Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/D490F856F80E807B7180EF46E3048FC5F28CF832.mft
File: D490F856F80E807B7180EF46E3048FC5F28CF832.mft (raw, json)
Hash identifier: PAy3CDohaVHx+g+nXW0mXj8YJD/zu3t/d04fWb3gISY=
Subject key identifier: 57:3C:E6:2D:AC:4D:35:B3:B4:70:27:EA:6F:61:79:FB:69:CD:C6:C4
Authority key identifier: D4:90:F8:56:F8:0E:80:7B:71:80:EF:46:E3:04:8F:C5:F2:8C:F8:32
Certificate issuer: /CN=d490f856f80e807b7180ef46e3048fc5f28cf832
Certificate serial: 430F08745CC329A987E28C0E359BEBC50DF8B2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1JD4VvgOgHtxgO9G4wSPxfKM-DI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/D490F856F80E807B7180EF46E3048FC5F28CF832.mft
Manifest number: 01
Signing time: Fri 21 Feb 2025 07:12:04 +0000
Manifest this update: Fri 21 Feb 2025 07:07:04 +0000
Manifest next update: Sat 22 Feb 2025 10:34:04 +0000
Files and hashes: 1: D490F856F80E807B7180EF46E3048FC5F28CF832.crl (hash: sx3ZB178/Sd0HdAQ4Dznu0+yAn+yGW4R7Ph0WbnFSNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0f:08:74:5c:c3:29:a9:87:e2:8c:0e:35:9b:eb:c5:0d:f8:b2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d490f856f80e807b7180ef46e3048fc5f28cf832
Validity
Not Before: Feb 21 07:07:04 2025 GMT
Not After : Feb 22 10:34:04 2025 GMT
Subject: CN=573CE62DAC4D35B3B47027EA6F6179FB69CDC6C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:10:6a:54:da:c4:6c:f1:eb:87:00:f2:f5:
64:76:b3:21:0e:e9:d2:c6:21:19:4e:9c:25:de:06:
ed:84:d8:f4:6a:aa:d8:f2:f0:08:85:19:ef:ae:08:
ce:e0:93:c7:1a:a2:24:9a:92:66:cc:76:3f:94:91:
70:eb:fe:61:ee:dd:87:da:c9:e7:48:2b:77:c8:e3:
b1:38:09:bc:7f:22:67:3c:7f:c9:0d:d4:67:e7:65:
13:ef:0c:dd:b0:42:4a:65:dc:59:a3:fa:df:2e:35:
66:3c:25:77:7a:65:fe:3b:bb:66:92:36:8a:c0:d5:
97:42:65:5e:c2:aa:1a:64:f9:0f:c2:77:43:59:4a:
67:34:82:a4:d4:74:7f:73:4e:2c:d2:2e:b9:b7:c1:
22:d5:59:2a:60:a5:f5:53:ae:b3:7b:3f:70:33:ac:
ed:54:2e:e3:e9:dc:ba:aa:e8:e4:08:e7:b3:5a:fa:
ed:c0:20:09:f4:02:7c:50:dd:dc:a7:19:d2:2f:0e:
5f:d8:4e:a5:ad:06:f9:c3:61:6a:1b:e5:ea:03:02:
af:76:93:10:00:8d:39:17:2b:9c:83:8d:09:46:cc:
6c:53:b6:e2:ae:1a:17:74:e4:30:ee:de:00:cb:c2:
6d:92:4b:4a:4d:bc:28:69:d5:34:6b:86:ae:41:1f:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:E6:2D:AC:4D:35:B3:B4:70:27:EA:6F:61:79:FB:69:CD:C6:C4
X509v3 Authority Key Identifier:
keyid:D4:90:F8:56:F8:0E:80:7B:71:80:EF:46:E3:04:8F:C5:F2:8C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/D490F856F80E807B7180EF46E3048FC5F28CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1JD4VvgOgHtxgO9G4wSPxfKM-DI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/D490F856F80E807B7180EF46E3048FC5F28CF832.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4f:8b:b7:10:7d:8f:5a:61:e3:3a:5c:0e:54:77:4b:0b:e5:
83:a4:93:5d:9b:9d:81:39:dd:10:70:8b:5f:4c:64:9f:31:11:
e4:4b:e8:a7:db:db:f2:2f:33:58:2f:d3:ac:0d:97:7c:67:c6:
13:6c:82:ed:d8:25:05:78:18:66:4c:17:52:27:89:c4:e8:fb:
96:95:69:4f:7e:5d:b0:55:d1:74:0e:f8:a7:f9:ef:1e:db:94:
d9:9f:a9:40:92:59:fe:82:43:1f:68:43:e5:14:9a:24:ea:fa:
dd:a5:68:0d:89:ef:10:c0:68:1e:e0:44:f4:c4:03:7a:bc:ef:
e0:38:02:e9:69:d6:18:16:bd:99:28:ea:3b:f8:00:a9:42:74:
4c:d0:06:a0:3b:1a:06:43:7a:35:68:a4:f8:42:83:ec:01:c5:
68:0a:54:a0:96:a9:9c:18:c7:c2:8c:6b:ab:d7:05:0d:61:41:
dc:65:5f:53:7b:7b:80:69:45:fc:b3:50:94:f1:cc:fc:67:71:
d5:8a:00:05:68:d3:08:86:77:71:28:fe:a0:f6:a3:55:36:13:
ce:4b:ab:33:c1:95:66:de:57:0a:d1:67:f1:93:3b:f6:62:8e:
1b:7f:e2:c2:2b:64:04:9d:7f:62:6c:2b:72:e0:93:c1:40:7c:
a1:66:a6:16
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQw8IdFzDKamH4owONZvrxQ34svQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQ5MGY4NTZmODBlODA3YjcxODBlZjQ2ZTMwNDhmYzVm
MjhjZjgzMjAeFw0yNTAyMjEwNzA3MDRaFw0yNTAyMjIxMDM0MDRaMDMxMTAvBgNV
BAMTKDU3M0NFNjJEQUM0RDM1QjNCNDcwMjdFQTZGNjE3OUZCNjlDREM2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWxBqVNrEbPHrhwDy9WR2syEO
6dLGIRlOnCXeBu2E2PRqqtjy8AiFGe+uCM7gk8caoiSakmbMdj+UkXDr/mHu3Yfa
yedIK3fI47E4Cbx/Imc8f8kN1GfnZRPvDN2wQkpl3Fmj+t8uNWY8JXd6Zf47u2aS
NorA1ZdCZV7Cqhpk+Q/Cd0NZSmc0gqTUdH9zTizSLrm3wSLVWSpgpfVTrrN7P3Az
rO1ULuPp3Lqq6OQI57Na+u3AIAn0AnxQ3dynGdIvDl/YTqWtBvnDYWob5eoDAq92
kxAAjTkXK5yDjQlGzGxTtuKuGhd05DDu3gDLwm2SS0pNvChp1TRrhq5BH4KnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUVzzmLaxNNbO0cCfqb2F5+2nNxsQwHwYDVR0j
BBgwFoAU1JD4VvgOgHtxgO9G4wSPxfKM+DIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTQ0MGQ2MDItYjBhYi00MzZmLWE5NTctZGZiNDg3YzY2
YmI4LzAvRDQ5MEY4NTZGODBFODA3QjcxODBFRjQ2RTMwNDhGQzVGMjhDRjgzMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFKRDRWdmdPZ0h0eGdPOUc0d1NQeGZL
TS1ESS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NDQwZDYwMi1i
MGFiLTQzNmYtYTk1Ny1kZmI0ODdjNjZiYjgvMC9ENDkwRjg1NkY4MEU4MDdCNzE4
MEVGNDZFMzA0OEZDNUYyOENGODMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE+LtxB9j1ph4zpcDlR3
Swvlg6STXZudgTndEHCLX0xknzER5Evop9vb8i8zWC/TrA2XfGfGE2yC7dglBXgY
ZkwXUieJxOj7lpVpT35dsFXRdA74p/nvHtuU2Z+pQJJZ/oJDH2hD5RSaJOr63aVo
DYnvEMBoHuBE9MQDerzv4DgC6WnWGBa9mSjqO/gAqUJ0TNAGoDsaBkN6NWik+EKD
7AHFaApUoJapnBjHwoxrq9cFDWFB3GVfU3t7gGlF/LNQlPHM/Gdx1YoABWjTCIZ3
cSj+oPajVTYTzkurM8GVZt5XCtFn8ZM79mKOG3/iwitkBJ1/YmwrcuCTwUB8oWam
Fg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:34:11 2025 by rpki-client