
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/B11E7A8B117CA2C3C160F72AF3B689258439812B.mft
File: B11E7A8B117CA2C3C160F72AF3B689258439812B.mft (raw, json)
Hash identifier: PDrAubFm9bZ9ZAOS2zbJlCXZIbVul76ic9JWoWlAF1E=
Subject key identifier: 2F:BE:1E:FA:9E:F6:5F:52:BA:BC:31:BD:B5:10:AC:C2:2F:24:61:CA
Authority key identifier: B1:1E:7A:8B:11:7C:A2:C3:C1:60:F7:2A:F3:B6:89:25:84:39:81:2B
Certificate issuer: /CN=b11e7a8b117ca2c3c160f72af3b689258439812b
Certificate serial: 60BAEA8C3A69F9F9C8D7DFBA87EE382BBF9EE23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sR56ixF8osPBYPcq87aJJYQ5gSs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/B11E7A8B117CA2C3C160F72AF3B689258439812B.mft
Manifest number: 33
Signing time: Tue 09 Jan 2024 05:43:19 +0000
Manifest this update: Tue 09 Jan 2024 05:38:19 +0000
Manifest next update: Wed 10 Jan 2024 05:59:19 +0000
Files and hashes: 1: AS202685.asa (hash: sP2f0pzcE3oXcTqPiSCB0ufKecBH/ralEZ95xmGdD/Y=)
2: B11E7A8B117CA2C3C160F72AF3B689258439812B.crl (hash: CNUIqCbk813mIj5FEiIIxIKBb9K3tgJaa+XHq1/eOBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ba:ea:8c:3a:69:f9:f9:c8:d7:df:ba:87:ee:38:2b:bf:9e:e2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11e7a8b117ca2c3c160f72af3b689258439812b
Validity
Not Before: Jan 9 05:38:19 2024 GMT
Not After : Jan 10 05:59:19 2024 GMT
Subject: CN=2FBE1EFA9EF65F52BABC31BDB510ACC22F2461CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:28:04:88:e1:46:be:cf:1e:6e:fe:2b:f6:
6b:a8:69:2f:8d:fa:ab:ae:fc:63:a6:4a:83:68:72:
02:83:cc:c2:12:1f:06:92:b6:47:e1:d8:95:0e:ed:
88:77:82:e3:1f:33:2c:63:d0:14:e0:c5:94:23:3c:
b5:6e:f2:bb:ed:d4:26:fe:77:8e:8a:98:aa:95:17:
cc:77:da:04:a0:d5:ac:73:58:3f:3e:ae:a7:8b:c1:
88:97:36:37:b4:ee:f3:a2:63:40:7c:21:d4:2c:36:
94:b2:f9:5c:99:e3:42:6b:c4:0a:7f:03:f6:a9:45:
a9:e1:fc:33:7c:66:36:7d:83:fa:7e:8a:06:b0:de:
bb:05:54:ea:7d:18:f5:d8:c9:bd:10:dc:fd:55:d2:
3a:b8:ac:58:44:8f:2c:49:3b:16:c3:92:2c:2f:b8:
24:95:80:00:85:06:0a:ab:75:aa:58:b8:6c:9d:26:
02:f9:2d:77:78:54:9d:bf:74:4a:b1:56:81:59:8a:
b4:c9:b6:06:62:9f:08:af:53:ce:5e:5b:69:8e:9e:
af:a7:c2:a2:ac:d9:17:85:4e:d7:bd:45:2f:b8:29:
66:02:06:37:21:31:bf:cc:cf:e2:50:d5:f2:e8:75:
47:d6:16:cf:39:4e:b0:87:ec:b5:ef:2f:9f:0b:7c:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:1E:FA:9E:F6:5F:52:BA:BC:31:BD:B5:10:AC:C2:2F:24:61:CA
X509v3 Authority Key Identifier:
keyid:B1:1E:7A:8B:11:7C:A2:C3:C1:60:F7:2A:F3:B6:89:25:84:39:81:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/B11E7A8B117CA2C3C160F72AF3B689258439812B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sR56ixF8osPBYPcq87aJJYQ5gSs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/85c7b233-df39-4fba-b4fd-ee1fd4ce808e/0/B11E7A8B117CA2C3C160F72AF3B689258439812B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:40:6d:f3:c5:8a:e4:08:39:be:99:ec:f9:99:28:d1:53:8e:
06:63:79:b3:cc:0f:5e:98:7e:15:19:af:df:65:16:9b:88:1b:
db:9a:3a:62:17:fd:d5:0a:00:d1:60:18:7d:8b:31:24:58:d1:
9d:01:9c:3d:0a:8a:01:33:22:44:93:0c:4a:93:b7:4c:8d:85:
b0:3f:9a:ff:f3:b4:e9:57:e3:c1:e8:7b:3a:54:fe:61:c1:aa:
f6:f7:55:fd:b1:8e:df:6b:46:81:c1:1c:26:46:bc:5b:d2:bd:
de:ac:f5:59:5b:76:87:21:3f:21:48:df:3c:01:d2:4c:06:66:
66:d8:26:b1:59:70:8e:9e:61:18:48:54:08:b9:a6:d1:8c:df:
87:02:09:c7:ef:59:da:d1:e0:82:8c:74:e7:f4:b4:04:8b:93:
d5:c3:6b:4d:77:ac:96:fc:df:fc:c7:bd:97:8f:1a:5f:f0:d3:
dc:96:00:64:4e:9a:b3:fb:c2:f1:88:4d:6d:f9:02:06:b0:da:
29:79:08:fb:98:15:4f:fc:2b:79:09:bf:80:38:24:2e:7b:49:
45:18:a3:6a:68:9c:7e:5b:8a:6b:27:94:2e:e9:a9:27:b0:89:
09:4f:9b:0b:7f:97:ad:6e:bf:56:35:7d:f2:d1:4d:db:2a:28:
3b:3e:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:53 2024 by rpki-client on console.sobornost.net