Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/28D6CAF2DA71B8713C0492D20D509B2A01951BD5.mft
File: 28D6CAF2DA71B8713C0492D20D509B2A01951BD5.mft (raw, json)
Hash identifier: DQmiloZTzTo6Lh0975qoNCfW8p0JKaHoQgRapiFf2Ec=
Subject key identifier: E7:5B:51:95:72:01:14:68:A0:96:EA:05:21:9B:CE:FF:64:F4:B9:1D
Authority key identifier: 28:D6:CA:F2:DA:71:B8:71:3C:04:92:D2:0D:50:9B:2A:01:95:1B:D5
Certificate issuer: /CN=28d6caf2da71b8713c0492d20d509b2a01951bd5
Certificate serial: 1D4C8F60E6A57BCCDEC1ADA218E3F0DD7669A8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNbK8tpxuHE8BJLSDVCbKgGVG9U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/28D6CAF2DA71B8713C0492D20D509B2A01951BD5.mft
Manifest number: 0C
Signing time: Sat 09 Dec 2023 08:48:24 +0000
Manifest this update: Sat 09 Dec 2023 08:43:24 +0000
Manifest next update: Sun 10 Dec 2023 10:41:24 +0000
Files and hashes: 1: 28D6CAF2DA71B8713C0492D20D509B2A01951BD5.crl (hash: r4qc5nBqnowv02/4qnu1q+W4kCnODpBp7Nf8rDXjuJI=)
2: AS215978.asa (hash: CYd4a81JLSxXz6OPbLFE+88rGm3QVj9kNbQJhKZOu8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:4c:8f:60:e6:a5:7b:cc:de:c1:ad:a2:18:e3:f0:dd:76:69:a8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d6caf2da71b8713c0492d20d509b2a01951bd5
Validity
Not Before: Dec 9 08:43:24 2023 GMT
Not After : Dec 10 10:41:24 2023 GMT
Subject: CN=E75B519572011468A096EA05219BCEFF64F4B91D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:87:fc:2c:57:32:9a:3e:e2:a0:ce:c1:54:
51:0f:14:30:46:9b:99:1e:c8:32:82:2c:15:74:cd:
91:40:bc:5a:0f:eb:17:a2:a8:b2:00:d7:66:6e:00:
62:80:29:3e:a7:1b:96:ff:49:f7:5f:80:c2:25:13:
5a:52:f7:05:16:d6:ec:08:4d:59:f1:64:d2:d6:51:
74:d2:1d:6e:82:bd:52:6b:4e:e2:36:55:4b:38:70:
b0:43:00:92:bf:f2:6a:3b:6f:44:eb:45:7b:63:d4:
62:cb:d2:b7:76:28:32:a2:f7:c1:2f:2f:11:e1:07:
b9:78:66:df:3e:92:cd:de:a9:fd:76:06:44:bd:a4:
6f:97:4d:46:7c:e3:2b:fa:db:65:41:ae:91:92:13:
25:7d:73:23:2e:78:fe:3e:00:0d:aa:7d:aa:bc:37:
6b:53:af:e1:8d:b6:85:92:3b:da:03:6a:71:01:23:
02:7a:93:18:39:14:11:14:f0:e1:0a:98:2a:15:53:
17:37:5c:72:53:51:ce:b0:1b:a6:46:c0:31:90:b5:
7f:58:89:f4:b7:71:a0:a8:3c:eb:4e:ff:9f:c4:ea:
23:9a:11:9e:2f:54:df:19:a7:b8:a8:b2:27:89:3c:
19:2f:bb:11:34:72:41:28:03:2f:21:11:53:da:50:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:51:95:72:01:14:68:A0:96:EA:05:21:9B:CE:FF:64:F4:B9:1D
X509v3 Authority Key Identifier:
keyid:28:D6:CA:F2:DA:71:B8:71:3C:04:92:D2:0D:50:9B:2A:01:95:1B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/28D6CAF2DA71B8713C0492D20D509B2A01951BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNbK8tpxuHE8BJLSDVCbKgGVG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f4476c6-c58e-4001-9a1e-aff6ea6f37a0/0/28D6CAF2DA71B8713C0492D20D509B2A01951BD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:7f:2d:cf:b4:34:e1:d2:d1:68:ae:82:1b:a8:5f:95:ba:
51:d4:e7:f6:74:d6:c3:ac:a4:35:5b:4d:59:7a:33:38:7a:b6:
f5:55:cb:c4:5b:91:cd:c1:ab:b5:d6:52:8c:a5:0b:de:cc:b8:
1a:40:62:56:ec:4a:90:8e:02:c6:c1:ed:12:00:18:e2:9b:57:
3f:6f:4e:d8:db:4d:85:9d:30:5a:7c:55:6a:02:ad:b2:16:d9:
69:69:9c:c6:a0:d3:03:6a:e6:b1:b4:23:b7:24:ae:dd:bb:45:
c9:77:b9:e5:05:ba:2d:50:00:e3:29:32:b4:a4:7b:02:c8:56:
2e:ed:4c:a3:1e:79:2d:7f:dc:d5:a2:ed:ae:4d:db:9e:33:d6:
7e:55:e0:50:8b:21:9b:2e:bf:a9:d2:c0:64:17:89:18:09:f4:
0d:19:50:93:e1:3e:d5:18:ff:58:25:4d:7d:50:b3:75:29:ac:
6a:d8:b9:c1:60:e6:19:32:fc:d7:13:03:8a:ee:c9:d4:f8:39:
4b:5f:bc:51:a5:25:4d:a3:5b:01:03:90:0e:e8:4d:b5:40:35:
35:18:33:b5:f0:af:a5:3f:91:00:f8:8c:e0:7f:d7:fc:4b:82:
2e:ae:51:b4:ca:39:a8:42:66:d7:ea:ad:45:56:5b:b2:b6:4c:
b0:e4:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org