Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.mft
File: D7BE9D3520750EF280E734F41346D051C8B2F524.mft (raw, json)
Hash identifier: KCkJQ5Tn73EdEAXje3RWTc24rZPR7gLvNsuaOMv3K4s=
Subject key identifier: F5:99:BC:10:B1:60:C5:7D:56:3F:A0:D2:B5:91:4A:27:3F:92:01:A4
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 022145F541A479598AEA88BBA4E2020A89887F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.mft
Manifest number: 0295
Signing time: Mon 29 Jul 2024 10:15:05 +0000
Manifest this update: Mon 29 Jul 2024 10:10:05 +0000
Manifest next update: Tue 30 Jul 2024 12:19:05 +0000
Files and hashes: 1: D7BE9D3520750EF280E734F41346D051C8B2F524.crl (hash: t+M0M9sVgKI9uNBnhW65yLkFqNKT7etIq+bVsFTtsBw=)
2: 37392e39392e32342e302f32322d3234203d3e20383334.roa (hash: aDbiR/gcYMc8+039likIb7le9Um5lwcOHFTe8LQG3Mo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:21:45:f5:41:a4:79:59:8a:ea:88:bb:a4:e2:02:0a:89:88:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Jul 29 10:10:05 2024 GMT
Not After : Jul 30 12:19:05 2024 GMT
Subject: CN=F599BC10B160C57D563FA0D2B5914A273F9201A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:1e:ea:91:1a:24:42:06:09:66:91:12:15:
db:b3:87:42:e0:11:4b:4f:c9:69:a0:8c:f7:9a:db:
38:d9:ca:fa:c7:31:14:1b:18:e1:7d:0c:7a:8a:0f:
b5:8b:fe:d0:f8:33:6e:e0:2c:0e:57:0e:5c:6d:8b:
c6:e0:31:e0:ad:6d:38:c8:70:8c:0f:85:18:ce:2d:
5a:61:c3:16:d5:0e:1b:ec:47:c3:e4:b1:74:96:51:
70:9a:ee:e8:4b:21:4a:88:c2:66:20:04:05:22:83:
29:ad:19:99:85:51:4b:98:46:18:a8:87:42:db:c7:
9d:e5:a1:9c:54:5e:2b:fa:ad:4f:1b:05:b4:a0:83:
cd:b1:c6:56:d3:c7:22:29:43:46:25:58:e0:56:4b:
80:d0:a1:ac:8b:51:71:61:54:1c:aa:e4:e2:d8:51:
87:1a:f7:bf:05:2f:a3:ef:67:f8:8a:26:15:ca:03:
58:ac:0f:a1:88:31:94:eb:3f:84:79:0e:ea:0d:7f:
7e:f1:dd:68:c8:9a:7f:fc:9b:9c:85:1c:27:2b:ad:
d6:03:95:24:0d:e1:03:ef:2d:0a:51:44:33:8c:4f:
a2:88:e0:ea:80:2c:6e:7a:80:c4:25:82:f1:a9:dc:
94:15:60:d4:29:7b:88:5c:15:53:22:12:a8:c7:61:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:BC:10:B1:60:C5:7D:56:3F:A0:D2:B5:91:4A:27:3F:92:01:A4
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c8:29:c7:e4:2e:8d:67:66:04:a5:2e:b6:98:2c:6e:ed:4d:
30:d7:45:ce:fd:a1:68:bd:83:a6:73:2c:fd:de:43:b9:c3:f6:
1d:0d:55:41:cf:f3:e1:35:70:b7:57:aa:09:51:69:12:b6:82:
c7:6a:ac:89:04:b3:80:6c:7d:33:cc:f7:cd:4f:84:18:08:9d:
a8:04:7a:31:e9:f4:b9:20:03:87:03:8b:c7:be:14:f0:c4:9c:
c3:31:4f:21:49:25:f1:a1:1d:4a:59:b4:fd:c6:37:6a:a7:2e:
96:bb:49:08:37:be:c0:de:e6:01:1f:54:53:57:d5:19:dd:76:
6d:77:c7:7e:30:59:ea:be:71:7b:a0:0f:21:f6:87:94:c9:3c:
1c:e9:59:c1:39:a9:00:7e:30:01:b9:c3:52:50:04:ac:d2:c5:
41:6b:7b:e2:fe:c5:2a:ce:f2:e4:7e:1c:63:0f:45:fb:e3:a2:
18:fb:19:97:11:17:72:26:44:0e:b1:05:2c:bc:02:40:46:93:
b0:51:27:89:87:1e:3b:53:67:76:e2:31:23:c7:00:d0:a2:17:
08:ed:22:5d:e9:8c:60:72:da:5d:09:19:d2:ca:24:95:5b:32:
39:ff:72:b4:06:3e:1b:7a:cc:8c:f2:9d:bf:e3:95:34:9a:57:
97:2a:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 01:02:42 2024 by rpki-client on console.sobornost.net