Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.mft
File: A762083DD83BF60996D5F11D4DF4EEE568746B14.mft (raw, json)
Hash identifier: ipVudwSCzemq6crfJlV5dLU7TFwTRjPfHY0uNeTJcjw=
Subject key identifier: F2:CD:B6:14:5B:87:71:52:F9:80:56:FD:51:52:39:4E:B0:49:55:E6
Authority key identifier: A7:62:08:3D:D8:3B:F6:09:96:D5:F1:1D:4D:F4:EE:E5:68:74:6B:14
Certificate issuer: /CN=a762083dd83bf60996d5f11d4df4eee568746b14
Certificate serial: 524DBEAE10C5C666FED84520030469DF23851580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2IIPdg79gmW1fEdTfTu5Wh0axQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.mft
Manifest number: 02
Signing time: Tue 23 Jul 2024 19:49:44 +0000
Manifest this update: Tue 23 Jul 2024 19:44:44 +0000
Manifest next update: Wed 24 Jul 2024 21:43:44 +0000
Files and hashes: 1: A762083DD83BF60996D5F11D4DF4EEE568746B14.crl (hash: HTQvAIt3wnUgppmJ+kDUuQuEc8xb5Od1wL9SJPRBpsQ=)
2: AS213086.asa (hash: yqKfcFk2vU6zPrb8S6VKTzxrrn1oFKDf29x3fA5bQ1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:4d:be:ae:10:c5:c6:66:fe:d8:45:20:03:04:69:df:23:85:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a762083dd83bf60996d5f11d4df4eee568746b14
Validity
Not Before: Jul 23 19:44:44 2024 GMT
Not After : Jul 24 21:43:44 2024 GMT
Subject: CN=F2CDB6145B877152F98056FD5152394EB04955E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:37:8b:b8:cf:46:ff:5d:2f:3d:08:cc:1d:
f9:1f:f8:a5:0c:d8:8e:ec:8a:55:f9:70:bd:92:f3:
cc:af:47:a0:2c:34:30:6a:fe:dd:32:b0:1f:1a:d2:
c8:c1:dd:2a:ae:4c:8b:6c:dd:67:53:39:f1:08:93:
ed:33:36:77:cd:4b:b0:9e:51:ac:e6:df:54:90:00:
e1:48:00:84:62:0f:cd:24:68:c9:22:b2:0e:61:e8:
00:2d:12:36:d3:f4:5c:a9:f0:65:d2:fa:a1:4d:69:
21:4b:46:57:d0:fd:01:90:7c:63:47:04:9e:7b:16:
79:fb:6a:be:fc:d8:59:7c:a5:a9:ab:2c:35:20:e3:
9b:34:6b:11:1d:e1:75:f2:b3:59:53:38:72:53:34:
87:06:3d:90:8a:37:08:6c:1f:34:c8:1f:8d:fa:3d:
a5:92:35:b2:1b:e0:aa:19:09:af:b7:fc:50:4a:c7:
34:17:ed:70:dd:99:40:de:15:16:47:e3:34:a6:2d:
51:e2:cf:73:19:54:99:00:f7:09:ac:6d:2e:45:64:
de:05:58:ce:12:9b:5f:61:aa:75:a5:96:cf:f5:30:
20:0c:bd:18:51:38:e6:65:5d:a1:40:76:e1:2a:76:
4a:04:ea:b1:05:f5:5f:c3:fa:67:46:3e:d5:bf:52:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:B6:14:5B:87:71:52:F9:80:56:FD:51:52:39:4E:B0:49:55:E6
X509v3 Authority Key Identifier:
keyid:A7:62:08:3D:D8:3B:F6:09:96:D5:F1:1D:4D:F4:EE:E5:68:74:6B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2IIPdg79gmW1fEdTfTu5Wh0axQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:b8:a6:2b:03:e8:23:a0:04:b3:20:a5:e3:0e:df:7e:32:
3d:91:49:a6:89:8e:4a:1a:40:74:7b:f7:f8:55:80:d2:e1:06:
08:a5:f7:0e:a1:db:ab:09:0f:79:09:8e:27:a9:00:6f:aa:7c:
e7:de:3d:11:76:a8:a2:d3:3e:f4:c9:fa:97:3f:08:bd:3c:e5:
ab:cf:bd:4a:94:c2:c0:4c:5c:5a:27:4f:8e:50:77:58:95:50:
06:09:49:3d:14:ee:7c:5f:f0:17:d9:e0:c2:f3:86:70:45:11:
a7:f2:71:66:94:2d:65:fd:27:ed:ac:ae:e9:94:93:a9:4d:bd:
2a:f2:01:67:5c:33:85:f0:73:31:2a:bd:01:32:1a:eb:ac:da:
e1:53:dd:f5:12:c1:e7:0b:64:7a:50:51:b5:76:1d:6b:32:8c:
0d:b0:54:0c:49:20:54:46:83:1a:3a:e5:49:5c:23:6e:6f:7a:
04:0d:c1:e8:89:3e:5a:ca:5b:53:72:80:49:59:f3:dc:d0:f8:
7f:9a:e7:02:50:25:90:94:65:04:05:2f:f3:60:62:fa:d1:6a:
ec:e2:c9:45:35:e2:48:3a:f9:19:69:ab:2b:f5:50:9b:63:cc:
a6:25:ba:c1:3b:9b:cc:05:98:43:20:38:33:d2:09:e2:b2:64:
d0:57:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:04 2025 by rpki-client