Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft
File: C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft (raw, json)
Hash identifier: hNXCTNc73rQZDjILjw8aOwQpbYUUvmNa+RtdFJi7CNA=
Subject key identifier: F2:DF:61:E6:28:44:7E:59:68:8C:D8:AC:8C:FE:B2:81:6B:9D:0C:7E
Authority key identifier: C1:8E:8D:54:0B:18:BA:52:F3:E8:F8:BB:D8:1E:3B:F7:0A:2B:CB:85
Certificate issuer: /CN=c18e8d540b18ba52f3e8f8bbd81e3bf70a2bcb85
Certificate serial: 33B9CE88E6EFFD5FDDFC67AAB7714E5BDAF33C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY6NVAsYulLz6Pi72B479wory4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft
Manifest number: 38
Signing time: Thu 05 Sep 2024 15:46:28 +0000
Manifest this update: Thu 05 Sep 2024 15:41:28 +0000
Manifest next update: Fri 06 Sep 2024 17:02:28 +0000
Files and hashes: 1: C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.crl (hash: iBZgjpqFKnmIzc0nLhJrcOq48zSzoyiNCKsiUWtGp7w=)
2: AS214757.asa (hash: OIIdlODCG/htLKtKDjwRkALm0ZrVhzYs2dsERhPpzvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b9:ce:88:e6:ef:fd:5f:dd:fc:67:aa:b7:71:4e:5b:da:f3:3c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18e8d540b18ba52f3e8f8bbd81e3bf70a2bcb85
Validity
Not Before: Sep 5 15:41:28 2024 GMT
Not After : Sep 6 17:02:28 2024 GMT
Subject: CN=F2DF61E628447E59688CD8AC8CFEB2816B9D0C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:f3:b0:ad:b3:34:1a:fc:41:c9:04:9e:44:
eb:48:52:39:7b:49:c6:20:eb:b5:a9:25:a6:da:10:
84:df:c9:8a:8b:37:68:90:76:76:78:3a:8c:c0:5c:
f4:16:5e:96:3d:1a:17:2b:e5:07:6f:1d:a7:ee:50:
05:81:4d:44:0c:6b:5d:c8:c7:9e:c2:84:8c:12:c3:
f0:df:ed:1b:7b:81:98:7f:f4:b5:4f:97:79:74:88:
1a:ba:b7:6e:f0:0b:11:22:1f:42:2e:25:4a:69:82:
35:3c:35:64:81:f1:7e:4a:04:26:58:12:c4:47:2d:
4f:04:84:31:91:57:c1:7e:56:10:f2:ed:18:ed:82:
20:b5:27:60:0e:7e:65:63:fa:84:70:b8:f7:41:52:
a0:bc:55:d9:03:06:67:fe:c0:dc:67:04:62:14:28:
e3:a1:77:5b:aa:dd:ca:36:08:2a:b0:18:67:a0:3f:
51:7d:bf:eb:08:c1:35:a8:5b:3d:e6:89:3e:af:38:
02:cd:dc:70:c2:94:dc:b0:fe:79:d0:ab:e9:07:35:
9d:90:7d:6d:d4:b4:a7:e6:97:2e:14:3f:e3:25:83:
41:1f:93:f1:e3:4b:24:dd:19:49:0f:c6:15:f5:90:
d5:75:ea:11:80:77:5a:c2:e0:91:71:c0:f0:4a:7a:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:61:E6:28:44:7E:59:68:8C:D8:AC:8C:FE:B2:81:6B:9D:0C:7E
X509v3 Authority Key Identifier:
keyid:C1:8E:8D:54:0B:18:BA:52:F3:E8:F8:BB:D8:1E:3B:F7:0A:2B:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY6NVAsYulLz6Pi72B479wory4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/0/C18E8D540B18BA52F3E8F8BBD81E3BF70A2BCB85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7d:89:0b:3f:81:33:f9:0f:7f:cc:13:69:5d:9b:4e:61:9d:
57:6c:59:ef:37:2c:a8:0d:b6:18:51:4a:e4:91:02:c3:60:e2:
10:19:d8:07:66:58:44:38:c5:94:55:63:a2:9b:bc:15:5c:ec:
8d:ad:47:47:2d:ad:36:b0:a5:c6:97:88:9e:f5:e8:4d:55:50:
7e:35:7d:7b:da:79:33:12:94:5d:81:87:3e:22:aa:eb:0b:a1:
c7:a6:5c:7c:4b:4c:c5:e2:30:54:6c:78:fd:64:1f:d5:a6:56:
8b:32:f2:54:a2:a1:76:ba:df:8e:24:52:4d:2e:ed:fc:64:e5:
3f:0a:4d:43:2a:8a:5b:df:fe:de:65:6d:a7:33:c1:63:72:96:
01:a8:af:8d:f4:a7:2a:a7:37:0e:d6:7b:fc:9e:07:b4:4f:6c:
63:67:9f:18:62:28:37:00:12:fd:6e:4b:c9:82:2f:e4:f3:41:
4f:44:76:e7:be:e2:2c:77:1a:1a:66:5c:8c:f2:84:29:2f:e5:
8c:b6:14:c2:86:be:53:47:1a:5e:65:9a:58:03:95:62:f6:e9:
96:13:e4:c7:de:11:2a:54:5e:cf:04:d2:45:d0:c2:62:57:50:
fb:82:f6:65:5e:63:e0:33:e7:84:27:12:ce:2f:b5:97:93:87:
ac:f8:e1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:46 2025 by rpki-client