Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft
File: D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft (raw, json)
Hash identifier: 753I+wPuQNK97PMMPcUIgdSqRCjeqJC42N2DG88hWhM=
Subject key identifier: 2F:C0:B1:57:66:09:35:BA:06:61:30:49:9F:51:72:9E:13:5A:46:87
Authority key identifier: D3:A0:F8:80:74:54:20:FB:2B:86:A2:D1:C1:98:84:9D:8B:7C:67:6C
Certificate issuer: /CN=D3A0F880745420FB2B86A2D1C198849D8B7C676C
Certificate serial: 5EB8643A7AB548465EB870745EECF3343AE48454
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft
Manifest number: 24
Signing time: Fri 26 Apr 2024 08:50:42 +0000
Manifest this update: Fri 26 Apr 2024 08:45:42 +0000
Manifest next update: Sat 27 Apr 2024 09:08:42 +0000
Files and hashes: 1: D3A0F880745420FB2B86A2D1C198849D8B7C676C.crl (hash: RaZh6gFwNtT12N/2XPLBIvvf+siVXpRi6OMJSFC0P70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b8:64:3a:7a:b5:48:46:5e:b8:70:74:5e:ec:f3:34:3a:e4:84:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3A0F880745420FB2B86A2D1C198849D8B7C676C
Validity
Not Before: Apr 26 08:45:42 2024 GMT
Not After : Apr 27 09:08:42 2024 GMT
Subject: CN=2FC0B157660935BA066130499F51729E135A4687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:b8:ab:d1:67:e6:1b:74:9d:a2:53:6a:66:
6f:4e:28:14:05:7f:ea:b3:ca:3b:be:3b:0c:b9:44:
d6:36:00:30:56:34:80:c3:89:6f:d1:a3:17:06:7f:
1c:4d:37:3c:10:e6:92:fc:d9:68:55:20:17:c4:49:
5b:c2:fa:53:95:1f:03:54:b3:d1:5d:23:da:9a:7d:
d7:88:77:e3:de:79:3f:c2:f7:c0:30:7f:ba:fd:ab:
b8:2e:de:8d:26:4a:e6:96:10:03:fe:3f:fb:fa:1c:
1b:35:56:c4:13:74:e4:20:d7:a6:fc:a9:30:22:c7:
07:39:3d:e0:79:4d:c5:d7:9a:bd:00:44:83:5a:ee:
e4:fc:cf:69:01:87:c3:15:f1:0c:57:92:16:3f:3c:
1f:ec:82:50:11:41:1d:52:1e:a8:e3:22:23:8c:c2:
d3:56:03:f9:f9:43:06:ea:cc:0c:7e:e6:57:28:f6:
6e:1e:08:c2:f8:a9:2c:92:e9:34:f7:d6:a5:67:96:
a5:4f:aa:c1:19:7e:dd:6b:bd:16:cd:53:d1:20:8f:
cf:c3:02:90:52:b1:ef:5e:5c:d3:e5:e8:7e:dc:37:
09:c1:52:da:ff:c4:e5:43:34:b3:f5:0e:8e:6a:aa:
80:3f:e1:43:55:20:5c:af:e1:06:00:c3:19:69:b4:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C0:B1:57:66:09:35:BA:06:61:30:49:9F:51:72:9E:13:5A:46:87
X509v3 Authority Key Identifier:
keyid:D3:A0:F8:80:74:54:20:FB:2B:86:A2:D1:C1:98:84:9D:8B:7C:67:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:41:d0:cd:69:8d:8b:00:f1:51:fc:c3:1c:68:03:ed:06:de:
d4:e4:ff:f0:6e:c8:05:5c:38:ad:80:35:e2:c6:7f:ca:ec:c4:
0b:db:20:07:95:77:ad:46:cc:af:b8:49:56:12:0a:aa:24:b2:
01:aa:b2:7b:5f:88:3c:0f:cf:8d:16:f4:55:76:06:24:13:6a:
88:e9:4d:a0:57:54:4d:c6:d5:6c:09:50:33:77:35:d1:98:51:
cb:b0:ef:23:b0:61:cf:3c:cd:c7:75:e2:12:d0:0a:4c:5e:e9:
cb:ec:72:10:62:58:f3:55:3b:98:5d:a2:f9:28:76:38:b8:41:
89:5d:cb:72:d4:00:93:9d:0a:24:0b:58:8a:26:9e:48:74:8c:
78:d3:22:fc:b2:a6:5d:a4:2e:70:66:59:06:6d:15:cb:07:f9:
04:62:66:82:06:3e:98:16:7b:ca:10:21:8d:21:76:1e:f9:ce:
fd:1e:c1:43:26:4f:b7:c5:d7:e4:ce:52:5c:05:ad:51:ef:da:
f6:ff:96:32:37:53:1d:25:e8:48:fd:78:c3:76:05:ba:0d:aa:
2e:bf:fa:34:48:f1:d0:aa:59:fd:6c:8d:80:b7:e3:4a:ce:b3:
16:b8:41:b0:10:9b:0d:42:02:a4:9b:4a:40:e1:a5:33:d8:f1:
b5:61:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:36 2025 by rpki-client