Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/DA0A66EFDAB25BB3B2A50CDC7968E321A0BE8A46.mft
File: DA0A66EFDAB25BB3B2A50CDC7968E321A0BE8A46.mft (raw, json)
Hash identifier: MEixgEiz4ARU4ZeMx/CjP6VBCzdzW4I7WkMQmcoJhGE=
Subject key identifier: FA:B8:15:4C:E2:59:6D:5E:3A:2D:41:76:64:FD:F1:D7:6C:1A:28:76
Authority key identifier: DA:0A:66:EF:DA:B2:5B:B3:B2:A5:0C:DC:79:68:E3:21:A0:BE:8A:46
Certificate issuer: /CN=da0a66efdab25bb3b2a50cdc7968e321a0be8a46
Certificate serial: 69946F6F2166A5BF746AC79140158D91D5C7D998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gpm79qyW7OypQzceWjjIaC-ikY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/DA0A66EFDAB25BB3B2A50CDC7968E321A0BE8A46.mft
Manifest number: 01
Signing time: Sun 12 Nov 2023 14:08:39 +0000
Manifest this update: Sun 12 Nov 2023 14:03:39 +0000
Manifest next update: Mon 13 Nov 2023 14:45:39 +0000
Files and hashes: 1: DA0A66EFDAB25BB3B2A50CDC7968E321A0BE8A46.crl (hash: f7aofFK5FzjPh5EmpGSaSiOtGft4vSzIkHTd/BQN6HA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:94:6f:6f:21:66:a5:bf:74:6a:c7:91:40:15:8d:91:d5:c7:d9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a66efdab25bb3b2a50cdc7968e321a0be8a46
Validity
Not Before: Nov 12 14:03:39 2023 GMT
Not After : Nov 13 14:45:39 2023 GMT
Subject: CN=FAB8154CE2596D5E3A2D417664FDF1D76C1A2876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:80:07:26:56:e1:68:1a:89:77:89:b0:bf:
dc:16:25:d2:d4:eb:c6:a3:69:79:93:c2:60:94:a2:
23:4b:b0:56:23:fb:c7:4a:22:13:45:d8:6f:f9:3d:
3c:81:73:ae:39:f7:ff:24:fa:2d:65:8d:12:8b:33:
04:21:ec:d1:27:0a:0a:eb:0d:97:25:be:cb:fd:5a:
f1:a2:79:86:bf:bb:c8:d8:1a:68:0f:23:4b:ed:37:
83:66:87:82:ae:23:50:d9:23:59:1b:04:69:64:14:
64:43:be:80:fd:e8:01:cf:a7:83:6b:e8:cc:61:e3:
d2:c2:15:27:dd:2e:02:96:1e:23:cb:39:3f:cf:c1:
05:17:31:0b:b4:d7:1c:7e:27:4e:e5:5d:25:2d:44:
d2:97:32:ff:fa:da:31:ae:60:93:ff:17:62:4d:49:
9e:f1:53:1f:e0:7c:2a:ed:42:4e:0d:6d:70:57:97:
5e:fc:18:bd:d8:19:f3:80:03:05:54:20:92:03:34:
9b:88:52:f3:71:52:5d:91:f4:56:0a:cf:81:6a:0c:
88:98:0f:d4:87:26:61:44:ae:21:1d:e9:0d:85:9a:
73:74:34:ab:5f:e5:92:d2:e7:8e:38:6d:49:88:5c:
e4:a2:df:28:19:e0:f3:6e:8d:28:3b:02:c0:68:3e:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:15:4C:E2:59:6D:5E:3A:2D:41:76:64:FD:F1:D7:6C:1A:28:76
X509v3 Authority Key Identifier:
keyid:DA:0A:66:EF:DA:B2:5B:B3:B2:A5:0C:DC:79:68:E3:21:A0:BE:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/DA0A66EFDAB25BB3B2A50CDC7968E321A0BE8A46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gpm79qyW7OypQzceWjjIaC-ikY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/9/DA0A66EFDAB25BB3B2A50CDC7968E321A0BE8A46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:bc:8d:53:5f:e2:15:54:ec:cb:fb:a3:62:d5:08:68:69:
06:c7:81:ce:d2:c1:d5:a0:ea:c2:f1:b5:50:1d:9d:08:53:77:
97:ce:21:ea:90:a4:93:bb:e9:d9:62:f5:06:6d:0b:94:7e:64:
fa:45:68:7c:85:99:50:16:a9:f3:28:ac:91:bd:a2:40:3b:78:
00:d2:e5:57:e7:7f:55:ee:f3:a9:98:90:1f:c7:7d:fb:8b:e2:
64:9b:90:ab:fd:81:fc:87:94:e2:a5:3c:99:90:65:0f:f5:c1:
53:9e:1f:2c:1f:75:9f:bc:fc:36:36:33:9a:f0:ba:6d:94:ce:
7b:81:66:40:97:7e:ae:47:ed:30:49:2d:7f:57:30:b6:ad:6a:
7e:d2:8d:0b:a2:fc:31:11:66:65:dd:43:35:7b:eb:58:94:6c:
b9:d7:5c:74:eb:8d:65:0a:4a:fe:5e:ff:c9:07:ae:94:49:56:
b2:73:17:6d:44:42:5b:40:f0:89:97:e0:27:3c:a1:ff:66:cd:
0b:ed:a7:d2:8a:27:e2:37:04:f5:23:35:e4:a4:60:a0:71:3a:
23:17:96:41:1a:f1:85:83:56:54:93:39:6d:0c:ed:d7:91:96:
1c:a4:51:9c:6c:0e:11:00:c1:0d:98:e6:e0:8b:2d:16:ef:ec:
41:5f:51:d3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaZRvbyFmpb90aseRQBWNkdXH2ZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGEwYTY2ZWZkYWIyNWJiM2IyYTUwY2RjNzk2OGUzMjFh
MGJlOGE0NjAeFw0yMzExMTIxNDAzMzlaFw0yMzExMTMxNDQ1MzlaMDMxMTAvBgNV
BAMTKEZBQjgxNTRDRTI1OTZENUUzQTJENDE3NjY0RkRGMUQ3NkMxQTI4NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznoAHJlbhaBqJd4mwv9wWJdLU
68ajaXmTwmCUoiNLsFYj+8dKIhNF2G/5PTyBc6459/8k+i1ljRKLMwQh7NEnCgrr
DZclvsv9WvGieYa/u8jYGmgPI0vtN4Nmh4KuI1DZI1kbBGlkFGRDvoD96AHPp4Nr
6Mxh49LCFSfdLgKWHiPLOT/PwQUXMQu01xx+J07lXSUtRNKXMv/62jGuYJP/F2JN
SZ7xUx/gfCrtQk4NbXBXl178GL3YGfOAAwVUIJIDNJuIUvNxUl2R9FYKz4FqDIiY
D9SHJmFEriEd6Q2FmnN0NKtf5ZLS5444bUmIXOSi3ygZ4PNujSg7AsBoPhlrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+rgVTOJZbV46LUF2ZP3x12waKHYwHwYDVR0j
BBgwFoAU2gpm79qyW7OypQzceWjjIaC+ikYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNj
MWE4LzkvREEwQTY2RUZEQUIyNUJCM0IyQTUwQ0RDNzk2OEUzMjFBMEJFOEE0Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJncG03OXF5VzdPeXBRemNlV2pqSWFD
LWlrWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NmJkOTJmMS00
MTViLTQ3NjUtOGExNi1kYmZjNDU5M2MxYTgvOS9EQTBBNjZFRkRBQjI1QkIzQjJB
NTBDREM3OTY4RTMyMUEwQkU4QTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYU+8jVNf4hVU7Mv7o2LV
CGhpBseBztLB1aDqwvG1UB2dCFN3l84h6pCkk7vp2WL1Bm0LlH5k+kVofIWZUBap
8yiskb2iQDt4ANLlV+d/Ve7zqZiQH8d9+4viZJuQq/2B/IeU4qU8mZBlD/XBU54f
LB91n7z8NjYzmvC6bZTOe4FmQJd+rkftMEktf1cwtq1qftKNC6L8MRFmZd1DNXvr
WJRsuddcdOuNZQpK/l7/yQeulElWsnMXbURCW0DwiZfgJzyh/2bNC+2n0oon4jcE
9SM15KRgoHE6IxeWQRrxhYNWVJM5bQzt15GWHKRRnGwOEQDBDZjm4IstFu/sQV9R
0w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:24 2025 by rpki-client