Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft
File: BD36051F9A727996CE309FAF4E5757E504EB2C46.mft (raw, json)
Hash identifier: IQzHiLecOwXLOveM5g1l9SAJIuN3SDicerOwo6yGSZE=
Subject key identifier: D3:20:C9:9B:EC:57:41:C6:A1:5A:56:C6:B1:B6:71:1E:1E:14:3A:6D
Authority key identifier: BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46
Certificate issuer: /CN=BD36051F9A727996CE309FAF4E5757E504EB2C46
Certificate serial: 4FF264F4F506F3306CCB5B677F2505C658EEC88D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft
Manifest number: 3F
Signing time: Mon 02 Dec 2024 15:30:42 +0000
Manifest this update: Mon 02 Dec 2024 15:25:42 +0000
Manifest next update: Tue 03 Dec 2024 19:05:42 +0000
Files and hashes: 1: BD36051F9A727996CE309FAF4E5757E504EB2C46.crl (hash: 8srRcp01xDmXCV3C3PNwWoQzX3vm5SVXveDZSx/xE+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f2:64:f4:f5:06:f3:30:6c:cb:5b:67:7f:25:05:c6:58:ee:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD36051F9A727996CE309FAF4E5757E504EB2C46
Validity
Not Before: Dec 2 15:25:42 2024 GMT
Not After : Dec 3 19:05:42 2024 GMT
Subject: CN=D320C99BEC5741C6A15A56C6B1B6711E1E143A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:8b:cd:9d:86:ac:7b:f7:48:3c:60:fd:fd:
f6:3d:78:1e:16:14:13:03:6b:ad:67:35:21:77:1a:
7e:b8:1f:5c:8a:ce:3e:a9:f1:c8:b8:e9:7a:2a:c1:
47:59:00:b0:ef:a8:9e:70:ff:78:b1:a6:9b:3a:e5:
77:fd:92:2b:96:54:64:47:ba:8a:63:f0:3c:d8:cc:
bf:18:fb:ce:f9:72:42:5e:28:63:f6:99:2b:ee:c3:
af:28:f5:44:a6:b4:da:b5:18:6b:13:f1:9e:f4:65:
42:11:9b:cc:f5:bf:d7:cd:62:9c:58:16:f1:7b:a9:
f4:8a:fd:6d:5d:b0:a8:b7:26:9a:c2:74:a2:18:68:
ad:f9:94:de:55:95:7a:2d:13:90:36:39:a7:31:b6:
99:69:74:2c:ab:1b:21:eb:02:6f:c4:73:3b:53:e3:
c2:83:60:95:53:15:a2:97:78:7c:c9:b4:0a:24:96:
f6:59:36:7f:0d:a1:ac:d6:76:ad:e2:52:12:e6:00:
c2:b8:0a:02:e4:a1:2c:4c:2c:f5:41:6e:c0:34:f3:
11:b5:44:09:c1:ca:3e:0a:1a:1c:40:e6:3b:b2:c8:
b8:e0:0c:38:53:5d:b0:45:45:08:2d:7c:d7:b6:b1:
bb:c4:3c:93:91:72:20:76:a0:e0:dc:c7:c9:ec:83:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:20:C9:9B:EC:57:41:C6:A1:5A:56:C6:B1:B6:71:1E:1E:14:3A:6D
X509v3 Authority Key Identifier:
keyid:BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:90:2c:46:8d:b7:f7:42:73:04:44:78:c8:79:52:32:2a:94:
58:a2:51:fb:90:ce:d2:6f:cd:27:e1:37:4c:39:1a:e2:44:2a:
47:d6:3c:8c:9d:b0:40:bc:d0:23:af:fe:1b:8f:f3:0d:7f:c4:
e9:a8:2f:7c:cb:8d:59:71:9f:43:5b:8d:6b:03:80:30:49:57:
ba:6c:4b:fd:ed:4a:d6:75:97:b0:b1:be:c5:64:ef:1a:8d:03:
2d:ee:d0:dd:e2:a6:d1:ca:34:fc:c2:44:81:03:a0:aa:3f:e2:
70:b2:c1:58:05:1a:69:eb:16:c7:27:38:69:ef:a2:8d:4e:01:
0a:57:0e:a5:60:d8:af:7b:7a:a5:30:e1:75:39:fe:46:f5:4e:
55:61:7a:74:40:07:b5:1b:0c:6d:3c:4e:ed:2b:2d:0a:9f:5f:
7f:ac:9f:e9:c0:cd:90:2c:12:0c:68:78:90:9e:a4:59:df:06:
c8:20:64:fc:49:8e:0d:a4:bf:72:f8:bd:c1:e6:d6:4b:cf:4b:
e6:cf:cf:54:c0:f3:4e:a5:7b:2d:dd:9a:3b:a4:b4:0e:f8:59:
5d:72:97:ec:ce:14:bb:1b:c6:8a:34:dc:97:50:4c:cb:84:02:
e1:4d:58:cf:39:27:26:7d:15:75:f6:55:95:3f:27:7d:ad:aa:
f5:43:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:25 2025 by rpki-client