Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
File: AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft (raw, json)
Hash identifier: klIsRhJis3XpD86bEp4rPFZZQ4MS6sJE6vNsPpNH2zw=
Subject key identifier: 76:A2:1C:FF:7E:80:CF:D1:6E:F6:3A:69:1E:2B:B4:22:FB:FD:71:B5
Authority key identifier: AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
Certificate issuer: /CN=aa0f2492a1847db45a3a340f1b6d8d30ffaabe8a
Certificate serial: 38A680A1E349DC9CC5B7352A2370F9F5E43CF932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg8kkqGEfbRaOjQPG22NMP-qvoo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
Manifest number: 0333
Signing time: Sat 29 Jun 2024 22:43:56 +0000
Manifest this update: Sat 29 Jun 2024 22:38:56 +0000
Manifest next update: Mon 01 Jul 2024 02:27:56 +0000
Files and hashes: 1: AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.crl (hash: elRQwL3WD0zawsu2oH69syid976zfbLCnzumtw5GvWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a6:80:a1:e3:49:dc:9c:c5:b7:35:2a:23:70:f9:f5:e4:3c:f9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f2492a1847db45a3a340f1b6d8d30ffaabe8a
Validity
Not Before: Jun 29 22:38:56 2024 GMT
Not After : Jul 1 02:27:56 2024 GMT
Subject: CN=76A21CFF7E80CFD16EF63A691E2BB422FBFD71B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:80:8a:bb:52:b0:2b:34:09:11:49:45:21:
b2:57:aa:e6:d4:35:cd:33:f4:28:c8:1e:71:ce:cc:
24:d8:83:5f:a8:27:d5:ee:bb:90:07:ba:33:f0:4a:
0b:ef:6f:67:5c:27:fc:e5:9d:93:3c:95:2a:71:5b:
ec:28:d5:a8:48:54:3b:41:b5:d5:71:e1:6c:73:c7:
fd:4b:f0:bc:a6:35:aa:ef:2b:7d:2d:63:fb:1a:63:
0e:f3:82:aa:e5:87:72:e6:9d:2a:e7:5d:45:a2:df:
e4:84:d5:dc:95:01:22:ab:c8:9e:ef:16:32:aa:f0:
ba:71:7b:d9:c4:63:d5:34:30:9c:dc:9b:07:14:99:
c5:80:b4:b3:ea:0c:ed:92:d1:57:dc:31:60:05:12:
9e:84:b4:4c:11:13:e2:cb:25:96:91:de:ec:74:aa:
bf:eb:7c:b7:48:69:ff:99:23:55:a9:54:d4:eb:40:
6c:92:26:cb:a3:ec:aa:55:76:85:85:56:52:9f:44:
74:d6:a6:17:46:8f:4c:12:2d:99:0e:3c:f6:b5:5a:
46:d4:6b:b3:ee:89:dd:54:10:3d:52:bb:27:24:98:
6d:8d:7c:07:e6:0e:1a:f5:d4:48:40:a5:72:06:cf:
73:c0:a5:26:21:42:32:e2:d6:22:90:f3:a1:7b:b2:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:1C:FF:7E:80:CF:D1:6E:F6:3A:69:1E:2B:B4:22:FB:FD:71:B5
X509v3 Authority Key Identifier:
keyid:AA:0F:24:92:A1:84:7D:B4:5A:3A:34:0F:1B:6D:8D:30:FF:AA:BE:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg8kkqGEfbRaOjQPG22NMP-qvoo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/6/AA0F2492A1847DB45A3A340F1B6D8D30FFAABE8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:24:de:5a:f3:ef:dc:81:84:ce:3f:28:b1:b1:7c:4b:d6:33:
7d:3b:3f:06:a7:5a:1d:b5:b5:e2:6b:53:29:38:a0:37:96:1c:
52:d8:d3:78:53:8e:1f:50:31:d0:24:54:b4:5d:fb:ba:92:f8:
ac:ae:53:80:69:f7:33:a6:d4:c4:6a:4e:0c:a4:0a:ce:df:2c:
b9:58:1a:18:ee:a5:52:34:18:ef:53:16:f0:1b:67:3a:2f:f0:
96:ea:a4:ff:10:bd:1b:e8:57:90:c6:eb:13:8d:f7:57:64:03:
76:b5:76:cc:34:6b:1c:d8:37:b1:02:58:e4:55:d3:6c:60:65:
ab:b7:05:27:91:df:cd:c4:70:b3:66:27:7c:a2:1d:77:ae:09:
57:bd:94:e0:56:48:dc:11:9b:23:ce:10:6a:35:a6:56:73:cd:
39:3b:63:ef:cc:14:31:38:02:a0:2f:ff:aa:8a:21:d2:5d:71:
0d:01:e8:53:4e:42:94:16:24:3c:22:8a:b8:f6:85:78:e7:0e:
16:28:6e:62:bd:fc:2e:e7:3f:8e:86:fa:35:bc:b4:5f:d3:78:
45:f5:6e:54:98:27:08:a1:4c:4f:20:e7:40:98:92:6c:a5:dd:
c6:8d:72:9f:61:41:1b:ac:5e:e3:e7:93:9d:2e:e7:99:10:a8:
8e:a5:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:29:29 2024 by rpki-client on console-ams.rpki-client.org