Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/2/4AFA0771812E6637D8B18A1FF50F41F3498669A9.mft
File: 4AFA0771812E6637D8B18A1FF50F41F3498669A9.mft (raw, json)
Hash identifier: BNSUzPrFwV6w5NmTM5iEqKc3oTMPJVfy+BQq9mJeOr0=
Subject key identifier: AC:31:F3:41:6B:50:AE:21:4D:74:F6:65:59:07:2F:1F:C1:2A:62:F0
Authority key identifier: 4A:FA:07:71:81:2E:66:37:D8:B1:8A:1F:F5:0F:41:F3:49:86:69:A9
Certificate issuer: /CN=4afa0771812e6637d8b18a1ff50f41f3498669a9
Certificate serial: 1AB6DFD7D471949FE52049402B2E74C4253C3007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvoHcYEuZjfYsYof9Q9B80mGaak.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/2/4AFA0771812E6637D8B18A1FF50F41F3498669A9.mft
Manifest number: 15
Signing time: Sat 04 Nov 2023 22:54:27 +0000
Manifest this update: Sat 04 Nov 2023 22:49:27 +0000
Manifest next update: Mon 06 Nov 2023 00:45:27 +0000
Files and hashes: 1: 4AFA0771812E6637D8B18A1FF50F41F3498669A9.crl (hash: npvNSbQmOlKph5kjN2W5qObC6IXxplwbU5V9croKLuk=)
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b6:df:d7:d4:71:94:9f:e5:20:49:40:2b:2e:74:c4:25:3c:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afa0771812e6637d8b18a1ff50f41f3498669a9
Validity
Not Before: Nov 4 22:49:27 2023 GMT
Not After : Nov 6 00:45:27 2023 GMT
Subject: CN=AC31F3416B50AE214D74F66559072F1FC12A62F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:55:78:49:81:5a:08:a1:14:6f:ce:78:77:
bd:fa:40:c6:f4:d2:b1:e4:6f:4c:2b:c1:55:c2:e2:
a9:e4:20:67:04:b0:e3:3a:55:75:d6:33:93:6a:f3:
b3:79:52:22:83:16:b4:e7:07:43:1b:61:86:41:07:
e7:32:87:01:76:8b:86:3f:a0:f1:e2:d5:c3:49:df:
65:c7:8c:8d:9c:53:6b:d0:1d:3d:74:ce:a3:46:b0:
eb:d1:a2:a4:8d:66:32:ea:23:dc:fa:b1:1a:35:3a:
e0:93:6c:e8:68:b8:8b:bd:8c:4b:15:b5:7e:91:f5:
b6:2d:87:c6:b1:22:33:63:65:bb:dc:5a:3e:77:59:
bf:45:27:12:f5:1a:35:65:97:73:0f:1d:ee:d4:f5:
88:bf:90:e6:7b:fb:ce:79:84:19:7c:79:46:8b:b6:
88:7a:1f:6b:7b:7b:57:de:f5:d6:77:8e:71:9c:4d:
5c:d9:5a:f2:b5:06:a9:e4:76:e5:2d:da:5c:af:41:
dd:98:76:3d:89:28:ea:a8:8a:20:d0:52:07:32:a1:
00:2b:26:5c:43:d2:d2:d4:22:4a:a0:4c:5a:41:cc:
89:c7:50:52:a6:50:4e:16:97:63:e8:b2:c8:12:5d:
0e:3f:04:5e:70:6f:43:d8:03:e7:c8:d4:bf:f9:48:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:F3:41:6B:50:AE:21:4D:74:F6:65:59:07:2F:1F:C1:2A:62:F0
X509v3 Authority Key Identifier:
keyid:4A:FA:07:71:81:2E:66:37:D8:B1:8A:1F:F5:0F:41:F3:49:86:69:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/2/4AFA0771812E6637D8B18A1FF50F41F3498669A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvoHcYEuZjfYsYof9Q9B80mGaak.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/2/4AFA0771812E6637D8B18A1FF50F41F3498669A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:04:0c:ce:cc:aa:12:2b:b8:c4:ba:6a:1f:e3:61:c2:a9:d2:
52:89:a3:b6:d4:1c:d8:2e:cf:60:e1:f4:81:aa:a4:6a:78:69:
6c:0a:e0:d3:b1:35:77:94:f1:3d:55:06:9a:0e:c4:c6:e1:d5:
2c:d3:43:24:74:60:ce:31:43:88:b5:f0:4f:79:f7:f1:da:4d:
4d:fc:42:ce:89:b3:1f:cd:52:04:df:6c:67:65:6d:ed:2d:ba:
f2:5c:b8:9e:0d:99:3d:7c:2a:c2:a1:55:a2:d6:0b:bc:80:7a:
23:e8:09:9f:be:46:00:ee:4b:72:f0:17:cd:c8:03:5a:b5:09:
6d:ae:8f:10:c1:c3:c5:be:be:72:8f:3f:56:95:12:0b:e8:d3:
68:a8:89:d8:39:22:3b:fe:e5:58:de:b7:d7:14:5b:97:4e:5f:
17:4c:97:e9:2c:de:6a:69:be:ee:97:93:c1:08:01:e3:81:9b:
c2:d6:0a:37:85:e1:70:27:94:5f:b0:bd:94:64:d4:ef:75:74:
bf:7c:e8:52:b9:82:8b:02:f6:a7:09:7f:f8:d3:b2:0c:dc:96:
0e:2e:74:bc:d8:02:b9:5a:ea:ec:59:a5:a0:fb:af:88:d8:50:
f2:60:90:f5:29:cc:93:bc:37:1f:cd:0f:0d:33:2c:31:53:d8:
cf:12:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org