Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier: 3dIbP6rJIA8+R2sGxHntk116BYz62ouFBPsK5UXOeoI=
Subject key identifier: 3B:B5:72:E1:18:E6:D5:BD:6A:00:EB:37:E0:F6:F2:A1:4B:CA:68:32
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial: 42E8576A8D02297CF7980A9FC9FC5EAA08D2E79A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number: 52
Signing time: Tue 01 Apr 2025 05:31:45 +0000
Manifest this update: Tue 01 Apr 2025 05:26:45 +0000
Manifest next update: Wed 02 Apr 2025 06:09:45 +0000
Files and hashes: 1: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=)
2: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=)
3: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=)
4: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: dPGdNgXGMn5wcZM2xJeKbvBePAty6qjXLa4jxl4Afbk=)
5: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=)
6: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=)
7: 326131343a373538313a323030303a3a2f34302d3430203d3e20343031333836.roa (hash: WFUH2iQtAwQ7iI2iexnUk2ty6+pZTlY1YwlIf0QItgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e8:57:6a:8d:02:29:7c:f7:98:0a:9f:c9:fc:5e:aa:08:d2:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Validity
Not Before: Apr 1 05:26:45 2025 GMT
Not After : Apr 2 06:09:45 2025 GMT
Subject: CN=3BB572E118E6D5BD6A00EB37E0F6F2A14BCA6832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:e3:1a:74:5a:2e:d7:3f:b0:2d:1e:0b:14:
a7:15:53:8c:63:28:07:4d:23:0e:57:15:ee:c2:36:
c5:03:60:02:52:3a:75:55:3c:d1:9d:41:a5:9e:8d:
88:d9:9d:5f:70:2c:25:b8:bb:39:fc:e5:29:7d:6b:
96:f6:1d:b0:a7:fc:60:b7:7f:ad:28:df:68:25:ff:
65:d0:ef:f6:8e:1d:14:70:5c:6d:7f:69:8f:b9:05:
d0:a2:31:68:8c:b2:3c:0c:38:3d:8c:cc:ce:7c:2c:
4d:32:d1:a9:61:4b:98:38:06:18:e0:5b:81:3b:3c:
42:bc:28:83:3c:2d:5f:ee:18:60:53:d1:77:2f:ab:
9a:2f:e4:8b:2b:f8:b4:44:73:d0:86:da:10:92:96:
ab:16:08:0c:bf:ac:32:34:5d:5a:c6:b9:9e:27:e1:
c3:87:d7:2d:37:dd:ed:b9:0d:8e:1c:38:9c:04:b2:
d6:a0:b3:4f:6e:ce:af:21:ec:e4:02:d5:64:e2:88:
1c:2d:d5:a1:11:82:f5:6f:13:1d:46:22:36:ad:9f:
f0:43:8d:6c:65:90:0c:bf:be:cb:67:de:36:3a:8b:
ea:88:41:89:7e:81:5f:49:ca:7b:42:72:42:3e:83:
14:c6:ab:19:0d:57:20:6d:1f:04:a3:a1:61:db:6f:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:72:E1:18:E6:D5:BD:6A:00:EB:37:E0:F6:F2:A1:4B:CA:68:32
X509v3 Authority Key Identifier:
keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:36:87:2c:2b:7b:2b:e4:d5:4a:9f:5e:11:fa:a3:b3:a2:9f:
9c:5a:10:9e:78:bd:19:b5:74:aa:4c:10:8d:1c:0b:51:f7:d3:
4e:36:f1:3a:d0:7b:42:43:a6:51:17:11:97:5e:ab:85:67:54:
ef:7c:77:37:65:16:5b:51:87:a1:70:bc:58:1d:d2:29:be:a7:
b8:a9:16:c2:b2:ff:22:3f:0d:6a:f7:2f:46:2d:ec:c9:94:4e:
87:b2:26:ec:da:fb:14:5d:ef:80:39:c4:37:9f:fd:f0:bf:0a:
ef:76:46:4c:68:1a:c7:34:f0:98:07:ae:8d:d5:99:ba:2b:dd:
4b:56:d2:b1:94:ec:90:48:55:61:52:7a:27:8c:84:3d:dd:56:
57:37:54:05:45:de:ca:e2:e4:50:35:12:df:97:20:18:a1:7d:
0c:9f:09:2a:60:ff:49:95:3b:63:14:ee:33:28:b8:7f:98:f7:
1b:42:27:b6:df:f1:2e:c1:48:60:ff:b5:f6:66:4a:49:a0:0a:
05:94:61:b0:8a:3d:1d:53:c2:94:07:05:4e:71:c1:d5:59:96:
57:20:d5:31:19:ab:b8:9e:5f:10:c9:bb:52:4c:43:ac:bd:bb:
64:ba:28:d7:d0:b9:ef:9f:96:95:ff:e2:41:3b:41:0e:44:25:
67:bf:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:42:43 2025 by rpki-client on console.sobornost.net