Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft
File: 1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft (raw, json)
Hash identifier: nZ5dCgQ5T+5KCwqv7QdcmORpSysVVLeRhHPHO3ld1M8=
Subject key identifier: 1F:3E:10:C2:2B:FA:DD:6F:99:DA:87:70:B6:2D:BF:5F:4F:5B:05:27
Authority key identifier: 1A:F1:44:6C:EC:44:84:C1:D2:F2:48:B4:45:B6:68:A8:7C:ED:8B:97
Certificate issuer: /CN=1af1446cec4484c1d2f248b445b668a87ced8b97
Certificate serial: 50451477C969F57BF721B4D03B360475A485558F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFEbOxEhMHS8ki0RbZoqHzti5c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft
Manifest number: 1C
Signing time: Fri 02 Feb 2024 14:50:29 +0000
Manifest this update: Fri 02 Feb 2024 14:45:29 +0000
Manifest next update: Sat 03 Feb 2024 16:58:29 +0000
Files and hashes: 1: 1AF1446CEC4484C1D2F248B445B668A87CED8B97.crl (hash: Y3gn+AMyF3RGL4BWlKUgngaqVVbnawZRARbnWVcZYtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:45:14:77:c9:69:f5:7b:f7:21:b4:d0:3b:36:04:75:a4:85:55:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1446cec4484c1d2f248b445b668a87ced8b97
Validity
Not Before: Feb 2 14:45:29 2024 GMT
Not After : Feb 3 16:58:29 2024 GMT
Subject: CN=1F3E10C22BFADD6F99DA8770B62DBF5F4F5B0527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:92:d4:da:ca:6a:61:aa:da:6b:ca:bb:f1:
8c:0d:89:49:c8:e1:23:02:c5:70:34:e2:d3:70:d8:
22:40:25:18:df:47:e4:41:b7:3e:c5:b2:b6:c8:52:
2c:9a:7f:4f:80:13:f9:8d:71:21:fd:78:5c:da:6d:
a8:50:81:31:75:4c:66:d9:d4:6a:96:26:9f:e4:1a:
fb:54:1e:ae:6d:7c:f4:3f:66:65:74:86:6b:59:84:
5b:b8:3b:fc:ce:b7:78:16:5d:ef:4d:8c:e2:77:8a:
a3:26:48:6f:da:50:35:93:71:9d:48:3e:52:e4:d7:
c0:d3:0a:91:70:60:75:dd:9a:0a:57:a3:62:e9:23:
25:ae:cb:c9:5f:be:de:5b:1b:cc:e3:aa:1c:80:ff:
9d:d0:51:0b:52:7f:a2:3c:6b:1b:5b:76:1d:cb:6b:
35:fa:f4:54:bd:ca:6e:a8:57:45:be:e7:e6:d4:9d:
90:e9:73:a5:32:db:af:dd:83:51:cb:a2:50:21:34:
d6:fe:06:ca:82:8a:a2:79:56:64:a9:3c:bb:9c:fe:
62:28:67:00:fe:41:70:5a:6e:c7:60:a0:c3:7d:c3:
e5:cf:6d:0f:6c:c0:cf:c1:95:c0:11:66:84:34:3d:
d8:3b:c5:bf:71:4b:d7:14:88:1d:fd:0d:aa:5a:4e:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3E:10:C2:2B:FA:DD:6F:99:DA:87:70:B6:2D:BF:5F:4F:5B:05:27
X509v3 Authority Key Identifier:
keyid:1A:F1:44:6C:EC:44:84:C1:D2:F2:48:B4:45:B6:68:A8:7C:ED:8B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFEbOxEhMHS8ki0RbZoqHzti5c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7a:dc:f4:4f:fd:ed:43:69:d4:14:21:fb:ab:a3:4b:28:cc:
d5:01:b3:3c:78:77:c1:83:db:f1:c4:59:62:f8:86:fc:2c:f0:
89:3c:cd:44:6b:a7:fd:0e:27:06:6e:28:c9:24:8e:b0:44:bb:
26:33:59:fd:e0:8b:88:94:a3:db:d0:7d:bc:43:2b:ec:4e:77:
9a:17:25:51:51:f9:9f:cb:79:b8:16:5f:f8:64:c2:09:25:1b:
2e:4c:3a:ec:03:95:24:d6:89:27:3f:5f:54:c5:7d:f5:75:c2:
1a:89:a1:5b:96:c4:5d:46:3c:3a:d6:4e:e5:43:e3:e5:62:1f:
be:75:ee:58:d6:68:85:cb:db:50:b5:4a:b0:56:65:0b:67:97:
56:d9:94:70:3c:06:bd:8b:ba:92:71:22:79:44:4a:f7:5f:9b:
53:d5:d3:45:c8:dd:07:ab:5d:c6:ab:1e:25:1e:e1:c7:f3:81:
e5:88:fd:b8:d7:35:3e:d8:dd:61:57:d1:1b:10:c0:a2:5c:4d:
1f:8d:3b:61:ab:8b:42:47:8f:ee:a7:2d:d9:33:5e:f3:70:67:
ed:4a:41:34:bc:ff:d7:2e:04:c4:46:13:b6:19:69:ee:cc:2b:
e1:f3:f7:7c:c7:1b:77:de:ec:e8:17:fd:ca:10:bb:31:0d:d1:
95:a7:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:09 2025 by rpki-client