
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: 9L0q5FgLDZXUqLnSZvnZU/k+c9begv+4rnt8IXOns9w=
Subject key identifier: 27:FF:AC:04:AC:A0:A7:FC:21:54:50:7E:B8:33:2A:6D:F5:CF:DD:DD
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 432E99A241E34927A5CABDED09A0D138DA60E66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 036E
Signing time: Sun 13 Apr 2025 04:33:33 +0000
Manifest this update: Sun 13 Apr 2025 04:28:33 +0000
Manifest next update: Mon 14 Apr 2025 07:50:33 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: 8yvClx8mNVPLgakIsrG8KKltFny19KG4QuWOcPeqRTg=)
2: AS205603.asa (hash: cBPBrIrKQApvXReq5l0HPs0LV31Ya31Pj6v8h6b+N+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2e:99:a2:41:e3:49:27:a5:ca:bd:ed:09:a0:d1:38:da:60:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Apr 13 04:28:33 2025 GMT
Not After : Apr 14 07:50:33 2025 GMT
Subject: CN=27FFAC04ACA0A7FC2154507EB8332A6DF5CFDDDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:0d:1a:45:d4:8a:17:ce:0a:3c:b7:61:a6:
aa:40:d9:c3:33:e1:2a:31:78:bc:63:9a:dc:8f:65:
a8:63:3a:88:ed:7b:89:e6:bd:71:98:76:e6:f1:27:
13:9d:58:1d:99:31:38:ea:9c:6a:ee:cf:12:67:1b:
b2:01:04:21:3d:15:40:01:7c:2c:cf:6e:3d:4e:18:
1a:98:1d:7a:65:a9:ce:52:40:30:b3:61:9f:82:87:
10:f4:84:53:1f:92:eb:91:08:f2:95:82:31:06:85:
b5:d4:a8:b1:b0:ac:10:0d:1f:21:86:d6:b3:4a:b5:
db:7d:b0:ad:ed:28:2c:5b:6f:bd:a9:00:21:d7:c2:
d9:96:25:96:96:eb:37:af:69:83:28:e1:9a:b2:f8:
a1:9e:84:12:a0:3c:c4:d4:80:ee:ec:75:06:2f:9c:
b6:2e:89:42:f1:da:88:6b:a3:fa:f9:86:10:29:74:
8f:26:ac:08:98:22:b7:ed:65:3b:9a:fa:48:09:3a:
c0:10:a0:32:36:fa:97:83:7b:ee:05:88:5a:1c:b6:
20:a6:b8:3a:d9:b4:e3:4b:a3:39:d4:20:13:a4:da:
4b:92:62:53:29:57:ed:ed:2f:1f:31:da:19:5e:51:
9b:43:ec:d2:e8:e8:7e:6f:ed:01:f7:53:9f:75:46:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:AC:04:AC:A0:A7:FC:21:54:50:7E:B8:33:2A:6D:F5:CF:DD:DD
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:2c:5f:e9:ce:fc:d3:4e:d2:da:09:f7:f7:6f:7f:54:cf:
c3:16:b8:de:9f:d1:55:6c:9f:9a:13:e5:c5:f5:18:95:db:de:
d7:44:fd:82:4a:ad:01:ee:3e:fd:e7:cd:87:75:6a:b6:65:b8:
1c:21:e2:21:ef:0b:b6:94:b9:8b:47:06:bf:e0:80:89:f1:44:
67:01:b8:81:97:13:31:57:7d:69:b0:ab:85:61:23:34:76:b8:
b3:1e:5c:4c:59:7c:6e:ac:ce:0b:99:ad:ae:3f:14:28:4a:3a:
a9:5a:45:e9:f5:38:98:02:b1:2c:e3:c9:3b:ad:93:1f:ac:3f:
63:07:bd:4d:82:93:95:61:c4:c8:5f:99:47:aa:07:06:62:39:
39:7f:c0:06:d1:ed:62:74:4c:37:6c:60:7d:7b:d7:29:ac:db:
23:e6:7c:52:35:d0:2e:9c:c9:ff:80:96:db:5f:a8:f6:af:08:
95:93:55:1d:06:54:ca:2a:4f:8a:68:7a:2a:5e:43:be:79:14:
aa:c8:cc:93:e6:75:d1:cb:54:35:76:c8:a7:29:f1:dc:f5:21:
29:8b:b0:f0:e9:1a:7a:45:4d:c2:d4:fb:41:d5:81:05:69:a7:
78:9b:e5:36:86:02:19:47:d8:73:b4:31:6c:49:c0:e1:7c:a4:
59:14:f4:49
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQy6ZokHjSSelyr3tCaDRONpg5mowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVjNzNkZmM4NjhjM2Y2MmNiN2ZmOTcxYWY0Nzc2NzFj
YWYzODBhYTAeFw0yNTA0MTMwNDI4MzNaFw0yNTA0MTQwNzUwMzNaMDMxMTAvBgNV
BAMTKDI3RkZBQzA0QUNBMEE3RkMyMTU0NTA3RUI4MzMyQTZERjVDRkREREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnvQ0aRdSKF84KPLdhpqpA2cMz
4SoxeLxjmtyPZahjOojte4nmvXGYdubxJxOdWB2ZMTjqnGruzxJnG7IBBCE9FUAB
fCzPbj1OGBqYHXplqc5SQDCzYZ+ChxD0hFMfkuuRCPKVgjEGhbXUqLGwrBANHyGG
1rNKtdt9sK3tKCxbb72pACHXwtmWJZaW6zevaYMo4Zqy+KGehBKgPMTUgO7sdQYv
nLYuiULx2ohro/r5hhApdI8mrAiYIrftZTua+kgJOsAQoDI2+peDe+4FiFoctiCm
uDrZtONLoznUIBOk2kuSYlMpV+3tLx8x2hleUZtD7NLo6H5v7QH3U591RutvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJ/+sBKygp/whVFB+uDMqbfXP3d0wHwYDVR0j
BBgwFoAUJcc9/IaMP2LLf/lxr0d2ccrzgKowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGVjMzYyMTAtZjZjZi00YzRmLWExNTUtNzhhOGViNWJm
MGJmLzAvMjVDNzNERkM4NjhDM0Y2MkNCN0ZGOTcxQUY0Nzc2NzFDQUYzODBBQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pjYzlfSWFNUDJMTGZfbHhyMGQyY2Ny
emdLby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWMzNjIxMC1m
NmNmLTRjNGYtYTE1NS03OGE4ZWI1YmYwYmYvMC8yNUM3M0RGQzg2OEMzRjYyQ0I3
RkY5NzFBRjQ3NzY3MUNBRjM4MEFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTcsX+nO/NNO0toJ9/dv
f1TPwxa43p/RVWyfmhPlxfUYldve10T9gkqtAe4+/efNh3VqtmW4HCHiIe8LtpS5
i0cGv+CAifFEZwG4gZcTMVd9abCrhWEjNHa4sx5cTFl8bqzOC5mtrj8UKEo6qVpF
6fU4mAKxLOPJO62TH6w/Ywe9TYKTlWHEyF+ZR6oHBmI5OX/ABtHtYnRMN2xgfXvX
KazbI+Z8UjXQLpzJ/4CW21+o9q8IlZNVHQZUyipPimh6Kl5DvnkUqsjMk+Z10ctU
NXbIpynx3PUhKYuw8OkaekVNwtT7QdWBBWmneJvlNoYCGUfYc7QxbEnA4XykWRT0
SQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net