Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/F8DFF19A672A7674864D5F6367842D23E68D772F.mft
File: F8DFF19A672A7674864D5F6367842D23E68D772F.mft (raw, json)
Hash identifier: imSR03OtwseWUysVQqkD2WBmY9rw0Nh2LZpcO/mxL9Y=
Subject key identifier: 74:F0:53:06:8D:86:AA:B7:E5:6B:7F:FB:F0:E8:E8:4A:1D:4A:DC:2F
Authority key identifier: F8:DF:F1:9A:67:2A:76:74:86:4D:5F:63:67:84:2D:23:E6:8D:77:2F
Certificate issuer: /CN=F8DFF19A672A7674864D5F6367842D23E68D772F
Certificate serial: 0C2503E8150921ABEDBE6DFC3B4B2E6CA34EAD88
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F8DFF19A672A7674864D5F6367842D23E68D772F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/F8DFF19A672A7674864D5F6367842D23E68D772F.mft
Manifest number: 01BC
Signing time: Sat 01 Feb 2025 13:52:51 +0000
Manifest this update: Sat 01 Feb 2025 13:47:51 +0000
Manifest next update: Sun 02 Feb 2025 17:41:51 +0000
Files and hashes: 1: F8DFF19A672A7674864D5F6367842D23E68D772F.crl (hash: c4y3cZtSdHlAOaAYz4P5ty+H1982o2J9YqLBFXuvkps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:25:03:e8:15:09:21:ab:ed:be:6d:fc:3b:4b:2e:6c:a3:4e:ad:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8DFF19A672A7674864D5F6367842D23E68D772F
Validity
Not Before: Feb 1 13:47:51 2025 GMT
Not After : Feb 2 17:41:51 2025 GMT
Subject: CN=74F053068D86AAB7E56B7FFBF0E8E84A1D4ADC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:52:e5:61:3f:58:80:d7:01:19:ee:a1:90:
cd:b5:a9:7e:ba:5d:a5:59:8d:e0:3c:17:2e:8f:b6:
35:7e:cb:f6:9f:4e:60:d1:0b:e5:33:b3:25:d4:17:
67:3e:c9:87:76:ff:d2:bd:3b:b9:92:4a:75:9a:49:
12:f6:98:c3:16:f3:bc:df:aa:7b:28:08:19:b4:ce:
d4:d7:96:0f:52:93:a7:5e:04:89:d3:59:81:31:56:
d2:f7:d2:25:42:23:e5:0b:c5:4e:56:fd:b8:97:bc:
fd:50:44:77:72:e2:c8:91:61:6f:6c:e4:71:95:e4:
34:d7:ca:7e:0d:13:af:85:8a:00:6e:f6:81:84:ca:
41:09:79:6f:16:33:69:7d:84:53:23:22:21:0a:7d:
a3:09:45:64:de:3c:4b:d6:59:25:89:d0:e5:ac:06:
0b:41:fe:72:83:81:e8:2c:a2:c5:22:3e:4b:c3:4b:
86:b7:c8:27:9d:c5:78:d5:a9:65:7c:0c:8d:0f:7c:
d9:88:25:23:87:4c:99:f2:2a:a6:8b:99:8c:fc:26:
16:6e:b7:60:e7:c1:85:67:98:0c:99:a9:2d:08:a0:
77:e1:09:85:d3:3b:16:fe:97:98:ae:03:57:bd:3e:
44:06:49:55:74:76:2d:21:3f:53:31:ee:37:24:d5:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:53:06:8D:86:AA:B7:E5:6B:7F:FB:F0:E8:E8:4A:1D:4A:DC:2F
X509v3 Authority Key Identifier:
keyid:F8:DF:F1:9A:67:2A:76:74:86:4D:5F:63:67:84:2D:23:E6:8D:77:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/F8DFF19A672A7674864D5F6367842D23E68D772F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F8DFF19A672A7674864D5F6367842D23E68D772F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/2/F8DFF19A672A7674864D5F6367842D23E68D772F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:48:54:04:7e:dc:93:e1:5f:f9:1a:b8:36:90:b7:30:ed:
94:fd:0b:c3:95:d0:07:64:08:ee:61:52:d5:32:73:8c:75:42:
53:18:57:26:08:fd:a5:d6:37:c1:84:75:95:7f:3a:13:12:98:
4c:b6:28:7a:e0:5f:dc:c3:35:0d:5b:e4:60:ff:35:7a:80:60:
56:9c:9a:eb:60:d3:69:c1:de:a7:cf:f3:b6:f1:ff:47:d4:a4:
2e:06:e5:7c:3a:a0:8e:3b:75:de:d1:20:4f:97:2a:1e:4a:49:
72:c0:55:ac:b6:54:d6:1f:c3:31:1a:b4:30:6f:ae:00:b6:3f:
d2:43:54:5b:57:42:46:90:14:3b:5f:63:41:f2:1a:bc:3f:03:
ff:0c:7a:75:26:cf:85:a1:9d:67:f6:7b:65:77:76:56:2b:9b:
36:e6:2e:9a:b2:2b:03:16:8d:31:f0:57:39:59:4e:20:5c:b0:
7e:e7:97:fc:e9:a5:e8:24:20:95:00:94:67:c7:21:bb:1a:9c:
d4:6f:00:b1:a6:60:ef:6e:41:16:0d:5d:dc:ee:b8:c7:1a:f4:
6e:47:7b:32:47:7d:52:f3:f7:20:64:39:d7:2b:7b:be:21:46:
71:8a:c0:17:28:7f:65:85:5b:4b:d2:76:41:b9:d1:b5:94:30:
94:a5:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:55:07 2025 by rpki-client