Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft
File: D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft (raw, json)
Hash identifier: mG4SHg6m9hd9EerkLh4IM0UeIgRVgc223s64f1kCvrs=
Subject key identifier: 73:8A:EF:B4:90:F4:36:A0:FC:4F:5D:BE:78:E7:5D:7A:17:F6:E5:1D
Authority key identifier: D3:A3:D8:EF:7F:C4:8B:73:BF:AD:33:2A:34:76:A7:01:0F:22:0B:EF
Certificate issuer: /CN=D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF
Certificate serial: 26E066E41F8C9676BF20A525694194FE62AEA3EC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft
Manifest number: 1E
Signing time: Sat 11 Jan 2025 20:21:19 +0000
Manifest this update: Sat 11 Jan 2025 20:16:19 +0000
Manifest next update: Sun 12 Jan 2025 23:42:19 +0000
Files and hashes: 1: D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.crl (hash: zCFHLvh6GNJzLAaexBfizhBiYt1ii1bvl1S75DF2MI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e0:66:e4:1f:8c:96:76:bf:20:a5:25:69:41:94:fe:62:ae:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF
Validity
Not Before: Jan 11 20:16:19 2025 GMT
Not After : Jan 12 23:42:19 2025 GMT
Subject: CN=738AEFB490F436A0FC4F5DBE78E75D7A17F6E51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:86:f0:bf:9d:86:83:8e:9e:e7:76:da:57:
a6:5f:cb:3c:bf:8a:37:40:9c:62:6b:d9:97:bf:df:
f5:6f:52:67:02:4a:9d:9a:20:41:24:f7:88:c3:7f:
07:d2:af:fb:c8:53:20:e5:9c:ae:2e:42:88:46:a1:
68:09:b8:fe:d9:d2:64:6c:1f:14:e6:08:83:c3:14:
bb:10:aa:29:ed:f7:c8:3b:5c:93:3b:be:8a:74:4c:
be:15:dd:24:79:a5:21:be:9d:7e:f1:e0:50:7c:8b:
ec:09:5d:40:ad:16:11:de:be:ab:c4:d9:90:57:8c:
4a:cc:1a:75:de:b8:ec:03:52:4f:c4:aa:ed:d0:1b:
d1:19:f4:e7:3c:4e:a5:ef:e0:55:4e:af:45:d1:b0:
dc:1b:ba:3e:9a:7e:01:de:8f:97:55:01:81:87:b6:
9b:91:d3:23:23:37:c4:6b:33:00:25:f8:4f:69:17:
73:db:dd:cf:42:cd:cb:ba:5a:64:18:33:3c:11:c6:
32:ac:dd:a3:bc:25:27:b0:fc:b6:09:7e:e6:5e:66:
c1:d3:56:5e:34:e3:8a:e7:14:b4:ee:c3:58:19:e3:
36:5f:e5:8e:a3:b9:a3:63:06:85:5e:bf:68:78:2e:
23:3f:0e:29:71:a9:01:76:bd:12:bd:a1:cd:f4:96:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:EF:B4:90:F4:36:A0:FC:4F:5D:BE:78:E7:5D:7A:17:F6:E5:1D
X509v3 Authority Key Identifier:
keyid:D3:A3:D8:EF:7F:C4:8B:73:BF:AD:33:2A:34:76:A7:01:0F:22:0B:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fe:51:69:34:d0:a0:d0:89:b1:92:77:bd:b7:39:b4:47:e5:
7a:a0:7b:53:f3:dd:b6:65:00:68:02:e9:d3:ae:9a:2a:ca:b3:
8c:77:6c:3b:a3:5a:f4:11:5e:07:9e:b2:4c:4e:2c:d5:92:51:
ba:f1:f5:0a:40:4d:c8:74:57:0f:58:9b:ce:25:31:61:92:72:
40:23:cc:ad:24:eb:4b:69:c7:20:df:f5:dd:30:99:a0:5c:b1:
01:ad:7e:c1:21:69:e2:8f:3f:5e:02:d0:19:e9:e9:09:49:7b:
5f:9d:51:3c:86:62:f3:d8:af:ee:c4:ab:e8:84:57:bf:36:c2:
0f:6a:02:b3:2a:d4:6c:56:2e:78:6a:db:02:34:0c:30:44:90:
ed:05:b0:3c:55:91:70:e5:02:aa:2b:50:c2:bc:52:43:79:8b:
ae:c4:1f:94:b0:e1:b0:75:f0:5f:6d:ee:21:49:55:eb:03:28:
8a:35:9e:d7:95:ba:c6:c6:b1:92:34:a6:04:cd:73:f6:a3:96:
9a:2f:f5:ec:8a:c3:f9:3c:0e:99:83:cb:e4:8d:f2:99:7e:02:
68:02:8d:b1:9f:5c:9c:80:c1:4b:46:91:0a:88:89:e7:75:d8:
ee:f0:74:bf:4a:48:fd:e9:41:24:05:59:22:b0:13:e6:ee:80:
2b:3c:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:00 2025 by rpki-client