Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier: vtQ3x1/3LcyyTT2YZs4sbVrx4ik9f7EQ4azIPgDJirg=
Subject key identifier: 24:AD:D4:B5:39:6F:E8:F1:EB:42:C3:D6:2D:41:A5:22:FF:22:9B:48
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial: 388E9EAAE721F55670BCE20F8ED98ECB3FB66912
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number: 02
Signing time: Tue 25 Mar 2025 02:49:59 +0000
Manifest this update: Tue 25 Mar 2025 02:44:59 +0000
Manifest next update: Wed 26 Mar 2025 05:13:59 +0000
Files and hashes: 1: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: ooMfty/YMMUsIPG9kHLXTegQEq/0uArqmLptaO/Z0aQ=)
2: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8e:9e:aa:e7:21:f5:56:70:bc:e2:0f:8e:d9:8e:cb:3f:b6:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Validity
Not Before: Mar 25 02:44:59 2025 GMT
Not After : Mar 26 05:13:59 2025 GMT
Subject: CN=24ADD4B5396FE8F1EB42C3D62D41A522FF229B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:49:78:91:94:84:ed:a6:af:4c:98:75:c5:
8a:3c:ed:28:33:a8:22:4c:f6:bf:28:70:78:f2:bd:
2a:bd:a9:9e:3f:8a:84:38:d0:00:63:26:d5:5e:3a:
64:0b:4b:ff:29:9c:33:79:e5:b8:0c:71:29:83:97:
8e:27:57:25:90:04:11:29:16:fb:d2:06:2e:07:19:
db:2c:4f:4f:3c:09:2f:6a:49:55:1e:85:5b:3c:14:
16:60:9d:19:ea:11:47:65:bf:8d:da:16:df:e7:f0:
b1:4c:98:83:83:6d:01:f2:59:a3:43:1c:c3:67:93:
05:b6:ee:a7:ca:6b:8e:55:fe:99:95:b4:4e:eb:d9:
b6:42:b4:25:a8:0c:55:dd:e3:b1:f4:ce:95:6c:57:
60:fa:f1:f6:7b:d6:52:6b:61:c7:c7:2e:88:57:13:
ad:e9:d6:c6:12:36:50:e0:0a:55:a4:e5:55:6d:ff:
a5:4a:f5:e4:6b:bb:0d:d9:d2:9f:ef:f1:6a:5b:48:
91:9e:88:c2:14:35:06:31:1e:0f:22:9a:7f:d2:47:
ca:d5:5c:38:45:32:d3:25:b7:d0:9d:e8:33:65:13:
e4:94:88:8d:98:93:1b:43:18:8b:89:af:e4:0e:ba:
30:42:60:74:bb:0b:fd:2a:02:9c:ac:04:0f:61:48:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AD:D4:B5:39:6F:E8:F1:EB:42:C3:D6:2D:41:A5:22:FF:22:9B:48
X509v3 Authority Key Identifier:
keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f4:30:c5:ba:3d:97:8d:30:33:71:ca:e2:b5:17:9b:80:42:
2d:59:e6:50:ae:ef:56:5f:79:9b:3f:77:89:0b:04:73:f3:0e:
0c:00:3c:1e:23:2b:89:3c:de:09:94:33:8d:f0:d9:88:d5:aa:
28:40:16:9a:9b:41:ee:c9:07:2f:f6:b5:d2:a1:58:96:e3:ce:
ff:3d:bf:53:fe:ff:a8:ab:87:06:7b:65:c0:e4:af:b0:39:03:
e3:99:78:80:57:43:19:ab:24:f8:4b:77:cf:79:b2:67:e3:78:
d4:aa:d6:28:dd:f1:80:a5:f9:46:b4:18:9a:12:cd:23:3c:21:
72:58:5c:cc:7f:0b:31:44:bd:81:e5:70:a5:68:1b:d4:85:11:
52:de:42:74:f1:39:2a:e9:a5:90:03:3e:e5:1a:1e:e7:a7:75:
c1:66:e3:60:29:8b:3d:a1:76:8a:49:bf:d6:a1:f8:98:57:ef:
e2:c3:d2:7d:e9:86:57:aa:3c:24:a1:9a:0b:83:ee:fd:d5:62:
9d:d0:71:a4:61:12:25:b1:65:ab:25:aa:7e:6c:c7:27:45:a8:
77:91:1a:ce:2f:db:d7:db:94:3f:6b:45:5e:1f:66:95:b3:0f:
79:be:02:26:bd:ce:54:36:77:95:06:74:c9:df:a0:b2:eb:88:
d9:ed:c7:da
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUOI6equch9VZwvOIPjtmOyz+2aRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5
QjA0Q0I0ODAeFw0yNTAzMjUwMjQ0NTlaFw0yNTAzMjYwNTEzNTlaMDMxMTAvBgNV
BAMTKDI0QURENEI1Mzk2RkU4RjFFQjQyQzNENjJENDFBNTIyRkYyMjlCNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTt0l4kZSE7aavTJh1xYo87Sgz
qCJM9r8ocHjyvSq9qZ4/ioQ40ABjJtVeOmQLS/8pnDN55bgMcSmDl44nVyWQBBEp
FvvSBi4HGdssT088CS9qSVUehVs8FBZgnRnqEUdlv43aFt/n8LFMmIODbQHyWaND
HMNnkwW27qfKa45V/pmVtE7r2bZCtCWoDFXd47H0zpVsV2D68fZ71lJrYcfHLohX
E63p1sYSNlDgClWk5VVt/6VK9eRruw3Z0p/v8WpbSJGeiMIUNQYxHg8imn/SR8rV
XDhFMtMlt9Cd6DNlE+SUiI2YkxtDGIuJr+QOujBCYHS7C/0qApysBA9hSO9bAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUJK3UtTlv6PHrQsPWLUGlIv8im0gwHwYDVR0j
BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk
YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3
MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC
RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDA9DDF
uj2XjTAzccritRebgEItWeZQru9WX3mbP3eJCwRz8w4MADweIyuJPN4JlDON8NmI
1aooQBaam0HuyQcv9rXSoViW487/Pb9T/v+oq4cGe2XA5K+wOQPjmXiAV0MZqyT4
S3fPebJn43jUqtYo3fGApflGtBiaEs0jPCFyWFzMfwsxRL2B5XClaBvUhRFS3kJ0
8Tkq6aWQAz7lGh7np3XBZuNgKYs9oXaKSb/WofiYV+/iw9J96YZXqjwkoZoLg+79
1WKd0HGkYRIlsWWrJap+bMcnRah3kRrOL9vX25Q/a0VeH2aVsw95vgImvc5UNneV
BnTJ36Cy64jZ7cfa
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:20:37 2025 by rpki-client on console.sobornost.net