Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/0/3CF069D85A5E033F5F525B5A2443BABC9AE363D9.mft
File: 3CF069D85A5E033F5F525B5A2443BABC9AE363D9.mft (raw, json)
Hash identifier: UPyifLGOXDPgYZXbccUCFEJglxdIPexVpUXbFktRcVo=
Subject key identifier: C5:C2:98:DE:46:94:10:80:49:4A:43:ED:B6:4F:D5:79:DA:21:28:2B
Authority key identifier: 3C:F0:69:D8:5A:5E:03:3F:5F:52:5B:5A:24:43:BA:BC:9A:E3:63:D9
Certificate issuer: /CN=3cf069d85a5e033f5f525b5a2443babc9ae363d9
Certificate serial: 2A0654355FB04310D02F503591ECE8AE375045BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPBp2FpeAz9fUltaJEO6vJrjY9k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/0/3CF069D85A5E033F5F525B5A2443BABC9AE363D9.mft
Manifest number: 23
Signing time: Wed 11 Dec 2024 14:54:57 +0000
Manifest this update: Wed 11 Dec 2024 14:49:57 +0000
Manifest next update: Thu 12 Dec 2024 16:06:57 +0000
Files and hashes: 1: 3CF069D85A5E033F5F525B5A2443BABC9AE363D9.crl (hash: bM2e0dHyK2vIpNZoytvU7cZFYgWmVJoFJnGL9yh84pE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:06:54:35:5f:b0:43:10:d0:2f:50:35:91:ec:e8:ae:37:50:45:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf069d85a5e033f5f525b5a2443babc9ae363d9
Validity
Not Before: Dec 11 14:49:57 2024 GMT
Not After : Dec 12 16:06:57 2024 GMT
Subject: CN=C5C298DE46941080494A43EDB64FD579DA21282B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:ab:ba:bd:06:a2:a5:4f:f7:52:76:c8:c2:
c5:84:fe:9b:fc:03:5a:36:0f:47:c2:9e:9b:a9:60:
62:75:da:09:86:53:18:0d:ba:b9:fd:80:5f:30:25:
91:1a:7c:ef:f9:9d:21:57:cd:c8:6e:0a:c6:11:6c:
62:90:6c:65:42:a1:41:4d:47:65:22:ed:22:79:6d:
e1:cc:01:42:cd:46:c3:c2:3a:8c:ee:01:ff:1e:5a:
e3:4a:d4:df:27:87:b3:8c:5f:6c:12:52:18:95:0e:
c3:f5:3a:04:09:76:68:e8:55:01:cc:c2:a0:41:23:
6d:79:40:8e:e9:eb:d8:bb:32:e1:c3:23:f8:d4:66:
9e:e0:62:b7:af:b8:b5:6d:eb:72:82:4e:68:d2:87:
dc:a9:4c:45:80:fc:5f:9c:90:c4:b1:94:d7:cc:7f:
5b:0a:9a:71:c5:37:c7:7e:4b:a7:4a:6a:18:0d:38:
5c:a6:ba:e5:e4:92:e5:72:6e:63:a1:5e:cc:a5:6c:
7d:de:9c:91:2e:14:9a:92:2d:80:35:32:ca:06:c1:
29:70:64:df:19:40:fc:a4:50:13:3d:c0:ab:3c:59:
93:9a:67:c8:08:7c:06:0f:0b:72:31:fb:41:b6:3c:
66:cb:b3:37:47:a9:7e:29:51:07:2d:c0:a2:41:28:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:98:DE:46:94:10:80:49:4A:43:ED:B6:4F:D5:79:DA:21:28:2B
X509v3 Authority Key Identifier:
keyid:3C:F0:69:D8:5A:5E:03:3F:5F:52:5B:5A:24:43:BA:BC:9A:E3:63:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/0/3CF069D85A5E033F5F525B5A2443BABC9AE363D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPBp2FpeAz9fUltaJEO6vJrjY9k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73badabc-9d43-4e7d-847b-4e86be9dac63/0/3CF069D85A5E033F5F525B5A2443BABC9AE363D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a3:11:d3:f9:f9:a5:63:1d:29:b2:e2:63:db:8d:7e:53:70:
08:8a:c5:5d:33:8d:d4:00:02:c3:f8:1e:f7:07:b5:d7:f2:e7:
59:13:42:89:82:b9:40:9a:52:37:29:60:21:0f:34:e6:d5:54:
53:a1:37:89:74:5b:91:fa:62:71:39:2c:65:c5:4c:21:42:06:
58:41:e6:ef:a9:fd:69:6f:3e:b9:83:92:2f:2b:d7:ee:74:d0:
77:95:32:b3:81:1b:2c:fa:5f:8b:2a:8e:ff:05:53:a9:c9:d9:
b2:f5:6a:77:f4:bb:0f:e4:1f:df:2e:64:e7:19:17:c8:f5:02:
b7:69:c6:4a:76:ce:7c:77:00:ad:43:5a:6e:15:49:b2:7c:aa:
b2:bf:fb:f3:da:34:4c:7b:7f:b6:96:08:98:f2:55:10:eb:f9:
01:b5:50:44:94:d3:86:3a:c2:ee:48:b2:11:4e:67:87:00:1b:
7c:56:4f:69:f5:5b:d1:59:90:ff:f8:e2:86:fc:af:d6:e4:fb:
57:83:0b:c6:b2:f9:d2:1f:b3:10:bf:19:a6:a1:47:d6:79:08:
39:f1:4d:ca:4b:8e:80:a0:ab:17:95:3f:f3:26:76:40:d1:31:
ad:e5:ac:f5:f9:94:9b:e8:e0:58:a8:c2:da:8e:80:69:49:c3:
a7:56:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:04:49 2025 by rpki-client