
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/137bbed0-a12b-417b-a973-567f41a320d1/0/6F8A258586E22F8D1942882B7F8B9C2CE885D805.mft
File: 6F8A258586E22F8D1942882B7F8B9C2CE885D805.mft (raw, json)
Hash identifier: nyuflN+SjVixXudIkN89L2FP985X7bvfSRZqQgwrdXo=
Subject key identifier: 90:16:69:52:16:5A:78:E1:4F:41:D4:5C:DC:92:DD:F1:C1:10:B0:90
Authority key identifier: 6F:8A:25:85:86:E2:2F:8D:19:42:88:2B:7F:8B:9C:2C:E8:85:D8:05
Certificate issuer: /CN=6f8a258586e22f8d1942882b7f8b9c2ce885d805
Certificate serial: 447EB27659EA628FD887423DDCE12FFA3CE8E8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4olhYbiL40ZQogrf4ucLOiF2AU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/137bbed0-a12b-417b-a973-567f41a320d1/0/6F8A258586E22F8D1942882B7F8B9C2CE885D805.mft
Manifest number: 23
Signing time: Sat 29 Mar 2025 03:53:52 +0000
Manifest this update: Sat 29 Mar 2025 03:48:52 +0000
Manifest next update: Sun 30 Mar 2025 04:36:52 +0000
Files and hashes: 1: 6F8A258586E22F8D1942882B7F8B9C2CE885D805.crl (hash: qwkxirNiiewZiN+ofZxN6BFKJa56xad34J6VQwFDcRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7e:b2:76:59:ea:62:8f:d8:87:42:3d:dc:e1:2f:fa:3c:e8:e8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8a258586e22f8d1942882b7f8b9c2ce885d805
Validity
Not Before: Mar 29 03:48:52 2025 GMT
Not After : Mar 30 04:36:52 2025 GMT
Subject: CN=90166952165A78E14F41D45CDC92DDF1C110B090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:59:18:ca:07:cc:f7:64:c9:6c:05:31:dc:
3b:56:7a:c0:28:ae:83:fa:5d:98:85:1e:eb:b7:14:
50:c4:f0:a1:e6:c9:2f:5b:2a:08:a9:35:fa:d7:c3:
da:c9:25:8d:73:03:e0:73:6e:4c:68:f5:aa:75:3e:
a9:f2:7b:3a:49:cc:23:fe:75:a2:30:0c:11:63:18:
32:d2:57:b1:2f:21:63:5e:89:eb:a1:94:16:43:69:
35:15:82:19:b1:e1:6d:76:57:8d:73:3f:db:54:ab:
66:33:df:66:bd:13:55:65:f0:e2:1b:02:ed:0b:3a:
ff:b5:27:48:fe:76:a1:b8:78:70:a7:f6:ba:0f:fb:
1c:88:4d:01:87:2f:65:c4:27:65:00:e2:59:a2:91:
f9:f8:29:00:31:ec:60:1c:9a:dc:42:79:b6:5a:bb:
7e:9c:2b:48:57:7d:d3:bd:a0:92:27:a0:04:a6:e4:
66:4e:3a:c4:28:b9:0c:d4:c0:45:9b:cb:37:46:c4:
90:78:2f:7d:69:53:29:a5:4a:0a:82:c2:21:a2:a9:
40:e5:2d:6a:f6:1b:4a:b8:88:a7:cb:74:5e:85:3f:
2a:69:35:0d:2e:2e:e1:ba:3c:3c:aa:90:96:63:7e:
ae:20:44:4f:af:f1:2e:8a:24:71:f1:54:a6:f8:a7:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:16:69:52:16:5A:78:E1:4F:41:D4:5C:DC:92:DD:F1:C1:10:B0:90
X509v3 Authority Key Identifier:
keyid:6F:8A:25:85:86:E2:2F:8D:19:42:88:2B:7F:8B:9C:2C:E8:85:D8:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/137bbed0-a12b-417b-a973-567f41a320d1/0/6F8A258586E22F8D1942882B7F8B9C2CE885D805.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4olhYbiL40ZQogrf4ucLOiF2AU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/137bbed0-a12b-417b-a973-567f41a320d1/0/6F8A258586E22F8D1942882B7F8B9C2CE885D805.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:2e:f6:9f:82:48:94:66:66:9c:39:13:ca:a3:cb:f6:4b:
af:47:16:c6:99:95:34:6b:74:93:86:a7:a1:03:f7:5c:06:a7:
a6:bc:66:dd:e6:9c:f8:3f:47:14:fb:e3:fe:49:a6:d6:ce:a1:
92:70:37:97:aa:fb:4c:b8:da:6f:7f:b3:a8:0d:3c:dc:eb:11:
48:e9:e8:88:20:48:50:39:19:51:72:04:fd:ae:1c:b8:ae:f9:
fc:30:1f:6c:1a:43:1a:3b:90:8e:71:f7:e8:39:78:c7:44:6d:
75:18:2c:62:5d:3b:51:b8:2b:2e:21:18:1d:dc:47:3a:41:6e:
ed:e2:d0:fd:36:08:5b:7b:b3:0b:eb:e4:ab:7b:8d:dc:0b:8d:
5f:c3:ba:42:a6:dc:8e:18:42:58:92:4a:db:58:3d:c0:66:2e:
a5:b9:a6:43:16:aa:62:6a:bb:5e:fd:15:ad:23:cd:9e:88:10:
24:cd:ee:e4:6a:d9:11:3c:fe:57:ef:7f:ad:00:f5:93:2e:73:
b7:43:d8:e8:55:77:e5:29:15:7b:b9:e6:51:76:95:8d:ce:f8:
35:1c:c1:c9:77:13:7d:8f:b0:e8:17:28:14:c4:e0:62:c2:69:
44:8f:a6:89:02:7f:ad:28:6c:b4:d3:fc:dd:63:b3:3f:a0:ad:
fc:43:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:34 2025 by rpki-client