Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
File: DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft (raw, json)
Hash identifier: 0d2F/Wt8bSuf9bhDgauX3FD2ceEE/YWq9qTkI5Fm2DU=
Subject key identifier: 8B:65:F3:C9:3E:47:7B:6D:61:31:B0:7B:03:62:9D:7C:0F:02:3F:8B
Authority key identifier: DD:A3:7A:F6:93:5A:69:E2:BE:1C:7D:86:46:85:80:72:6A:8B:30:DE
Certificate issuer: /CN=dda37af6935a69e2be1c7d86468580726a8b30de
Certificate serial: 77402ED55EC30709360D9179512249477DE0D68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
Manifest number: 032C
Signing time: Sat 29 Jun 2024 23:38:56 +0000
Manifest this update: Sat 29 Jun 2024 23:33:56 +0000
Manifest next update: Mon 01 Jul 2024 02:21:56 +0000
Files and hashes: 1: DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl (hash: yXFwnivE443/7e6zS0uKoqvA9b8hXniuWwIEYu14OqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:40:2e:d5:5e:c3:07:09:36:0d:91:79:51:22:49:47:7d:e0:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda37af6935a69e2be1c7d86468580726a8b30de
Validity
Not Before: Jun 29 23:33:56 2024 GMT
Not After : Jul 1 02:21:56 2024 GMT
Subject: CN=8B65F3C93E477B6D6131B07B03629D7C0F023F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:a6:aa:18:51:9e:c0:6b:54:57:87:ca:25:
94:ba:8a:db:54:7c:38:0b:aa:6b:c4:11:18:86:1d:
60:10:3d:b0:1f:ad:87:b1:b5:08:27:74:39:11:6a:
4c:30:8c:31:d4:ab:a2:cd:85:83:b7:a8:4b:a3:3b:
71:f3:30:77:1d:a9:82:97:34:f0:ee:78:ef:60:92:
eb:6e:76:3f:97:c6:a3:da:88:df:b6:e4:00:63:32:
2d:31:eb:11:65:fb:51:1c:aa:10:29:00:f5:87:4b:
96:c4:65:6e:c8:ca:cf:b8:86:c7:69:79:40:95:44:
9f:f1:c5:a3:b8:96:5e:6f:ad:fe:b2:04:f0:9e:2c:
30:14:bd:37:b9:5f:33:ec:bd:89:07:59:ff:77:96:
74:4e:de:22:f6:6d:a2:9f:df:8c:5f:35:80:5b:fb:
24:fa:3b:3c:e2:cf:9e:03:d9:8d:e5:68:5c:f1:6a:
43:69:80:d2:8d:cf:ff:16:d6:83:f8:1b:b9:39:81:
71:82:b8:56:6e:c1:3a:65:8e:5e:17:59:fd:b6:98:
2c:a1:4e:fc:ce:e2:f1:14:5f:68:60:4d:ee:3a:df:
75:cc:e4:6d:94:cf:fc:5b:d8:ac:11:52:5f:f6:d8:
1e:58:a2:ab:9d:1d:60:db:fb:e1:75:76:b0:6b:da:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:F3:C9:3E:47:7B:6D:61:31:B0:7B:03:62:9D:7C:0F:02:3F:8B
X509v3 Authority Key Identifier:
keyid:DD:A3:7A:F6:93:5A:69:E2:BE:1C:7D:86:46:85:80:72:6A:8B:30:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:db:d5:cb:1e:6a:2c:93:07:7f:85:15:40:08:83:56:5f:a5:
f8:10:00:00:22:df:49:57:f5:4a:76:fc:fd:27:d4:60:a8:92:
3b:28:e7:ab:bd:20:1a:a9:06:e1:14:97:3b:93:ad:57:89:10:
d3:a4:56:ac:d4:8e:bc:80:1a:93:5d:5e:60:52:79:69:03:be:
51:b5:1a:d8:f3:23:98:b9:27:a0:e0:9e:02:fe:09:8b:b5:5a:
ba:89:57:2f:16:47:5f:6e:54:32:ea:0d:80:41:64:f5:e6:1a:
60:5b:a1:8a:80:86:50:60:44:19:1b:c8:bb:2a:8e:52:ac:b3:
cf:2d:56:00:af:20:4a:a9:b4:18:ee:09:cc:a5:4b:4f:51:4c:
19:c3:43:a2:cb:01:d5:f7:26:2b:79:0d:0e:a1:79:f1:42:8a:
1f:02:29:23:29:6f:4a:28:f9:ec:d0:be:8f:c5:54:62:7b:49:
44:90:b0:cc:ad:cc:33:1a:ce:6e:d9:98:91:c0:18:79:13:2f:
f5:35:3a:64:5f:13:c2:c8:a7:02:3b:a5:0b:61:7a:1b:98:72:
6b:3b:bc:c1:b9:4d:1a:ff:90:c3:06:6e:04:51:fb:3e:9d:55:
87:d4:d6:73:01:79:c4:5e:fc:07:c4:fd:a7:27:dc:1c:23:2e:
0f:af:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 17:34:14 2024 by rpki-client on console-fra.rpki-client.org