Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
File: F066639311596E151E78E34CCC584DC5F500F585.mft (raw, json)
Hash identifier: brQh1gyIXvT7RgbnrQnJTFtEvDQRE8j6JE+4ywFT8SE=
Subject key identifier: 43:7C:16:1A:FF:E5:F2:FF:43:A1:17:3A:E3:07:68:99:4E:13:73:A0
Authority key identifier: F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Certificate issuer: /CN=F066639311596E151E78E34CCC584DC5F500F585
Certificate serial: 4F6278F5E28EA7FFB043BA5B381D4CED5C8DECE5
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
Manifest number: 04AB
Signing time: Wed 02 Jul 2025 19:44:51 +0000
Manifest this update: Wed 02 Jul 2025 19:39:51 +0000
Manifest next update: Thu 03 Jul 2025 21:39:51 +0000
Files and hashes: 1: F066639311596E151E78E34CCC584DC5F500F585.crl (hash: VFswtRwevpAz3+7viqqmqC/dkfIFMHqs9b83yFNLinQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:62:78:f5:e2:8e:a7:ff:b0:43:ba:5b:38:1d:4c:ed:5c:8d:ec:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F066639311596E151E78E34CCC584DC5F500F585
Validity
Not Before: Jul 2 19:39:51 2025 GMT
Not After : Jul 3 21:39:51 2025 GMT
Subject: CN=437C161AFFE5F2FF43A1173AE30768994E1373A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:cb:ce:6e:9f:19:b6:aa:33:0d:18:b7:22:
39:92:d4:c5:1c:b1:11:cc:9b:30:30:86:52:3c:b7:
05:13:f5:4f:2b:e2:c1:f3:4d:08:d1:21:82:a4:8b:
31:8c:6a:f9:11:31:12:66:3e:f1:b4:d3:15:f5:23:
64:a4:7d:60:18:05:ca:cd:86:0b:bb:69:74:51:c5:
1f:8a:e6:1f:d0:5c:1b:c8:95:2a:79:2a:09:0f:08:
da:d5:a4:f7:7d:28:be:53:e7:07:54:b3:ac:e5:3d:
4e:01:9c:1c:7a:65:69:05:00:f9:5a:82:f3:48:2c:
28:fe:66:c7:cb:41:b8:c2:cb:e9:34:6b:ba:95:4d:
07:29:72:7b:00:ef:5c:ef:40:57:4e:8a:34:ed:54:
71:21:5a:15:e9:7d:3f:57:84:67:49:42:4d:ea:f7:
c1:29:fd:f6:ec:50:48:a4:27:50:68:d1:bb:f3:47:
04:e2:c0:d1:01:92:99:b7:9c:10:28:30:15:c0:85:
19:73:ad:62:dd:94:5d:43:14:9d:07:81:f9:2f:34:
c1:e0:f7:ba:2a:e6:32:ff:4a:f2:65:77:93:a3:aa:
56:9e:41:96:1c:eb:70:6f:07:92:bf:31:e7:e5:71:
8c:6b:f6:58:1c:67:b6:15:b8:0d:5e:a2:f5:65:b2:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:16:1A:FF:E5:F2:FF:43:A1:17:3A:E3:07:68:99:4E:13:73:A0
X509v3 Authority Key Identifier:
keyid:F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5e:36:70:93:5a:63:45:a4:36:1e:b0:07:3a:6c:83:f9:5b:
e8:2c:7a:25:a7:62:40:23:d4:b6:85:70:3b:51:62:cb:f8:ae:
8f:35:5f:6a:60:66:01:79:bb:8d:53:9a:3f:3c:fa:8e:3c:23:
65:07:54:ff:f1:02:e8:8d:03:5c:0c:42:7c:42:c0:24:a0:67:
2a:98:2e:2e:da:ea:49:88:c4:75:43:de:9c:ad:98:fc:8d:54:
1a:7a:d6:e4:b6:7b:99:38:db:c5:04:aa:ad:50:40:6e:40:c0:
33:43:e6:f9:56:2c:3e:2c:62:53:6c:de:1e:ee:5b:fa:8c:91:
30:0a:d0:1f:34:1b:77:a5:0c:7b:9f:5e:5f:4f:f9:09:fd:30:
11:5c:e5:25:7c:fd:62:ef:80:a0:a9:86:30:7b:a8:a8:c8:03:
43:09:65:90:2d:44:26:25:f0:0a:b6:9f:97:64:ff:dc:b6:f2:
87:f9:c3:48:e6:a0:57:b5:c2:bd:10:39:eb:ac:ac:fd:de:3a:
c7:1a:d7:78:67:e3:80:87:dd:92:e7:af:20:ff:47:59:44:dd:
df:2b:6d:11:96:0f:0b:83:b2:17:c5:0b:80:c0:f8:79:15:b0:
13:d2:28:09:c5:6f:eb:03:a3:e8:4a:47:df:88:b2:c4:76:b1:
62:70:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:53 2025 by rpki-client