Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: fWJb35fn40W0wkzDycoUfZjX6jw3UaTRSK+vHs9YX7E=
Subject key identifier: F0:50:29:04:72:B0:09:30:1C:50:D5:74:CE:1E:B9:76:77:C9:D8:7E
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 541DE5B00B351320FA7C51DF51D2CB5BFF4F6C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 018A
Signing time: Fri 28 Mar 2025 18:01:43 +0000
Manifest this update: Fri 28 Mar 2025 17:56:43 +0000
Manifest next update: Sat 29 Mar 2025 21:23:43 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: oDdKc4XGpmYyS5Cjz86xgKw3j0p/o3Z2AnaBkr8dEVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1d:e5:b0:0b:35:13:20:fa:7c:51:df:51:d2:cb:5b:ff:4f:6c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: Mar 28 17:56:43 2025 GMT
Not After : Mar 29 21:23:43 2025 GMT
Subject: CN=F050290472B009301C50D574CE1EB97677C9D87E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:3c:3a:52:3d:fd:6b:be:d3:0f:45:e1:8b:
13:4f:46:7f:3e:1e:5f:96:fc:f6:87:02:8d:84:bc:
d4:49:13:ae:f9:fc:27:f4:68:21:64:e9:d8:53:e3:
b0:2c:60:6c:c8:36:3c:94:a8:da:4c:c3:bf:fd:6c:
16:ee:0e:58:24:6c:4f:a3:67:15:f5:a3:81:b8:b4:
fc:dd:5e:c7:95:52:36:6f:eb:d7:94:6f:0b:37:df:
07:6c:5b:4a:61:2f:62:3a:c3:9a:f4:06:25:ed:23:
5a:2a:67:e9:ca:03:40:30:e0:61:5b:18:90:8b:52:
c9:d5:42:70:5c:23:1e:20:0b:71:2b:b5:09:3d:d0:
98:b7:73:d0:5f:7e:1d:05:3a:76:e2:61:8d:13:58:
c5:6f:e9:b7:9f:5c:11:5f:1c:78:54:82:22:52:e6:
9d:8e:4f:3d:bc:dc:ed:f7:9e:ae:a7:92:86:d4:51:
63:f2:72:6c:e3:2b:62:79:2f:67:5b:91:53:45:c8:
c0:a6:02:03:50:d5:00:20:19:43:3a:1b:41:32:c0:
4c:7c:70:45:40:d3:82:14:b8:c0:e3:ab:91:fa:ca:
c1:83:27:35:f0:96:64:7f:4a:75:a5:22:44:ce:6f:
c3:6d:05:53:98:60:25:72:16:1e:69:0d:ec:01:e9:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:29:04:72:B0:09:30:1C:50:D5:74:CE:1E:B9:76:77:C9:D8:7E
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:98:2c:e0:65:80:a3:8b:52:c5:51:62:41:bd:04:8b:ed:0c:
3e:29:58:5b:3a:74:e7:2e:4f:66:7f:4a:37:4b:2c:ee:3e:93:
3e:71:db:c4:12:b3:25:d3:37:32:79:2f:c9:69:6a:94:09:82:
f7:25:b3:67:49:8e:30:e1:94:f9:51:5d:f2:8b:0a:31:7c:04:
d9:cb:6e:98:33:e9:e3:12:cf:d5:2c:3a:92:15:a9:a0:3b:9f:
45:2b:5f:fa:07:7f:e9:c0:83:59:e9:6c:15:4c:00:a6:4c:02:
d6:93:0d:e4:2d:87:d3:43:f3:9a:e9:6f:34:1f:d1:eb:43:a4:
b8:ce:04:e3:8b:e1:5d:b9:9f:3d:3c:aa:a4:ba:a4:73:77:b3:
b5:d0:64:79:8d:b2:ff:47:ae:4f:27:3b:c8:a0:06:f7:ce:1e:
db:e6:e0:a2:79:81:c4:13:4a:82:be:6b:a9:45:a3:57:6e:69:
54:37:fc:95:e1:e1:5e:84:8b:37:72:45:48:42:4c:d6:25:4b:
53:e7:44:cd:e3:43:32:04:57:79:fd:52:f7:86:5f:26:c8:08:
3f:cc:70:d5:ed:6a:fb:f6:6a:da:21:ae:5f:9f:c8:5e:de:0c:
96:11:7c:f7:33:71:a9:44:64:25:74:d9:80:89:05:17:23:b4:
0d:0b:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:13 2025 by rpki-client