Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: T1+OYRWRGdTEYQohSmhjp5ljlqiXH+ISld6Ks5C+WXA=
Subject key identifier: 8E:AC:91:62:26:D6:C8:2B:CA:A2:86:5C:59:B4:D1:50:0C:C8:9C:70
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 65379951D4D32F52CC4E4554EF0D4632138EB122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 02AC
Signing time: Fri 28 Mar 2025 22:23:03 +0000
Manifest this update: Fri 28 Mar 2025 22:18:03 +0000
Manifest next update: Sat 29 Mar 2025 23:40:03 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: s3G1YEMjkZ/BiCGLkNziayxkoK22tjlWbWAce8V7o1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:37:99:51:d4:d3:2f:52:cc:4e:45:54:ef:0d:46:32:13:8e:b1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Mar 28 22:18:03 2025 GMT
Not After : Mar 29 23:40:03 2025 GMT
Subject: CN=8EAC916226D6C82BCAA2865C59B4D1500CC89C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:85:e9:3a:cc:15:af:a9:69:61:f1:78:12:
53:f3:1e:0b:63:43:fd:f8:6b:32:c6:ce:cc:77:e0:
b9:30:bf:a9:19:c7:a7:b9:16:a4:38:6a:af:22:de:
d5:a9:a8:7a:6f:51:e7:fd:e5:93:2d:89:dc:cb:f9:
72:11:64:4b:0b:f6:a2:bc:bc:79:23:48:5c:e4:d6:
dc:97:aa:57:a7:3a:06:0b:2d:cd:17:78:34:28:ba:
1c:37:62:81:98:3a:b7:35:a7:26:f9:a6:d8:80:d1:
65:07:a6:63:a1:88:2b:66:2a:a3:12:c6:70:23:94:
9a:0e:49:5b:af:ba:79:fb:35:c8:06:af:a9:6d:0e:
85:64:98:00:98:d7:e1:95:a6:1e:9a:fb:60:43:07:
59:76:d5:c8:7c:55:31:73:c6:0c:d1:37:b6:73:d2:
7a:22:95:65:c9:4d:1f:2a:3c:68:67:07:b2:22:ca:
58:bb:b1:1e:da:f7:f8:56:df:8f:76:39:0e:7d:af:
b2:4b:11:9b:6b:c1:28:db:8e:9a:89:4f:1a:d5:2d:
a6:e0:5e:4d:b1:15:9e:fd:68:36:30:d8:68:c9:2e:
1f:52:77:fa:bb:0a:70:57:fd:ae:50:c0:fc:c5:09:
c7:c5:98:37:ff:b8:93:18:0b:6e:e7:e8:31:fd:91:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:91:62:26:D6:C8:2B:CA:A2:86:5C:59:B4:D1:50:0C:C8:9C:70
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:bc:27:ad:3d:94:6c:d8:fe:29:bd:2a:bc:be:a2:ff:2f:
73:30:f6:be:f7:7e:eb:99:f9:26:93:35:21:be:46:cc:00:8e:
2e:55:2a:ef:ae:18:e0:d2:0d:53:c3:be:d2:e3:f0:84:37:e1:
b6:8d:29:39:8b:d1:e9:45:ff:6f:eb:04:78:3d:b8:be:e9:57:
b7:12:e0:ca:fe:9e:a3:90:83:e5:62:2c:ae:82:c8:7c:96:ee:
c1:c4:c9:a7:f6:20:ba:88:a8:12:a1:87:fa:e9:92:36:7f:a0:
7c:52:2f:ba:3c:b2:1d:ba:7b:fb:9e:2d:9a:83:6f:83:e3:d2:
0e:70:16:62:5d:a0:68:10:75:f0:d5:52:0f:1a:4e:42:b0:8f:
1f:05:98:79:51:d4:78:29:26:8e:fc:92:20:7e:c5:3c:00:bc:
bc:03:a9:ac:01:af:d4:20:bf:25:c6:8f:3a:b3:02:c6:69:b3:
02:60:e9:e9:79:fb:75:58:32:a9:1d:10:ed:13:4b:02:15:03:
3c:ea:64:d2:37:d2:32:52:09:94:9d:60:6e:54:2c:f9:7b:f8:
e0:5d:aa:2a:45:89:f9:19:6c:c0:ce:27:4a:32:88:44:ff:0b:
0d:be:40:dc:f0:35:e6:f6:d3:2b:de:ba:64:c2:f9:24:1f:cc:
fe:5b:b3:10
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZTeZUdTTL1LMTkVU7w1GMhOOsSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxMWIzZTZkYWU4ZTBkMWIxNmQ1YmRhZmNkYTNkODM3
MGZmM2JmNDAeFw0yNTAzMjgyMjE4MDNaFw0yNTAzMjkyMzQwMDNaMDMxMTAvBgNV
BAMTKDhFQUM5MTYyMjZENkM4MkJDQUEyODY1QzU5QjREMTUwMENDODlDNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCYXpOswVr6lpYfF4ElPzHgtj
Q/34azLGzsx34Lkwv6kZx6e5FqQ4aq8i3tWpqHpvUef95ZMtidzL+XIRZEsL9qK8
vHkjSFzk1tyXqlenOgYLLc0XeDQouhw3YoGYOrc1pyb5ptiA0WUHpmOhiCtmKqMS
xnAjlJoOSVuvunn7NcgGr6ltDoVkmACY1+GVph6a+2BDB1l21ch8VTFzxgzRN7Zz
0noilWXJTR8qPGhnB7Iiyli7sR7a9/hW3492OQ59r7JLEZtrwSjbjpqJTxrVLabg
Xk2xFZ79aDYw2GjJLh9Sd/q7CnBX/a5QwPzFCcfFmDf/uJMYC27n6DH9kbSZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUjqyRYibWyCvKooZcWbTRUAzInHAwHwYDVR0j
BBgwFoAUNhGz5tro4NGxbVva/No9g3D/O/QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNj
MWE4LzUvMzYxMUIzRTZEQUU4RTBEMUIxNkQ1QkRBRkNEQTNEODM3MEZGM0JGNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05oR3o1dHJvNE5HeGJWdmFfTm85ZzNE
X09fUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NmJkOTJmMS00
MTViLTQ3NjUtOGExNi1kYmZjNDU5M2MxYTgvNS8zNjExQjNFNkRBRThFMEQxQjE2
RDVCREFGQ0RBM0Q4MzcwRkYzQkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqy8J609lGzY/im9Kry+
ov8vczD2vvd+65n5JpM1Ib5GzACOLlUq764Y4NINU8O+0uPwhDfhto0pOYvR6UX/
b+sEeD24vulXtxLgyv6eo5CD5WIsroLIfJbuwcTJp/YguoioEqGH+umSNn+gfFIv
ujyyHbp7+54tmoNvg+PSDnAWYl2gaBB18NVSDxpOQrCPHwWYeVHUeCkmjvySIH7F
PAC8vAOprAGv1CC/JcaPOrMCxmmzAmDp6Xn7dVgyqR0Q7RNLAhUDPOpk0jfSMlIJ
lJ1gblQs+Xv44F2qKkWJ+RlswM4nSjKIRP8LDb5A3PA15vbTK966ZML5JB/M/luz
EA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:05 2025 by rpki-client