Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.mft
File: A5B9564158D3F545D38A5134082DABBC4CE4BBC0.mft (raw, json)
Hash identifier: 8XSbLIQyfp39GB7BrSHGYsDJdkmQejMiU/Y23ruJc1A=
Subject key identifier: AD:56:A0:66:8E:A1:58:68:32:E2:37:47:4F:55:1B:ED:03:66:7A:32
Authority key identifier: A5:B9:56:41:58:D3:F5:45:D3:8A:51:34:08:2D:AB:BC:4C:E4:BB:C0
Certificate issuer: /CN=A5B9564158D3F545D38A5134082DABBC4CE4BBC0
Certificate serial: 3B5EAFFF62EE57F311AE3BA3A7C02217C49A0A16
Authority info access: rsync://rpki.cc/repo/MythicalKitten/1/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.mft
Manifest number: CD
Signing time: Sat 11 Nov 2023 20:03:32 +0000
Manifest this update: Sat 11 Nov 2023 19:58:32 +0000
Manifest next update: Sun 12 Nov 2023 21:36:32 +0000
Files and hashes: 1: A5B9564158D3F545D38A5134082DABBC4CE4BBC0.crl (hash: CPX+esKKrqlEMVgY+J/2c1AWA5cakAUtkHSejN+8PIE=)
2: 326130353a646663313a316665303a3a2f34342d3434203d3e20323132363138.roa (hash: MrJ6OqejbhiP6D3yHIMEWhUwVGHrwij9lFFx+nqjrbM=)
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5e:af:ff:62:ee:57:f3:11:ae:3b:a3:a7:c0:22:17:c4:9a:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5B9564158D3F545D38A5134082DABBC4CE4BBC0
Validity
Not Before: Nov 11 19:58:32 2023 GMT
Not After : Nov 12 21:36:32 2023 GMT
Subject: CN=AD56A0668EA1586832E237474F551BED03667A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:1b:e0:79:5f:05:13:b7:06:95:33:52:fe:
e9:f4:8f:70:b5:4a:28:fa:fe:3a:1c:23:d7:7d:c9:
b9:20:ac:45:19:1d:d0:e0:0d:ae:91:5f:a6:5e:f1:
7a:41:e9:76:5e:18:5b:98:69:8b:0d:1e:7e:c0:73:
57:bd:c6:80:8d:16:be:6a:74:e2:32:53:22:aa:72:
fa:23:3c:a1:32:90:c1:f0:0e:d7:58:37:9b:08:72:
be:a8:e5:a4:39:a4:56:fa:85:54:3e:f2:20:53:64:
72:50:70:0f:95:f4:c6:12:ea:78:00:f5:02:c0:d0:
99:ad:48:bf:53:c4:e2:cf:8b:85:49:94:11:03:4f:
90:39:38:77:31:0d:ce:28:20:05:a1:9b:bd:57:4f:
a3:9a:6c:de:4b:7d:30:64:a7:38:96:c8:3c:fe:7a:
5a:ac:82:a9:34:f2:bf:fe:35:bc:b7:ce:12:35:02:
11:ec:b9:66:e8:c0:3b:34:ab:f5:59:7a:83:96:ff:
c2:45:bf:ae:85:21:6c:69:bd:cb:44:7f:f5:00:b1:
57:67:38:b5:92:07:d6:27:b5:bb:4f:d4:d2:18:a2:
52:8e:94:1a:cd:cc:98:54:b1:a0:0d:8e:35:6b:56:
96:2c:cd:d6:7a:96:b3:d5:dd:d0:ce:80:22:1d:c1:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:A0:66:8E:A1:58:68:32:E2:37:47:4F:55:1B:ED:03:66:7A:32
X509v3 Authority Key Identifier:
keyid:A5:B9:56:41:58:D3:F5:45:D3:8A:51:34:08:2D:AB:BC:4C:E4:BB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cc/repo/MythicalKitten/1/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2a:3b:d3:fd:62:65:04:cd:2f:19:16:18:85:16:a7:03:d5:
37:31:34:23:c4:86:5a:0d:ba:11:77:9b:cc:5f:95:d6:0c:3a:
90:8c:0b:77:29:ef:4d:a5:4e:ba:e1:e8:4f:c9:f7:d9:f2:a3:
9b:9e:c7:fc:bf:89:68:bc:4e:82:0d:2d:34:15:4b:94:1c:34:
29:86:2e:d5:0e:58:e6:98:6e:b8:01:57:b7:b7:f8:cc:e7:78:
d7:27:f7:e2:dc:67:31:3c:01:73:db:ab:29:00:b2:53:52:e7:
af:24:62:a9:7d:91:13:1b:57:12:db:1f:f7:59:ba:42:b2:c1:
90:8b:0d:6d:11:d6:e0:54:4c:63:84:9d:85:da:01:30:17:b1:
76:9f:cd:53:bd:62:2f:99:9c:bf:fe:af:45:a6:eb:50:c4:4c:
25:18:f6:99:e7:23:1e:9e:64:81:78:cc:8f:36:ed:bd:22:62:
1d:55:bf:4d:41:6e:e9:c6:2d:3a:64:0d:f2:f4:b0:1f:00:2c:
c4:14:cf:cc:ed:a7:e0:9d:88:0b:a1:61:af:dd:b6:b5:fd:16:
ad:13:f1:b1:87:e0:12:8b:18:c3:09:7b:53:7b:a3:a5:0d:40:
40:3d:25:ac:be:29:75:1f:77:fc:c3:f8:cd:e8:71:24:88:5a:
a1:09:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org