Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
File: ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft (raw, json)
Hash identifier: NnsNLB+9m3+yyVZyAH4hlCbQQhu+KDuYkg8bdwsded0=
Subject key identifier: 3C:55:BB:7A:5B:91:9B:7B:A2:4D:5F:BD:A6:25:CC:46:89:B7:75:1A
Authority key identifier: AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0
Certificate issuer: /CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
Certificate serial: 3CCF11453353C76140D240128EEEE902F2D19D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
Manifest number: D2
Signing time: Wed 22 Jan 2025 22:47:20 +0000
Manifest this update: Wed 22 Jan 2025 22:42:20 +0000
Manifest next update: Fri 24 Jan 2025 01:06:20 +0000
Files and hashes: 1: ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl (hash: ZFcJwdVJSqb6cPedHI9eDwU+e8CHTwTXXJb7p4zkWkM=)
2: AS215664.asa (hash: 3xgtLcc2KJDcNPvYcpy+weIMwVapy+UkODXe2KlOTz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:cf:11:45:33:53:c7:61:40:d2:40:12:8e:ee:e9:02:f2:d1:9d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
Validity
Not Before: Jan 22 22:42:20 2025 GMT
Not After : Jan 24 01:06:20 2025 GMT
Subject: CN=3C55BB7A5B919B7BA24D5FBDA625CC4689B7751A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:b2:02:08:b1:dd:c2:5a:c7:51:7b:b3:e0:
9e:29:f9:ad:85:4b:76:81:e4:ce:63:95:5c:f0:bc:
14:73:8c:8a:d9:80:59:df:d9:9b:c4:a9:f2:1f:9a:
59:a5:1b:f1:19:ba:76:60:5a:33:ee:f1:c0:c7:23:
ef:94:c5:f6:03:7a:09:c7:77:b4:4d:5e:4e:e6:4e:
14:b2:ea:5c:29:00:1a:44:a1:03:95:81:43:26:27:
0d:54:8a:5b:12:99:a2:02:62:bb:b9:79:f4:1a:ed:
ee:6b:0b:0d:3d:71:64:d6:7f:92:40:a4:dd:62:ea:
07:5b:ca:fc:1e:ab:c4:41:31:5e:b0:f8:4b:d6:6f:
4a:cf:00:21:d0:c2:30:c7:6a:5d:6f:5b:b4:f1:2e:
8f:7a:ab:07:7c:14:72:57:58:78:ea:47:fb:82:f3:
d7:7d:cb:49:52:d3:f5:7f:07:0e:1d:08:69:9c:65:
ae:00:fc:1e:49:b3:38:c3:ee:72:89:f9:43:a2:6a:
83:46:94:37:31:03:91:f9:0f:27:53:8b:73:c4:33:
2a:6f:4b:51:50:bf:ab:0d:de:b0:70:f0:e2:e4:e5:
45:3d:76:8e:15:b3:1f:c8:c9:02:e9:79:1f:0d:1c:
a8:06:47:9f:48:ee:3a:6b:d4:ed:4a:4f:6c:a3:e6:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:BB:7A:5B:91:9B:7B:A2:4D:5F:BD:A6:25:CC:46:89:B7:75:1A
X509v3 Authority Key Identifier:
keyid:AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c7:09:5e:75:f8:00:18:0c:1b:d1:e5:84:45:9d:87:46:e3:
1b:aa:bc:24:36:d9:d8:ed:b3:4d:48:b4:7b:4d:c3:2d:d7:a8:
c1:7c:1d:c9:cc:32:f8:60:8b:95:35:29:4a:4d:4b:7e:5d:a0:
5e:6e:28:97:36:dd:da:54:c1:6b:b5:07:c4:6c:17:4c:7c:29:
72:83:0f:9e:b3:b6:2a:8f:6d:74:6f:cc:c0:44:c3:49:e9:c7:
f1:86:cc:56:43:3c:c5:e6:7b:8c:3a:c1:f3:94:2c:bc:1a:ac:
64:95:e3:40:80:91:06:60:3d:69:bd:1a:45:ef:ec:ef:6d:0e:
96:84:13:7a:9a:8d:00:9f:16:1f:41:b1:0c:d5:01:71:ce:1a:
2f:e7:75:37:a9:11:cb:11:42:6a:9f:0e:73:07:f7:a2:80:9c:
41:1e:c6:fd:a8:1b:61:7d:a6:c8:65:99:94:b0:ee:e1:85:41:
f4:e9:29:6d:fa:4c:bf:91:9f:71:48:fc:34:15:69:de:29:5b:
48:5b:67:00:5e:dd:33:07:65:dc:3f:e2:39:cb:64:f3:ac:f8:
d6:58:17:08:46:97:ea:94:8e:26:50:7a:b5:4c:83:a4:c7:c6:
2b:7c:4b:fb:c7:47:4b:52:a8:b0:f6:56:32:40:9f:8c:3b:2f:
2b:4a:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:13 2025 by rpki-client on console.sobornost.net