Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
File: 9CE26D458FF17C675885A05B981A7109B558A39D.mft (raw, json)
Hash identifier: s3g7jxV0CPEI/wTcq2Nsl26Y53tXW9MAO2V+scfg1d4=
Subject key identifier: 94:C9:0B:F0:BF:53:61:02:9C:38:41:9D:66:BE:85:EB:D0:57:15:7B
Authority key identifier: 9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D
Certificate issuer: /CN=9ce26d458ff17c675885a05b981a7109b558a39d
Certificate serial: 54BE8AB040C49817127C2D75CAC1A3E98C0BB353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
Manifest number: 016E
Signing time: Wed 12 Jun 2024 03:04:49 +0000
Manifest this update: Wed 12 Jun 2024 02:59:49 +0000
Manifest next update: Thu 13 Jun 2024 03:51:49 +0000
Files and hashes: 1: 9CE26D458FF17C675885A05B981A7109B558A39D.crl (hash: 6t2WvsJ6NlfYTptaufgi0+Sx+SqvffCanee/7FTaBcA=)
2: AS200351.asa (hash: ljesKDFNsvrZN9DoAA+Niaf5Ar+0NVNA+7Qtt/KQIFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:be:8a:b0:40:c4:98:17:12:7c:2d:75:ca:c1:a3:e9:8c:0b:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce26d458ff17c675885a05b981a7109b558a39d
Validity
Not Before: Jun 12 02:59:49 2024 GMT
Not After : Jun 13 03:51:49 2024 GMT
Subject: CN=94C90BF0BF5361029C38419D66BE85EBD057157B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:ff:74:c7:12:36:12:b7:b6:55:33:06:35:
5e:9f:7e:8e:09:6f:7e:c2:f1:9d:13:15:d9:9a:c4:
ce:54:23:f4:04:0a:1b:45:79:e3:4e:76:06:97:9e:
dd:b8:2a:60:c1:a3:a9:23:f7:4e:28:6b:14:21:30:
d6:b3:0e:00:2c:87:b8:70:ff:e6:55:db:c8:70:d5:
62:48:a4:67:88:5b:e3:f6:bf:73:90:d8:e6:fa:77:
88:55:45:16:da:4f:15:8b:ab:5b:92:e0:ec:d7:46:
f4:a5:60:4e:24:4b:de:c7:16:8c:4c:a4:4c:de:c8:
ac:d4:a0:47:47:1a:4c:83:9a:ce:b6:3f:e2:3a:fa:
9c:e6:96:b2:44:75:30:4a:9c:0b:92:34:bc:2f:37:
ff:39:5e:ec:94:43:62:d3:91:5a:8f:f9:2a:5f:57:
f4:ce:04:4a:ff:6a:3a:bc:58:d7:ab:a8:c9:e5:32:
f8:54:6d:08:b8:c3:b4:b1:c7:80:05:37:d9:0e:53:
9f:7e:a5:da:6c:b7:be:f7:93:7d:15:d9:f8:03:39:
e8:90:3d:54:a8:97:df:7b:d0:e8:66:dd:7e:9a:af:
fc:8b:94:e6:4f:08:e6:b4:6a:a1:f3:7d:13:19:5c:
d6:66:65:0b:43:43:de:53:54:6d:d2:3c:ad:3e:49:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C9:0B:F0:BF:53:61:02:9C:38:41:9D:66:BE:85:EB:D0:57:15:7B
X509v3 Authority Key Identifier:
keyid:9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:75:81:ff:60:31:81:7c:6f:dc:71:bd:51:1a:49:6e:cf:7e:
47:65:5d:51:46:39:ae:ef:cf:c0:24:49:6d:70:cd:83:7a:dd:
55:00:da:92:4f:6d:07:db:e0:74:d2:81:23:3a:7f:fe:ba:c2:
bc:3b:63:1e:f9:67:fd:2c:48:32:51:3f:e5:2e:16:30:04:b4:
31:c7:9e:9d:3c:d4:53:b9:8d:9c:69:7d:f2:d3:df:04:ab:37:
c5:4b:b6:95:1e:f1:90:48:b5:17:59:ad:5e:ed:d3:d3:23:ad:
83:fb:5e:c2:0c:8d:49:4c:71:24:10:40:1a:1a:53:8f:c2:ca:
92:a2:75:86:c1:cf:c9:b9:66:d2:a9:c1:54:60:03:6e:44:4d:
94:55:7c:ba:98:b4:bf:0a:4c:31:02:e6:c3:eb:23:66:a4:cb:
48:30:ca:df:ea:ae:ac:ad:60:7d:05:7c:d7:ae:15:0f:f4:76:
61:6f:5d:93:dd:7a:2a:07:47:c4:44:78:21:b5:bc:ba:25:a3:
bf:a6:31:58:64:76:cb:05:5a:ef:11:2c:a1:80:3e:8a:a7:f7:
c9:e3:8d:16:4b:e4:ec:72:bd:73:b0:10:ea:87:f0:2e:0e:64:
99:c3:f7:ce:ef:49:dd:f5:dd:7a:d9:1d:69:d7:54:fa:c0:5b:
87:09:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:54 2025 by rpki-client