Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/0/52F4CAA87D081FC25DDF117BE8A9FE990AA120BC.mft
File: 52F4CAA87D081FC25DDF117BE8A9FE990AA120BC.mft (raw, json)
Hash identifier: 0yRh/i/JcnrPb6pXgg8J73cBjB2lkze4Zov9jJ/Z/IA=
Subject key identifier: 8F:61:E7:F3:C7:1E:D8:C2:F6:47:7F:09:82:92:A1:6C:00:DB:2D:3C
Authority key identifier: 52:F4:CA:A8:7D:08:1F:C2:5D:DF:11:7B:E8:A9:FE:99:0A:A1:20:BC
Certificate issuer: /CN=52f4caa87d081fc25ddf117be8a9fe990aa120bc
Certificate serial: 2F283011394B6562AB24C40CB8DF372F7F478203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvTKqH0IH8Jd3xF76Kn-mQqhILw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/0/52F4CAA87D081FC25DDF117BE8A9FE990AA120BC.mft
Manifest number: 8E
Signing time: Wed 01 Nov 2023 05:11:59 +0000
Manifest this update: Wed 01 Nov 2023 05:06:59 +0000
Manifest next update: Thu 02 Nov 2023 05:40:59 +0000
Files and hashes: 1: 52F4CAA87D081FC25DDF117BE8A9FE990AA120BC.crl (hash: hftOlHoZsodVYJbhc51aqziu+DbeYe1CZVXl0J63WJE=)
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:28:30:11:39:4b:65:62:ab:24:c4:0c:b8:df:37:2f:7f:47:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f4caa87d081fc25ddf117be8a9fe990aa120bc
Validity
Not Before: Nov 1 05:06:59 2023 GMT
Not After : Nov 2 05:40:59 2023 GMT
Subject: CN=8F61E7F3C71ED8C2F6477F098292A16C00DB2D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:f1:cf:84:33:69:1b:ab:6b:5d:96:12:37:
4d:36:58:09:d3:a5:cd:48:57:0b:3a:88:de:62:5a:
08:86:c1:9a:65:23:f4:cc:47:69:d0:68:3f:91:5e:
8d:dd:35:fd:31:40:53:4e:a6:53:62:8b:b2:11:b9:
ab:ce:ff:ff:b0:52:59:7c:16:05:1c:77:19:80:5d:
c3:1d:10:6a:1a:e5:3a:c7:f4:ec:cb:41:03:31:a8:
52:e3:49:1e:2b:51:65:5f:62:b5:66:03:b9:26:70:
38:df:6b:b1:7f:cc:a0:8b:6c:83:68:e7:31:37:ac:
46:60:d8:53:00:74:7b:29:de:f9:4e:d1:34:27:96:
9e:15:ea:f9:a7:17:5f:5c:20:9e:4b:91:34:fb:5e:
81:85:10:17:9f:f4:b0:7d:5d:92:58:27:8b:5d:b8:
13:ad:22:1a:50:12:1c:d1:ce:ae:87:8e:f8:be:0e:
87:be:1a:d3:5f:59:67:42:4c:cc:2c:8c:9e:3b:5e:
a5:5b:4e:bc:bf:6c:ab:27:0c:20:7f:b8:7f:4b:3f:
b1:9d:69:e1:36:c3:ff:ed:4c:f8:29:a9:e7:eb:fb:
f6:fd:89:fb:fc:f5:da:df:ae:20:85:c1:4c:95:65:
a1:74:c7:10:49:ee:ee:f8:87:70:88:9f:fa:fa:8f:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:E7:F3:C7:1E:D8:C2:F6:47:7F:09:82:92:A1:6C:00:DB:2D:3C
X509v3 Authority Key Identifier:
keyid:52:F4:CA:A8:7D:08:1F:C2:5D:DF:11:7B:E8:A9:FE:99:0A:A1:20:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/0/52F4CAA87D081FC25DDF117BE8A9FE990AA120BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvTKqH0IH8Jd3xF76Kn-mQqhILw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/0/52F4CAA87D081FC25DDF117BE8A9FE990AA120BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:23:a7:9a:fd:40:b6:d5:3a:a6:cd:89:c8:b7:89:f9:23:42:
7e:87:4f:33:05:e8:48:50:4c:9d:92:e7:72:a3:46:53:79:3b:
2e:9d:1e:21:46:37:63:10:05:3c:11:a1:8c:15:a9:6c:c9:8c:
6c:c7:83:13:a3:53:1b:f8:c3:68:b2:7f:33:46:76:6a:b6:3f:
3d:d4:d7:01:dd:8e:a0:b5:4f:89:d9:d5:07:f1:0f:49:ee:f4:
a8:40:0b:ff:6d:48:15:0d:35:31:6a:25:d0:2b:11:8d:4e:f4:
fa:cc:02:c8:ef:1e:02:67:b4:fa:83:3d:ca:42:b8:c2:1f:14:
3a:96:1e:33:a5:f3:98:9f:aa:31:5f:79:49:90:02:f6:f8:fa:
88:43:0f:65:da:df:5d:05:7a:b9:8e:18:fc:d7:e5:05:ea:2f:
46:aa:db:90:bb:3b:7c:95:57:de:e8:fe:c4:e9:eb:07:88:6d:
ed:60:bb:d5:10:29:d3:e8:bf:ba:b0:25:74:60:8a:83:4a:f4:
62:ea:4f:75:30:2b:28:84:67:35:b5:05:23:0c:43:6a:86:76:
ab:c6:f9:c7:6c:57:0a:37:28:5d:05:e8:97:8c:54:f9:73:b9:
c8:68:3d:20:1c:94:1e:36:e1:c6:a4:a4:fa:dd:ba:f6:d4:e7:
51:44:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 13:01:04 2023 by rpki-client on console-fra.rpki-client.org