Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/4CD63891424A1F25694EBAF4DEF099980E7B45F8.mft
File: 4CD63891424A1F25694EBAF4DEF099980E7B45F8.mft (raw, json)
Hash identifier: amB8l+X1/Pjif3fzzMVTr2UE9Ww2DcltRZplkQWQVYc=
Subject key identifier: 1C:B8:5D:0E:9B:60:FD:EE:5E:93:C0:60:E1:27:93:90:3D:C0:46:D4
Authority key identifier: 4C:D6:38:91:42:4A:1F:25:69:4E:BA:F4:DE:F0:99:98:0E:7B:45:F8
Certificate issuer: /CN=4cd63891424a1f25694ebaf4def099980e7b45f8
Certificate serial: 0FDBA327033809C6458E7278193D1581582092F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNY4kUJKHyVpTrr03vCZmA57Rfg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/4CD63891424A1F25694EBAF4DEF099980E7B45F8.mft
Manifest number: 01
Signing time: Sat 02 Dec 2023 16:47:06 +0000
Manifest this update: Sat 02 Dec 2023 16:42:06 +0000
Manifest next update: Sun 03 Dec 2023 18:11:06 +0000
Files and hashes: 1: 4CD63891424A1F25694EBAF4DEF099980E7B45F8.crl (hash: 00Olixavm8dAbSQIsxZb+LlKW3yQQi/wCOirVCqehN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:db:a3:27:03:38:09:c6:45:8e:72:78:19:3d:15:81:58:20:92:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd63891424a1f25694ebaf4def099980e7b45f8
Validity
Not Before: Dec 2 16:42:06 2023 GMT
Not After : Dec 3 18:11:06 2023 GMT
Subject: CN=1CB85D0E9B60FDEE5E93C060E12793903DC046D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:5f:e9:20:d4:f4:29:26:d9:33:c4:1c:08:
0e:2e:ef:a1:6f:ab:64:b4:c8:11:5e:52:71:de:2a:
ab:4f:29:ae:29:a4:ab:60:9b:ff:e1:51:bc:64:4a:
39:b7:44:58:47:ef:df:e0:24:a3:57:8a:5b:0e:d7:
d5:3a:94:1e:e9:05:00:df:0e:3f:76:bc:a8:69:aa:
7d:27:b5:72:65:56:89:d3:b6:2e:d4:52:63:46:41:
fa:4d:e7:b3:28:12:2e:dc:a6:27:62:8d:c8:de:27:
8c:7b:4e:3d:7e:16:9f:07:22:3c:1e:2c:ef:0c:1b:
22:96:1b:1d:ec:aa:07:c1:61:17:d9:38:4f:fe:9c:
17:78:12:d3:72:4f:ad:d4:15:41:ba:42:2c:cd:75:
b3:f6:43:47:e0:84:49:7f:81:0d:d3:df:7a:ab:16:
b0:78:db:99:c6:ba:d1:91:42:51:92:88:ca:ec:a4:
27:a0:61:3c:04:8c:ee:e0:df:8b:76:78:5c:48:fc:
7a:ab:2b:b6:e4:be:d6:ab:47:ab:db:f6:7c:46:8a:
cf:50:4f:a3:45:71:d0:9e:dd:6e:79:80:59:a3:ed:
cd:96:a9:cc:a1:1d:3e:a5:10:67:32:b2:df:ce:cb:
1b:d4:0b:5b:a8:d3:2e:9e:01:15:f3:dd:c1:a4:74:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:5D:0E:9B:60:FD:EE:5E:93:C0:60:E1:27:93:90:3D:C0:46:D4
X509v3 Authority Key Identifier:
keyid:4C:D6:38:91:42:4A:1F:25:69:4E:BA:F4:DE:F0:99:98:0E:7B:45:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/4CD63891424A1F25694EBAF4DEF099980E7B45F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNY4kUJKHyVpTrr03vCZmA57Rfg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/4CD63891424A1F25694EBAF4DEF099980E7B45F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f7:81:cc:3d:19:a1:a1:0e:d9:9a:c9:b3:fc:a4:bf:1d:a8:
bb:2d:75:5d:5a:00:f8:05:44:1d:8b:dd:9f:26:af:9c:0d:9a:
5b:1c:ab:54:0a:72:63:50:95:d2:74:46:1a:3a:e7:82:8b:b7:
82:08:3d:1a:09:44:37:18:3b:f8:85:a4:00:e6:e4:02:3e:98:
dc:86:ce:91:f4:9b:a4:7e:03:08:eb:c5:a7:57:34:15:87:bc:
2d:ac:3b:8f:57:5b:27:00:b4:fc:8d:e7:4c:9d:4b:38:fa:bf:
27:5c:00:1e:88:bc:58:8f:f5:58:4a:24:85:9d:93:76:7c:29:
1a:92:84:b4:6b:42:02:04:d4:b2:fe:c2:e1:6f:59:46:26:8d:
6d:76:23:0f:77:13:41:c3:92:5a:53:38:f4:bf:e0:f1:c1:48:
60:7c:d7:bb:05:b7:e5:ab:f3:ba:a9:39:c9:55:d3:03:26:60:
2f:0b:bf:e9:fa:f3:03:cf:b3:90:a7:26:f9:16:5d:2b:c4:d3:
b3:4f:ab:a5:a9:d6:0f:5c:7f:72:2c:99:b2:01:eb:48:f2:2b:
9b:96:5b:09:12:9c:85:3f:a2:fb:8c:c2:5c:af:77:a7:35:f4:
9b:70:a8:44:ff:65:ae:0c:dd:ed:dc:7d:0b:d4:ae:00:34:37:
44:69:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:41 2025 by rpki-client