Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.mft
File: AFEA1F33E4145F82FED94ECD283D6160AC108679.mft (raw, json)
Hash identifier: 0JRmHAIOPgsY0nlF77XuuyBZQYAYCeVXqllem0fAfJs=
Subject key identifier: 47:04:54:5F:46:A3:CC:4A:B2:13:E8:CC:7E:CB:B4:34:CB:CA:A1:A2
Authority key identifier: AF:EA:1F:33:E4:14:5F:82:FE:D9:4E:CD:28:3D:61:60:AC:10:86:79
Certificate issuer: /CN=afea1f33e4145f82fed94ecd283d6160ac108679
Certificate serial: 2BA19E32DB15DF94B116ECD203EAD61FE8FF604A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-ofM-QUX4L-2U7NKD1hYKwQhnk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.mft
Manifest number: 0F
Signing time: Wed 25 Dec 2024 11:06:37 +0000
Manifest this update: Wed 25 Dec 2024 11:01:37 +0000
Manifest next update: Thu 26 Dec 2024 13:43:37 +0000
Files and hashes: 1: AFEA1F33E4145F82FED94ECD283D6160AC108679.crl (hash: sZVaj1VJcyUvDZhfmkMIIYd4ofKOaHCmpPB0fjPYlFA=)
2: AS199310.asa (hash: tS8Rj5WNt0cSdOxdg80ytLAXKL1tJyC+gdBFa1sxjgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a1:9e:32:db:15:df:94:b1:16:ec:d2:03:ea:d6:1f:e8:ff:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea1f33e4145f82fed94ecd283d6160ac108679
Validity
Not Before: Dec 25 11:01:37 2024 GMT
Not After : Dec 26 13:43:37 2024 GMT
Subject: CN=4704545F46A3CC4AB213E8CC7ECBB434CBCAA1A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:ab:40:92:a2:bf:cf:52:33:a7:12:1e:93:
69:0c:8c:08:b8:50:f7:ca:13:cc:8b:6b:3e:de:7f:
09:04:dd:5c:cc:5f:f1:5e:c6:1a:98:99:b3:cb:78:
3e:f2:70:a4:5d:59:f2:ed:19:31:7f:bc:fe:88:f7:
d5:5d:d5:2c:a2:f8:69:ca:9f:35:19:8a:b5:ac:98:
a7:64:1a:56:33:41:01:d1:fa:d4:3f:c7:05:67:38:
cd:f8:9c:8b:a7:b6:12:91:f5:f5:f9:b6:82:e7:5d:
d3:cf:50:2e:02:5f:5a:34:b8:03:f3:80:73:2f:26:
eb:46:8b:bd:53:b7:f9:c4:08:6c:46:7b:51:67:67:
07:a0:14:86:68:48:10:c3:a5:0c:d8:d7:b2:57:ef:
ea:0e:c6:53:e9:19:3a:a6:bc:f2:b5:ea:54:97:5d:
a9:7c:fe:75:64:f3:f1:82:3a:e7:47:d8:ad:e0:15:
17:e6:12:e3:ed:59:47:6c:ef:d4:b4:2e:17:13:00:
1f:95:4f:65:ca:29:71:e4:d7:29:d2:66:24:fb:13:
33:11:30:63:7c:e0:03:7a:84:c1:54:ac:49:81:0e:
a6:53:db:6c:8a:5f:4e:5d:f7:1e:5a:f0:e1:32:ff:
19:83:fc:93:1a:c8:ee:f9:88:80:e9:2b:3c:17:53:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:54:5F:46:A3:CC:4A:B2:13:E8:CC:7E:CB:B4:34:CB:CA:A1:A2
X509v3 Authority Key Identifier:
keyid:AF:EA:1F:33:E4:14:5F:82:FE:D9:4E:CD:28:3D:61:60:AC:10:86:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-ofM-QUX4L-2U7NKD1hYKwQhnk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eba23213-7710-4403-b78a-e77ee9461c95/0/AFEA1F33E4145F82FED94ECD283D6160AC108679.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:57:89:56:f1:e3:ab:94:64:95:26:34:df:5a:a5:ec:35:16:
bc:6a:3e:e5:35:be:e7:cc:d7:48:a6:96:29:72:bc:ff:72:10:
3d:6c:7f:2f:f5:d3:15:1b:e1:3c:0a:a5:68:12:1b:21:98:ac:
37:cc:d6:fd:4d:b3:0e:36:b8:36:5e:e3:c4:14:53:39:02:12:
fc:82:cb:3b:83:3d:64:1a:94:67:ea:40:f2:c6:67:0d:29:0a:
33:49:26:e5:a1:db:99:a1:13:99:13:2c:70:b2:a9:8b:6f:6e:
17:d7:13:f1:81:5d:62:8c:c6:e2:ad:c5:5f:fc:69:d1:52:90:
cb:37:8d:cb:3e:f1:33:b4:6f:3e:d1:2d:7f:db:08:6b:0a:f7:
b9:cf:95:33:a3:b0:25:bc:d2:e4:79:7d:24:b4:34:9c:ba:d7:
3a:ce:be:d9:c7:ae:2f:3d:b6:66:c1:e9:96:c1:bc:cf:55:9d:
63:3a:b2:2c:65:e0:12:b1:74:83:5c:1d:72:33:c5:b4:ea:12:
af:31:3e:9b:fc:f3:49:cf:7a:e0:e5:76:4e:f4:15:84:04:18:
4b:e8:74:86:b8:1a:16:e1:a4:b2:76:88:7f:e8:12:3e:c1:df:
46:61:1c:4a:85:c1:c6:94:0f:89:f7:4f:c2:24:58:09:1f:a5:
97:46:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:59 2024 by rpki-client on console.sobornost.net