Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
File: 06DA19F4285EB04D0310733F4AC00107B73337AD.mft (raw, json)
Hash identifier: nymbVEyKG6g2+pYQsfoi6GW5rechqBAhviwwQwz35cQ=
Subject key identifier: 5F:C8:3F:2C:AD:52:77:0E:8A:FF:83:93:55:A7:D1:0B:4F:43:05:71
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 7DE8A9390007E5D064C36CE328BA6DFE6214947C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
Manifest number: 03D9
Signing time: Fri 28 Feb 2025 02:06:55 +0000
Manifest this update: Fri 28 Feb 2025 02:01:55 +0000
Manifest next update: Sat 01 Mar 2025 04:58:55 +0000
Files and hashes: 1: 06DA19F4285EB04D0310733F4AC00107B73337AD.crl (hash: udeuO9pfNZFO9hKSkAUHqJaCHKY3zovmKGGytTD1kRk=)
2: 34352e3135362e3131362e302f32332d3234203d3e20383334.roa (hash: dn6V0cgMGcT68tk0iaEPGTcUQTHOA/PtQ+po6PoJIHM=)
3: 34352e3135362e3131382e302f32332d3234203d3e20383334.roa (hash: PFPhaClHjzdcOwYTOgWaoMB9IX2XluAUiU/epPSsH+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e8:a9:39:00:07:e5:d0:64:c3:6c:e3:28:ba:6d:fe:62:14:94:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Feb 28 02:01:55 2025 GMT
Not After : Mar 1 04:58:55 2025 GMT
Subject: CN=5FC83F2CAD52770E8AFF839355A7D10B4F430571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:2d:55:ca:9b:cc:a6:0d:2d:d1:0f:ef:fe:
f3:60:fb:6e:36:77:27:e6:58:91:09:0a:bb:b7:6d:
6a:fe:4b:12:46:0c:b5:ae:58:88:f5:c6:8b:e1:4f:
55:8b:61:a9:c1:24:7f:03:31:ab:af:b4:20:e1:c6:
93:f8:74:1e:e8:a5:34:ef:b8:c9:63:88:81:81:d7:
17:bc:f6:db:08:57:09:4e:98:1b:15:e1:4e:31:a4:
90:d0:fb:9d:c3:17:aa:be:c6:64:19:c8:5c:1d:13:
45:a9:1f:b5:5e:f0:60:db:79:94:a2:63:fd:90:c9:
7a:b6:a7:6c:ee:33:00:f1:7d:a2:8b:c6:b3:0d:0d:
d4:01:20:7a:ac:5c:2e:ec:e0:20:e5:1e:86:d9:67:
92:87:f2:cf:e1:b1:8c:67:06:b0:7a:80:06:d9:1e:
d1:2e:f3:1e:89:f7:dc:38:be:b9:de:b9:89:04:dc:
80:71:8a:f8:93:74:c2:d3:42:65:50:31:b1:85:6e:
74:6b:ed:e4:4b:fc:23:ae:7b:7f:10:30:f8:2e:fb:
89:43:a5:26:cd:31:ed:ac:bd:ff:b9:66:b6:a9:1e:
33:e0:b9:34:5f:09:87:d6:7c:60:6c:91:34:ca:f8:
5f:69:79:b7:d4:b2:f2:d6:ae:ed:72:b5:15:2d:9c:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C8:3F:2C:AD:52:77:0E:8A:FF:83:93:55:A7:D1:0B:4F:43:05:71
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:46:65:47:e3:1c:d0:39:9d:34:c6:28:38:57:ba:30:95:48:
bb:97:ca:47:38:da:d7:a4:e7:60:6b:36:ab:b5:05:a4:11:f7:
b9:50:ba:61:ff:c8:47:d5:b2:1b:8b:c6:21:a3:83:92:a6:75:
01:ad:3f:6a:6d:89:10:90:48:59:50:ba:1f:9b:5f:1c:ac:f5:
5b:1c:98:14:3c:8c:ed:9b:61:08:b2:24:24:e8:fa:77:cd:1b:
f2:6a:ec:89:71:1a:2d:bb:23:da:a0:4f:10:6e:57:34:e0:7f:
d4:f5:e1:36:ff:ae:33:6a:8d:2c:c0:81:5c:2c:ce:ba:a8:34:
89:5e:7a:1f:9a:8a:50:5b:ea:77:e8:1b:ea:4d:d4:a3:54:c4:
db:c5:71:7b:8d:66:16:04:00:93:4c:ff:ad:91:86:88:49:47:
9d:29:b8:b4:66:cc:b6:d4:02:b0:6c:e5:87:8d:bd:41:b0:41:
7a:87:96:ae:9a:66:0a:64:47:73:6c:44:1b:65:20:8e:7d:1e:
54:5d:35:08:e9:4c:3c:22:00:05:14:e7:f3:41:a4:90:a9:4b:
c4:fa:c6:8d:f4:92:e3:81:44:e1:8d:71:04:c1:fa:5e:37:b3:
2b:b7:cf:ff:77:ac:c9:69:83:90:5b:98:1d:39:5f:80:04:2a:
f5:dc:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:40 2025 by rpki-client on console.sobornost.net