Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.mft
File: 341D743D3FAE2A128809D163FBC4532FD1037CE6.mft (raw, json)
Hash identifier: 7WwOTTuyFZoFQhUdQ53gVVjnC7MKhvDaWCbxM/O+45U=
Subject key identifier: A1:45:CC:3E:9E:3F:59:60:1F:2E:BA:F6:47:F5:E5:08:DA:D8:AA:B4
Authority key identifier: 34:1D:74:3D:3F:AE:2A:12:88:09:D1:63:FB:C4:53:2F:D1:03:7C:E6
Certificate issuer: /CN=341D743D3FAE2A128809D163FBC4532FD1037CE6
Certificate serial: 5E9FD19EF2E9F96E6A42A5FF2D222B5DC8944428
Authority info access: rsync://rpki.netiface.net/repo/Netiface/0/341D743D3FAE2A128809D163FBC4532FD1037CE6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.mft
Manifest number: 32
Signing time: Fri 09 Feb 2024 14:26:28 +0000
Manifest this update: Fri 09 Feb 2024 14:21:28 +0000
Manifest next update: Sat 10 Feb 2024 16:57:28 +0000
Files and hashes: 1: 341D743D3FAE2A128809D163FBC4532FD1037CE6.crl (hash: uVNh1PKl7HRIKMggcjv5Mcbw/bklApeQSJwdWIgWxGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9f:d1:9e:f2:e9:f9:6e:6a:42:a5:ff:2d:22:2b:5d:c8:94:44:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341D743D3FAE2A128809D163FBC4532FD1037CE6
Validity
Not Before: Feb 9 14:21:28 2024 GMT
Not After : Feb 10 16:57:28 2024 GMT
Subject: CN=A145CC3E9E3F59601F2EBAF647F5E508DAD8AAB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:d8:cc:43:c5:37:e2:64:70:a2:fc:d6:92:
85:7e:df:86:99:9f:89:2c:44:6b:9f:d8:85:ff:55:
1f:d4:d7:ca:73:9a:14:13:b1:df:30:bf:38:92:44:
41:e7:c8:6f:ea:3c:2b:68:c9:57:a5:fb:2f:46:13:
be:f8:f8:d0:ba:48:d1:19:9a:2e:7a:7c:ea:82:41:
ed:c1:9e:db:a1:f6:94:9a:09:23:3a:86:02:63:bf:
86:2c:72:ac:f9:28:38:b1:24:a2:f8:85:98:95:8e:
bb:a0:0a:e2:92:4b:ef:cf:2d:3c:4d:fe:dd:b3:f9:
f7:40:a7:9d:80:08:86:d1:64:0a:df:aa:c4:71:bb:
ec:fd:86:01:5f:b2:de:71:36:67:99:ed:a4:90:a9:
77:6e:74:ef:01:69:32:31:69:cb:cb:1b:a7:07:01:
d2:1d:40:34:73:78:e3:5b:12:21:32:d9:3a:8c:f1:
8a:23:a0:5a:9c:03:b5:52:e2:8b:52:b3:05:9d:ef:
05:51:61:76:e9:7f:1d:b6:6c:60:dc:22:38:db:84:
a8:5d:08:89:9b:4e:b4:35:04:f4:b1:06:54:81:37:
6a:dc:5b:95:46:c9:93:55:17:98:6c:66:ec:30:12:
51:de:db:0a:89:71:d1:68:90:52:b7:c2:14:e2:01:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:45:CC:3E:9E:3F:59:60:1F:2E:BA:F6:47:F5:E5:08:DA:D8:AA:B4
X509v3 Authority Key Identifier:
keyid:34:1D:74:3D:3F:AE:2A:12:88:09:D1:63:FB:C4:53:2F:D1:03:7C:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.netiface.net/repo/Netiface/0/341D743D3FAE2A128809D163FBC4532FD1037CE6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:de:14:36:b6:35:2c:0d:b5:42:97:f6:15:2d:db:93:3f:96:
0d:f2:50:78:1b:eb:c4:e1:91:bb:47:61:e3:c6:ce:54:e2:f8:
69:bd:5f:8b:10:46:1e:b5:15:48:88:1f:6e:cf:80:e3:29:ca:
3a:c9:af:40:31:48:da:2d:6e:a3:d3:68:f3:d6:25:d5:ae:ae:
b1:26:22:f7:7e:a4:b6:50:38:68:86:14:36:39:07:21:26:b4:
71:b7:45:9f:34:c2:15:3e:b7:54:3d:2e:8d:bc:5b:4e:f6:d3:
c1:0c:d7:e9:7d:90:bc:16:ee:a2:09:42:d5:c7:67:a4:c8:ff:
f7:1d:85:a5:f2:00:b6:51:68:95:a2:0d:62:8d:9c:8d:8e:47:
26:7b:c0:4e:8c:65:79:db:e0:e3:40:b4:82:f8:b4:69:55:ab:
5c:0a:27:fb:7b:19:57:84:b6:d4:13:47:5f:00:21:a2:43:e4:
e3:db:0b:e7:67:b0:ab:8b:f6:fc:e3:2a:ae:d3:64:49:97:b1:
c3:b3:59:fb:16:38:29:33:b3:62:f1:08:fb:e5:14:e6:85:25:
14:51:61:46:7b:8f:ea:3c:41:18:d7:4d:27:74:a7:3b:4f:c2:
bb:d8:6a:07:f6:03:87:86:b2:5a:46:51:f9:0d:1f:7e:ad:63:
4e:de:c2:c8
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUXp/RnvLp+W5qQqX/LSIrXciURCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQxRDc0M0QzRkFFMkExMjg4MDlEMTYzRkJDNDUzMkZE
MTAzN0NFNjAeFw0yNDAyMDkxNDIxMjhaFw0yNDAyMTAxNjU3MjhaMDMxMTAvBgNV
BAMTKEExNDVDQzNFOUUzRjU5NjAxRjJFQkFGNjQ3RjVFNTA4REFEOEFBQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5NjMQ8U34mRwovzWkoV+34aZ
n4ksRGuf2IX/VR/U18pzmhQTsd8wvziSREHnyG/qPCtoyVel+y9GE774+NC6SNEZ
mi56fOqCQe3Bntuh9pSaCSM6hgJjv4Yscqz5KDixJKL4hZiVjrugCuKSS+/PLTxN
/t2z+fdAp52ACIbRZArfqsRxu+z9hgFfst5xNmeZ7aSQqXdudO8BaTIxacvLG6cH
AdIdQDRzeONbEiEy2TqM8YojoFqcA7VS4otSswWd7wVRYXbpfx22bGDcIjjbhKhd
CImbTrQ1BPSxBlSBN2rcW5VGyZNVF5hsZuwwElHe2wqJcdFokFK3whTiAZwdAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUoUXMPp4/WWAfLrr2R/XlCNrYqrQwHwYDVR0j
BBgwFoAUNB10PT+uKhKICdFj+8RTL9EDfOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWQyMGJlNGMtOGRiMy00NWUxLTgxNjktMGYyZTQwODQx
MzJjLzIvMzQxRDc0M0QzRkFFMkExMjg4MDlEMTYzRkJDNDUzMkZEMTAzN0NFNi5j
cmwwcgYIKwYBBQUHAQEEZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2kubmV0
aWZhY2UubmV0L3JlcG8vTmV0aWZhY2UvMC8zNDFENzQzRDNGQUUyQTEyODgwOUQx
NjNGQkM0NTMyRkQxMDM3Q0U2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsG
AQUFBzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5LzFkMjBiZTRjLThkYjMtNDVlMS04MTY5LTBmMmU0MDg0MTMyYy8yLzM0MUQ3
NDNEM0ZBRTJBMTI4ODA5RDE2M0ZCQzQ1MzJGRDEwMzdDRTYubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ
3hQ2tjUsDbVCl/YVLduTP5YN8lB4G+vE4ZG7R2Hjxs5U4vhpvV+LEEYetRVIiB9u
z4DjKco6ya9AMUjaLW6j02jz1iXVrq6xJiL3fqS2UDhohhQ2OQchJrRxt0WfNMIV
PrdUPS6NvFtO9tPBDNfpfZC8Fu6iCULVx2ekyP/3HYWl8gC2UWiVog1ijZyNjkcm
e8BOjGV52+DjQLSC+LRpVatcCif7exlXhLbUE0dfACGiQ+Tj2wvnZ7Cri/b84yqu
02RJl7HDs1n7FjgpM7Ni8Qj75RTmhSUUUWFGe4/qPEEY100ndKc7T8K72GoH9gOH
hrJaRlH5DR9+rWNO3sLI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org