Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/12/3C1D70DFEFFFC23445803891F440158D3E31B6CB.mft
File: 3C1D70DFEFFFC23445803891F440158D3E31B6CB.mft (raw, json)
Hash identifier: Bs4gCm+QH4IGAFmavym7+5e1xQ1TsvYwUc9llCFxzjM=
Subject key identifier: 5D:9B:C5:18:97:F9:07:D7:BE:C0:8C:14:E4:80:DD:2A:71:4B:0E:2F
Authority key identifier: 3C:1D:70:DF:EF:FF:C2:34:45:80:38:91:F4:40:15:8D:3E:31:B6:CB
Certificate issuer: /CN=3c1d70dfefffc23445803891f440158d3e31b6cb
Certificate serial: 4F5BE3B811062A58D38119BEFF578BDC55248843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB1w3-__wjRFgDiR9EAVjT4xtss.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/12/3C1D70DFEFFFC23445803891F440158D3E31B6CB.mft
Manifest number: 011E
Signing time: Sun 31 Dec 2023 17:31:12 +0000
Manifest this update: Sun 31 Dec 2023 17:26:12 +0000
Manifest next update: Mon 01 Jan 2024 21:25:12 +0000
Files and hashes: 1: 3C1D70DFEFFFC23445803891F440158D3E31B6CB.crl (hash: 1mFs+6PV0Jglh4XPeCrAIoEpth2TCHRIWS2bkFWPt7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5b:e3:b8:11:06:2a:58:d3:81:19:be:ff:57:8b:dc:55:24:88:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1d70dfefffc23445803891f440158d3e31b6cb
Validity
Not Before: Dec 31 17:26:12 2023 GMT
Not After : Jan 1 21:25:12 2024 GMT
Subject: CN=5D9BC51897F907D7BEC08C14E480DD2A714B0E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:d7:72:60:95:b0:14:c4:b4:eb:2c:9f:a8:
24:7e:cf:49:4d:7a:e8:df:a9:e9:46:1d:8f:67:10:
14:03:f5:32:bd:4f:ea:a0:c9:62:1a:a0:ca:0a:b5:
c9:26:74:f1:0e:fd:cb:28:77:45:b0:c0:b6:47:d4:
b5:9d:7f:ba:98:56:17:de:1a:a0:d3:7f:3d:89:ef:
93:d1:e9:65:44:9c:27:e2:38:64:8d:49:88:45:13:
a1:28:4e:cd:5d:79:ae:90:20:dc:3e:62:d6:a5:cb:
75:ae:b9:be:93:d4:60:71:07:cf:1b:11:68:f4:3a:
d6:f1:b9:cd:65:d6:54:3e:94:db:d4:b0:c5:30:f1:
50:60:26:5e:38:82:19:04:8b:99:23:7a:3a:a8:fc:
99:14:5d:e0:52:ac:24:6e:d2:7f:60:bf:7d:49:22:
dc:94:55:b4:8f:35:cc:dc:5c:f5:2d:02:82:78:ad:
8a:80:46:05:13:a8:fe:74:8d:27:4d:d6:5d:c3:dd:
0d:c9:9a:ca:40:ab:9a:31:26:58:fa:04:74:2c:40:
d4:e5:6c:fa:c8:9e:ee:ca:3c:32:27:f2:ad:20:84:
d9:fb:dd:dc:c8:b5:04:0a:d0:6c:d7:86:d4:d6:3a:
19:92:5a:d3:ae:f0:d4:9b:65:1e:a9:1b:6d:ac:c9:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:C5:18:97:F9:07:D7:BE:C0:8C:14:E4:80:DD:2A:71:4B:0E:2F
X509v3 Authority Key Identifier:
keyid:3C:1D:70:DF:EF:FF:C2:34:45:80:38:91:F4:40:15:8D:3E:31:B6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/12/3C1D70DFEFFFC23445803891F440158D3E31B6CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB1w3-__wjRFgDiR9EAVjT4xtss.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/12/3C1D70DFEFFFC23445803891F440158D3E31B6CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cf:f6:56:b4:56:6d:a4:df:25:c3:a1:57:ac:17:33:07:11:
92:ff:4d:2d:88:11:a4:ca:0f:1a:bc:c2:d8:c4:90:fb:d4:e6:
db:55:94:13:c5:aa:2b:0d:43:d2:19:5d:9e:6e:d7:43:60:c5:
97:36:bf:c9:7a:df:3e:fa:3b:f7:c8:02:53:c0:ac:db:22:7f:
63:7d:53:70:ee:cd:88:28:12:7e:a7:57:94:8f:71:89:32:f5:
26:29:17:24:55:5c:2d:85:90:ce:31:99:64:3e:ce:30:1d:a7:
59:2c:b3:af:7d:e9:61:ec:82:95:b9:37:32:09:b0:ad:55:5b:
22:bb:4e:1b:04:f3:ba:36:cb:b3:e8:95:e8:67:4a:04:c8:8f:
f3:cb:9b:b0:b4:a0:d7:38:c7:34:ca:f4:23:e4:e3:4b:d5:7b:
2a:0b:69:ba:71:7d:e0:f6:b8:9f:90:4f:da:25:57:f2:84:23:
6b:87:fc:3b:18:76:c7:27:50:19:8b:28:6e:f8:4c:11:2d:8b:
b6:b8:4d:de:95:04:1d:2a:74:55:ab:bb:69:d3:37:13:1d:9c:
db:5b:ac:7f:c6:96:3b:86:06:e1:12:21:71:1b:6a:d5:c1:10:
2c:eb:eb:c4:93:ae:e1:be:b5:ed:c9:a7:fa:a7:8e:85:84:de:
17:cc:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:56:43 2025 by rpki-client