Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft
File: E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft (raw, json)
Hash identifier: wSf6M7n1GQPFdKLdOP85wUrPAdXbQO/Sxot92LnAm5A=
Subject key identifier: AA:C5:57:AA:A5:7D:17:DA:35:41:4D:D4:59:1C:90:0F:9C:A1:9E:DD
Authority key identifier: E0:13:A3:78:E0:B0:4B:53:88:9F:C4:F7:BC:F4:2A:3B:7B:0A:62:1E
Certificate issuer: /CN=e013a378e0b04b53889fc4f7bcf42a3b7b0a621e
Certificate serial: 760893F5F8BD13C4A38C37404A7BB50EB4ECE2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BOjeOCwS1OIn8T3vPQqO3sKYh4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft
Manifest number: 0240
Signing time: Sat 29 Mar 2025 00:02:02 +0000
Manifest this update: Fri 28 Mar 2025 23:57:02 +0000
Manifest next update: Sun 30 Mar 2025 01:09:02 +0000
Files and hashes: 1: E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.crl (hash: tifrD7abVJNC899qrxEIhcj5s+oKFaXHsyNSJsNX3QU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:08:93:f5:f8:bd:13:c4:a3:8c:37:40:4a:7b:b5:0e:b4:ec:e2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e013a378e0b04b53889fc4f7bcf42a3b7b0a621e
Validity
Not Before: Mar 28 23:57:02 2025 GMT
Not After : Mar 30 01:09:02 2025 GMT
Subject: CN=AAC557AAA57D17DA35414DD4591C900F9CA19EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:a8:9c:63:d1:00:77:08:52:bc:5c:05:4d:
d2:7c:1a:62:45:e1:52:30:e3:30:64:aa:0f:97:97:
61:c6:85:23:4c:c7:48:67:bf:a2:1d:b6:e3:80:c7:
63:f4:c5:7b:ad:d0:fd:a3:a2:ff:bb:a5:d6:77:ec:
48:de:d7:2a:32:1d:cb:dd:42:db:17:1d:44:fe:75:
cf:a7:b7:47:6a:02:7f:df:8f:53:75:5d:ce:68:dc:
6c:12:18:d5:25:75:18:d9:02:88:00:f4:73:b8:07:
e6:ad:80:a8:12:33:c6:2f:0a:4d:9b:55:ab:be:82:
c6:4d:94:60:50:3f:fd:89:ba:b7:4d:e4:31:85:0a:
04:31:fd:2e:ac:65:54:cd:41:7e:bb:26:f7:66:b3:
00:f3:96:90:94:df:08:93:a9:16:3e:87:c8:d5:18:
43:7a:b1:78:e2:73:ef:b5:63:01:b0:f0:69:12:10:
84:e6:e6:0d:78:2b:21:06:d8:31:f7:15:84:b2:a0:
68:45:04:a6:ea:6a:ea:71:10:a7:ce:a6:e3:7d:07:
62:df:9c:52:09:86:35:db:84:63:39:c1:1f:7c:77:
f0:89:00:96:ad:eb:e9:8b:4f:7b:7f:38:12:15:df:
fb:fa:b8:9f:7e:03:51:6f:41:db:9b:07:ee:9f:c5:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C5:57:AA:A5:7D:17:DA:35:41:4D:D4:59:1C:90:0F:9C:A1:9E:DD
X509v3 Authority Key Identifier:
keyid:E0:13:A3:78:E0:B0:4B:53:88:9F:C4:F7:BC:F4:2A:3B:7B:0A:62:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BOjeOCwS1OIn8T3vPQqO3sKYh4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f2:73:1d:f8:fc:0e:fa:c6:31:25:61:33:b9:05:ec:c4:c6:
f9:c3:bf:57:c1:68:c1:51:3b:d4:49:7e:bc:b8:c6:72:c1:34:
9b:6d:17:c4:09:24:0e:bb:e8:80:71:72:96:67:c4:d3:2c:fe:
97:1c:bc:a9:23:1a:41:7c:0a:e4:48:3d:da:1f:db:3d:94:3d:
26:92:d4:26:b9:77:32:de:e6:ab:6e:93:87:7b:12:1d:d0:ad:
78:ea:42:cd:2f:07:f1:35:f8:65:cf:de:66:7d:b5:97:4a:45:
67:14:55:e1:58:e9:18:7d:ec:66:45:01:b7:d4:ab:05:fd:04:
a4:bc:7a:5c:91:40:67:de:27:bc:6a:99:5d:46:66:20:10:21:
6c:c3:36:ee:e3:c1:ae:49:88:4a:b7:fb:b0:ae:23:ed:b2:ef:
f0:9c:49:94:b3:d7:21:2a:b0:c4:b6:b5:21:7b:a9:39:2d:8d:
5b:4a:68:50:c7:18:44:40:de:7b:c3:d4:83:a3:2c:7e:c9:88:
4b:9f:01:b9:1d:8b:6d:e3:55:2a:45:60:3b:d2:76:cc:87:ae:
40:77:6b:4e:f2:02:66:cb:ca:79:68:53:83:47:ea:db:f9:7c:
a0:cd:e3:fb:51:e2:5c:74:52:78:ee:68:97:6b:28:8e:09:72:
5f:f2:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:17:57 2025 by rpki-client