Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: aI0iWW8e/YeldcVDdLOf5jMGxpFl2w4C09aO3L0kLOY=
Subject key identifier: 8F:B2:09:8A:3A:5F:39:41:8D:1B:1D:69:A8:44:6D:D0:D1:9D:9D:68
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 0F867885951D8DA0016473989928F19B2878B655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 03A4
Signing time: Fri 28 Mar 2025 21:46:07 +0000
Manifest this update: Fri 28 Mar 2025 21:41:07 +0000
Manifest next update: Sun 30 Mar 2025 01:02:07 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: TYfetPXUEI4NjusUqbyT/968cziT68kuYpYv+FahSqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:86:78:85:95:1d:8d:a0:01:64:73:98:99:28:f1:9b:28:78:b6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Mar 28 21:41:07 2025 GMT
Not After : Mar 30 01:02:07 2025 GMT
Subject: CN=8FB2098A3A5F39418D1B1D69A8446DD0D19D9D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:24:8c:52:4f:e7:ae:19:f1:ab:49:80:50:
06:59:bd:2b:1d:be:3e:1c:74:13:9e:71:4e:42:ab:
cd:84:34:3a:6e:b7:42:4f:18:8b:d9:49:b2:b3:b9:
4a:56:d2:4d:df:c8:67:26:86:68:a6:e7:41:f7:67:
02:58:df:4c:7f:94:b8:9a:b1:8f:3a:a1:95:6e:59:
5d:e9:12:6f:85:45:c9:50:5a:b4:01:db:e6:08:99:
1a:22:03:28:e7:aa:fe:a8:42:35:1d:b8:74:df:eb:
aa:cc:e2:41:01:7f:9e:6f:48:ce:16:7f:6d:c8:eb:
b2:32:97:ca:81:ac:5a:7d:00:5f:9a:3e:47:de:d5:
36:10:05:3d:50:4d:27:56:62:c5:7a:77:53:00:0b:
24:90:bf:5b:8a:9c:85:5c:f6:b8:bc:b4:be:32:c9:
8f:d2:3b:cd:7a:f8:a8:4d:e3:6b:90:03:fe:97:c2:
8c:71:a5:6b:c1:39:a2:2f:d1:f5:7b:c0:7c:3e:7f:
6e:48:f5:2a:c5:f6:8a:4e:d8:14:33:9b:6a:c4:a2:
cf:96:2e:93:c6:ce:d7:d1:6c:cd:53:76:7c:bd:4e:
00:cf:38:bf:f3:b0:d9:c2:dc:7a:c6:c5:0f:26:a4:
1d:31:12:83:8b:ae:c5:89:33:71:6d:2a:a2:c1:ed:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:09:8A:3A:5F:39:41:8D:1B:1D:69:A8:44:6D:D0:D1:9D:9D:68
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:1b:af:02:2a:1c:a0:4c:0f:ab:13:5d:e9:b5:45:ec:36:
b2:e7:7f:57:b0:85:32:b3:93:c4:e3:e8:eb:80:51:ce:6c:7c:
84:27:98:ef:97:82:c1:a2:0d:5c:a8:c6:4f:bf:d1:8e:13:a6:
d7:55:3a:73:be:be:70:f6:05:3e:83:76:af:45:c4:6d:4a:65:
9a:59:cf:4e:07:13:a5:37:90:1a:eb:cd:cd:9f:63:f8:07:63:
71:18:eb:fe:50:ce:db:ab:78:d6:18:db:38:88:e9:bc:67:44:
6f:7e:4b:f4:7f:26:7f:d6:56:e6:e5:71:cc:91:5d:51:5b:b3:
72:1b:8d:b0:8b:33:31:be:f3:8a:ec:e9:0a:07:b9:ea:11:b7:
da:db:2c:31:65:a4:42:60:b7:33:b6:17:16:dc:12:c6:92:dc:
28:0c:0d:62:7e:85:15:f0:a0:b6:86:b5:35:6a:55:26:65:fb:
ae:59:62:9d:f3:81:5f:61:d7:d8:53:cd:2f:99:83:6e:bc:af:
4d:5d:5d:2d:f7:03:60:22:00:68:d8:56:77:a6:12:dd:24:46:
7e:26:43:2a:fd:bb:d9:1f:dc:93:c2:86:ee:c8:e7:b4:86:ab:
5c:41:40:88:d5:d8:0b:e9:98:8a:b6:48:11:b2:7e:87:3e:99:
a6:5f:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:26 2025 by rpki-client