
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier: nWA2+mkLOcuPTaJYvVqtkaV/wplXxXHTNb3+7wjDr+I=
Subject key identifier: B2:D7:9F:5B:19:84:EA:98:98:93:DE:7C:A2:59:43:7B:4D:F0:2B:4C
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer: /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial: 3D2F9FF8563043C3EC118766D6C396E0BA6961FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number: 01D5
Signing time: Sun 13 Apr 2025 00:44:09 +0000
Manifest this update: Sun 13 Apr 2025 00:39:09 +0000
Manifest next update: Mon 14 Apr 2025 01:19:09 +0000
Files and hashes: 1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: r5BiQWInAFvNZupGdpP12RHuxPFSkrOrCbI4p0KNb0g=)
2: AS216107.asa (hash: AnKQCM7y8f//uUxVRss/VkdyoAIm9MQPG2dvtPyK3/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2f:9f:f8:56:30:43:c3:ec:11:87:66:d6:c3:96:e0:ba:69:61:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Validity
Not Before: Apr 13 00:39:09 2025 GMT
Not After : Apr 14 01:19:09 2025 GMT
Subject: CN=B2D79F5B1984EA989893DE7CA259437B4DF02B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:4d:ff:55:12:10:4c:c8:73:27:de:71:de:
ce:1f:ab:77:c4:26:56:65:3c:ce:c8:8a:ab:c9:3c:
c2:33:a4:0d:45:d6:d1:5f:7f:7c:63:80:c9:b7:36:
12:38:13:1e:27:b3:09:7a:b7:63:fd:5d:73:47:a9:
38:15:d8:da:09:c2:f4:92:3e:e4:14:c4:ec:b9:f1:
ab:7e:b0:c9:a9:67:8f:e5:bf:8e:40:c6:79:41:60:
ed:3b:6e:15:8e:9e:ac:da:de:1e:5b:bd:95:5f:4e:
48:13:b5:9a:9c:3f:05:cc:fe:fe:5e:7d:54:d8:6d:
50:74:83:65:3f:92:1a:11:3d:81:80:9b:45:0e:59:
d8:a0:0c:4b:fc:90:11:7d:43:4a:3f:b1:be:2c:ac:
5b:b4:37:87:51:d9:98:11:3d:07:41:99:6d:fe:f0:
86:51:05:76:e4:9d:13:9f:6b:ef:a2:b2:26:31:ea:
9d:b6:65:ac:1d:c5:e8:dd:a4:24:d8:b9:bd:4a:c8:
30:ba:49:54:8d:a7:7c:15:13:4d:44:53:08:c8:5f:
6d:ad:10:0f:2b:30:21:76:8c:11:dd:45:b8:7a:81:
cc:2f:c5:38:61:9b:c6:97:3a:5d:40:fb:b8:f3:29:
ef:91:80:ec:8e:bf:76:df:19:61:b5:12:bc:84:09:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:9F:5B:19:84:EA:98:98:93:DE:7C:A2:59:43:7B:4D:F0:2B:4C
X509v3 Authority Key Identifier:
keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:c4:34:1e:5b:37:b7:6f:d5:43:94:6d:13:02:9b:75:95:
d1:06:9b:88:b8:8c:2d:72:90:3a:06:1c:6d:5b:c8:d3:e2:63:
b7:66:2f:d6:22:01:81:0a:2c:c5:c6:95:96:a4:ee:e7:5f:c6:
35:2a:f6:de:70:bd:c3:d5:2f:db:a5:56:6f:1c:2f:78:7a:06:
03:69:05:68:46:75:43:51:12:a3:20:82:97:f2:d2:5a:0e:6c:
e0:26:78:2f:00:91:ca:f8:f7:1e:25:42:48:c6:ef:f1:df:d7:
73:6f:ad:0d:34:0d:54:ad:bd:02:91:52:c2:df:fc:f3:ae:da:
a5:dd:c7:2c:2e:9c:85:45:f2:10:81:26:80:79:cc:87:21:72:
95:b1:0d:87:55:23:8c:f7:bf:6b:56:ed:79:26:93:a0:ea:7d:
bc:f8:13:47:9e:45:9f:a0:55:1b:c2:42:0e:19:91:06:e4:e3:
80:fc:01:91:ff:05:75:58:31:c7:0f:81:53:a8:7b:d3:34:85:
84:83:c3:ea:01:b2:e7:d5:d4:ac:87:07:f6:82:4a:7e:10:c4:
45:e4:5f:11:6b:23:b5:cc:b5:92:c3:ff:0c:f9:0a:e3:83:f1:
f5:bf:cb:8a:ee:bf:98:0b:56:56:2c:e9:ae:08:4d:55:03:23:
36:f4:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net