Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e122b9-ee63-42a2-b55d-12f47087a6f0/0/BB2A929A1A344409DD93BBBED09768DA6244747C.mft
File: BB2A929A1A344409DD93BBBED09768DA6244747C.mft (raw, json)
Hash identifier: U+W8XT3sbLTmi7cOsPggWcV6QEJZh6leT2ZVmM5h/x0=
Subject key identifier: 47:33:D3:03:D9:EF:28:51:FC:65:B9:8C:AD:DF:4E:5B:D1:9F:1B:99
Authority key identifier: BB:2A:92:9A:1A:34:44:09:DD:93:BB:BE:D0:97:68:DA:62:44:74:7C
Certificate issuer: /CN=BB2A929A1A344409DD93BBBED09768DA6244747C
Certificate serial: 28CC7ED319C56212ACCC4EB91547013F97E073F3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/BB2A929A1A344409DD93BBBED09768DA6244747C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e122b9-ee63-42a2-b55d-12f47087a6f0/0/BB2A929A1A344409DD93BBBED09768DA6244747C.mft
Manifest number: 01
Signing time: Mon 03 Jun 2024 07:16:39 +0000
Manifest this update: Mon 03 Jun 2024 07:11:39 +0000
Manifest next update: Tue 04 Jun 2024 07:26:39 +0000
Files and hashes: 1: BB2A929A1A344409DD93BBBED09768DA6244747C.crl (hash: YWZqNWi995T75hygftkujbs2UebLIXiP5cf/j/ifXUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cc:7e:d3:19:c5:62:12:ac:cc:4e:b9:15:47:01:3f:97:e0:73:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB2A929A1A344409DD93BBBED09768DA6244747C
Validity
Not Before: Jun 3 07:11:39 2024 GMT
Not After : Jun 4 07:26:39 2024 GMT
Subject: CN=4733D303D9EF2851FC65B98CADDF4E5BD19F1B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:07:b2:4b:ed:72:c7:00:f2:1f:9d:6f:d1:
5d:39:22:93:e1:13:3f:da:a9:40:ea:eb:3e:6c:8d:
d2:af:d8:19:2f:7f:a5:d2:84:0a:d1:1c:31:d6:76:
f2:9b:72:df:d2:7a:3f:22:1e:4f:40:84:4c:41:dc:
e7:39:26:fb:1f:0d:3d:9c:5e:09:fd:96:3a:f2:a9:
23:e9:32:f1:36:32:7f:1d:68:a9:37:20:2a:14:be:
cb:12:43:2c:2f:22:e6:ac:9f:42:ab:b3:0d:72:a9:
67:f1:e5:19:a3:8a:7b:fd:53:ac:47:a2:a8:8c:f5:
84:9c:8d:ef:37:72:a6:9c:94:47:2e:15:1c:49:85:
71:a8:dc:2b:a6:f7:1e:49:95:88:9e:70:7f:89:a3:
98:03:26:94:bb:92:ec:ea:15:80:c8:35:de:2b:bf:
f4:f9:ad:10:40:a9:e9:53:1b:93:42:80:06:27:52:
25:c4:60:09:47:e6:b4:c7:8b:37:7a:42:d8:2a:04:
86:71:dc:d6:eb:19:45:7d:ab:a6:91:24:71:91:40:
5b:87:ac:f9:fa:b6:e2:5a:4f:5c:83:a2:30:cc:2a:
f0:cf:70:c7:33:33:03:92:74:2b:b4:6d:80:b0:ed:
b2:f8:53:a5:02:35:a2:31:e2:0e:87:88:34:1a:99:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:D3:03:D9:EF:28:51:FC:65:B9:8C:AD:DF:4E:5B:D1:9F:1B:99
X509v3 Authority Key Identifier:
keyid:BB:2A:92:9A:1A:34:44:09:DD:93:BB:BE:D0:97:68:DA:62:44:74:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e122b9-ee63-42a2-b55d-12f47087a6f0/0/BB2A929A1A344409DD93BBBED09768DA6244747C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/BB2A929A1A344409DD93BBBED09768DA6244747C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e122b9-ee63-42a2-b55d-12f47087a6f0/0/BB2A929A1A344409DD93BBBED09768DA6244747C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:86:a9:08:ba:a8:95:14:7f:7c:2f:50:78:24:12:3d:34:60:
8a:78:7c:c8:0c:70:ba:3d:b8:d4:23:26:87:98:04:ee:4d:46:
07:a4:b0:0c:6b:5e:37:08:38:99:7f:47:b7:84:27:d0:eb:8d:
a4:ee:a1:72:cb:76:ae:f6:96:bf:8c:f7:ac:df:09:1c:54:64:
36:9e:69:1d:ed:97:0e:83:ff:31:b2:b0:d4:97:47:41:7a:84:
e5:e7:ca:03:e8:c7:8c:e8:f3:d1:91:a5:f4:d8:81:52:8e:32:
1b:80:54:d6:23:e3:fa:68:5f:43:07:1c:fd:8a:aa:ae:ff:01:
6e:1f:7f:67:17:f6:36:fc:78:5d:9c:1f:eb:84:c4:53:fa:27:
ad:77:69:3f:0f:35:3c:90:dd:42:cc:c1:b3:6d:7f:60:75:7e:
e3:e7:e2:80:e0:12:8d:41:5b:58:8b:a5:54:52:49:d1:ce:1e:
89:d9:a5:a2:0e:e8:9f:fb:ba:c6:a8:fe:1a:48:e9:a6:5a:60:
10:54:48:14:a1:45:f4:02:15:0d:57:91:b1:de:37:25:0b:ee:
48:cb:2d:9a:c1:01:41:04:d6:5a:75:ef:1a:96:f4:9d:4a:f2:
f6:be:ba:3a:9d:45:8b:61:f2:1b:aa:f0:1a:42:ea:fb:b7:14:
b1:59:4d:27
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUKMx+0xnFYhKszE65FUcBP5fgc/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIyQTkyOUExQTM0NDQwOUREOTNCQkJFRDA5NzY4REE2
MjQ0NzQ3QzAeFw0yNDA2MDMwNzExMzlaFw0yNDA2MDQwNzI2MzlaMDMxMTAvBgNV
BAMTKDQ3MzNEMzAzRDlFRjI4NTFGQzY1Qjk4Q0FEREY0RTVCRDE5RjFCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yQeyS+1yxwDyH51v0V05IpPh
Ez/aqUDq6z5sjdKv2Bkvf6XShArRHDHWdvKbct/Sej8iHk9AhExB3Oc5JvsfDT2c
Xgn9ljryqSPpMvE2Mn8daKk3ICoUvssSQywvIuasn0Krsw1yqWfx5Rmjinv9U6xH
oqiM9YScje83cqaclEcuFRxJhXGo3Cum9x5JlYiecH+Jo5gDJpS7kuzqFYDINd4r
v/T5rRBAqelTG5NCgAYnUiXEYAlH5rTHizd6QtgqBIZx3NbrGUV9q6aRJHGRQFuH
rPn6tuJaT1yDojDMKvDPcMczMwOSdCu0bYCw7bL4U6UCNaIx4g6HiDQamdxVAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQURzPTA9nvKFH8ZbmMrd9OW9GfG5kwHwYDVR0j
BBgwFoAUuyqSmho0RAndk7u+0Jdo2mJEdHwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlMTIyYjktZWU2My00MmEyLWI1NWQtMTJmNDcwODdh
NmYwLzAvQkIyQTkyOUExQTM0NDQwOUREOTNCQkJFRDA5NzY4REE2MjQ0NzQ3Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0JCMkE5MjlBMUEzNDQ0
MDlERDkzQkJCRUQwOTc2OERBNjI0NDc0N0MuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvOTZlMTIyYjktZWU2My00MmEyLWI1NWQtMTJmNDcwODdhNmYw
LzAvQkIyQTkyOUExQTM0NDQwOUREOTNCQkJFRDA5NzY4REE2MjQ0NzQ3Qy5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFeGqQi6qJUUf3wvUHgkEj00YIp4fMgMcLo9uNQjJoeYBO5NRgeksAxr
XjcIOJl/R7eEJ9DrjaTuoXLLdq72lr+M96zfCRxUZDaeaR3tlw6D/zGysNSXR0F6
hOXnygPox4zo89GRpfTYgVKOMhuAVNYj4/poX0MHHP2Kqq7/AW4ff2cX9jb8eF2c
H+uExFP6J613aT8PNTyQ3ULMwbNtf2B1fuPn4oDgEo1BW1iLpVRSSdHOHonZpaIO
6J/7usao/hpI6aZaYBBUSBShRfQCFQ1XkbHeNyUL7kjLLZrBAUEE1lp17xqW9J1K
8va+ujqdRYth8huq8BpC6vu3FLFZTSc=
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:19 2024 by rpki-client on console-fra.rpki-client.org