae:f7:5f:50:c5:45:7e:11:1a:8c:19:d6:44:54:6b:
b8:71:74:3a:d1:13:33:23:d9:9b:e7:2d:5d:c7:8f:
c9:ff:23:c5:8c:f0:93:7a:e1:42:ab:b1:52:fe:5a:
c4:9c:b0:e4:b6:f4:07:f9:d6:31:a0:39:95:9d:7b:
c2:b9:49:d7:25:d0:fd:47:61:7f:ec:07:bb:7c:a7:
90:e5:c0:1e:81:e1:ee:13:e3:43:ed:a5:0a:cc:c3:
cd:66:8a:e1:3f:1b:3d:9e:38:f9:e6:da:f9:2c:65:
7c:66:69:7d:6e:65:cc:62:8e:d9:7f:c4:12:75:6b:
ab:b2:06:0c:b9:75:5a:17:75:2a:87:6c:1e:df:41:
3c:bc:f9:1c:d4:36:d4:ba:f3:e3:b9:7e:1d:6c:37:
d1:94:23:dd:6f:f0:cd:76:65:5c:a8:2d:59:27:a7:
fd:a6:2a:96:1d:70:97:97:a9:1f:dc:10:7a:37:37:
d3:d4:30:97:c8:c8:75:c2:15:a2:bc:79:b0:34:86:
62:26:45:5f:68:dc:33:82:70:e7:87:dd:cd:5c:cb:
6a:1a:80:20:66:24:c5:52:be:00:6d:d9:06:20:d2:
59:ad:ed:a9:9b:b1:e2:11:16:9c:08:a8:34:eb:d0:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:E7:1B:5D:2E:45:08:55:12:57:29:75:B5:0B:CD:D0:26:DB:BA
X509v3 Authority Key Identifier:
keyid:77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3b:f8:1b:c2:64:0b:fe:fc:75:d7:01:e5:91:8f:d5:98:26:
52:50:53:a3:e4:d0:d0:28:a4:d0:e8:4f:50:75:7d:08:45:b3:
8d:6a:71:60:07:c3:6d:ff:ee:79:93:c0:4e:5a:cf:b0:4b:f1:
57:34:33:ee:fa:72:c5:1a:e8:2a:2f:6e:1a:66:fb:24:bf:ba:
6e:04:1d:77:aa:44:61:05:ad:70:f6:63:78:f8:3a:eb:9b:a9:
40:37:af:86:30:d5:55:94:32:a2:e1:a2:1c:96:80:46:5f:e2:
6f:a7:f3:c5:1b:07:4c:69:c1:ee:b8:8c:68:35:00:7d:fc:37:
b9:96:bc:af:a2:22:c9:be:ef:a2:a0:23:e6:23:61:b0:5e:47:
47:4f:93:9b:ff:34:55:1c:77:88:00:d4:dc:bd:0f:ef:00:47:
0c:8d:44:6f:0b:9a:8d:ea:6b:62:4d:79:a0:9b:c5:d4:1d:72:
6b:41:a4:b4:88:ef:99:0a:6b:b4:99:63:73:3a:7b:9e:f4:2d:
08:54:1d:52:7e:77:cf:dc:d9:60:19:76:db:5f:56:c3:dd:82:
b1:43:3c:7e:d3:05:c4:92:23:93:b6:fb:96:6e:aa:6b:75:33:
b4:bc:4d:79:94:d2:2b:03:42:d1:b9:89:aa:94:56:36:ef:15:
8e:ca:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:47 2025 by rpki-client