Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: oE0VSblWxz0TJd7WB3ggefbZXO52wCyz2hPeV1aW7D8=
Subject key identifier: 88:17:41:BC:C4:05:58:4D:CA:EB:BF:B0:34:F8:1D:82:1D:9B:04:B8
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 0FF6A2CA0DCA143E93C817A43AFD7B3F434AE50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: D2
Signing time: Sat 29 Mar 2025 00:46:33 +0000
Manifest this update: Sat 29 Mar 2025 00:41:33 +0000
Manifest next update: Sun 30 Mar 2025 02:37:33 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: f3EiqriLI/L1R1mqjmztj46GkI3bGfXkx+hxA17RGSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f6:a2:ca:0d:ca:14:3e:93:c8:17:a4:3a:fd:7b:3f:43:4a:e5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Mar 29 00:41:33 2025 GMT
Not After : Mar 30 02:37:33 2025 GMT
Subject: CN=881741BCC405584DCAEBBFB034F81D821D9B04B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:03:0b:96:fe:80:8d:ea:bb:15:7c:70:2e:
5a:bf:c2:60:fe:a0:68:9f:f1:43:07:47:50:c1:9c:
e7:d7:4f:20:94:92:65:00:5d:9e:c0:61:90:07:69:
9e:43:40:a4:4c:d0:2e:24:d9:14:99:a0:d5:c5:07:
6b:2f:35:a4:5d:9f:6a:bf:01:d3:d0:31:9b:36:12:
2f:3f:0f:37:9d:41:13:68:f0:b7:64:d4:3b:b3:4a:
95:e0:18:bf:75:ac:87:27:2c:cd:a9:d3:0f:7c:99:
0b:83:ad:16:31:db:5c:9e:b4:40:66:51:a2:d3:f9:
14:2e:34:eb:a7:65:71:04:36:af:0d:26:41:c8:e8:
ce:5e:38:6b:54:36:c1:79:f8:93:3f:a4:c0:01:1e:
ce:10:c2:71:cf:d8:7f:d5:5b:b8:23:d0:14:50:cc:
52:7d:df:c4:96:84:4d:af:a7:22:09:77:7e:d6:b9:
a2:23:fc:04:7d:76:4b:94:3d:5e:71:aa:5e:c2:67:
f6:1e:90:f0:fe:8d:67:59:51:30:08:4e:47:07:ff:
96:54:28:ba:9b:76:22:15:6a:62:42:fc:19:51:b0:
81:76:62:9c:12:c0:f5:df:ae:84:2a:91:9a:7d:b7:
d0:a9:97:17:c8:c3:ce:73:c8:39:e2:54:66:b4:25:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:41:BC:C4:05:58:4D:CA:EB:BF:B0:34:F8:1D:82:1D:9B:04:B8
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:41:db:84:07:40:df:a2:af:65:18:e8:38:fd:de:b6:1f:f7:
49:bd:b3:73:34:11:f7:45:0d:02:e0:fb:98:4f:36:de:e5:bd:
33:d0:e4:9b:82:1f:60:6e:93:ba:33:6e:f3:05:32:4f:13:c7:
96:79:7d:8d:13:12:a7:97:ed:97:ca:5c:1a:2c:8a:6b:b0:87:
9d:67:0b:35:78:7a:3c:ce:ff:f7:4f:6f:e9:ae:12:b2:31:5b:
73:f4:6b:2e:51:24:d0:e6:4f:a3:df:8a:d2:24:a8:78:ea:45:
fc:79:90:99:d9:27:03:c7:12:cd:de:6c:c1:a3:0c:bb:71:76:
c4:c3:26:9f:19:49:bd:fa:16:d8:20:80:4f:3f:2f:08:07:cb:
5c:6b:f2:22:f2:bf:b0:d3:cd:49:3c:1f:77:31:f2:26:dc:cc:
0b:61:14:50:28:a8:89:6e:6f:77:cb:13:60:b4:77:ed:61:60:
54:1e:e3:ad:b5:fa:ce:6b:9c:d8:c8:85:55:a9:e8:c5:46:e5:
6b:c8:c7:cb:b1:96:2f:70:b1:7e:ad:25:bf:f5:b3:cf:36:ef:
9d:ba:be:7f:fb:59:10:58:2b:26:47:2f:a8:92:ee:14:ef:43:
18:47:ff:1b:fc:70:ce:35:67:25:1c:0a:75:c3:e2:91:ac:22:
0e:5c:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:37 2025 by rpki-client