Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft
File: 1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft (raw, json)
Hash identifier: uS65u1ZLr/1b/HJe5W06h4StTPiewyZe4wFf+ydritQ=
Subject key identifier: BB:80:05:A4:09:89:6D:87:3F:10:65:96:F5:34:5F:DB:8F:8A:A7:27
Authority key identifier: 1A:F1:44:6C:EC:44:84:C1:D2:F2:48:B4:45:B6:68:A8:7C:ED:8B:97
Certificate issuer: /CN=1af1446cec4484c1d2f248b445b668a87ced8b97
Certificate serial: 73103496370A8E46DC2BA823B6F29948C20BC669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFEbOxEhMHS8ki0RbZoqHzti5c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft
Manifest number: 1D
Signing time: Sat 03 Feb 2024 09:03:19 +0000
Manifest this update: Sat 03 Feb 2024 08:58:19 +0000
Manifest next update: Sun 04 Feb 2024 11:30:19 +0000
Files and hashes: 1: 1AF1446CEC4484C1D2F248B445B668A87CED8B97.crl (hash: ErfSEY/UZ4mJBGYI/Xdbw0tBhQfr+BgT7cR8clF5Wv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:10:34:96:37:0a:8e:46:dc:2b:a8:23:b6:f2:99:48:c2:0b:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1446cec4484c1d2f248b445b668a87ced8b97
Validity
Not Before: Feb 3 08:58:19 2024 GMT
Not After : Feb 4 11:30:19 2024 GMT
Subject: CN=BB8005A409896D873F106596F5345FDB8F8AA727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:64:39:41:3b:e6:75:ad:76:96:a5:23:76:
a6:60:8d:74:94:25:23:78:02:90:e0:9a:7b:de:53:
2c:5c:9c:ce:b4:11:13:4e:b9:63:c5:c9:b2:7f:f4:
ba:4b:e9:07:49:06:39:b9:0e:1b:95:4f:2c:2a:4e:
d2:ce:f1:fd:86:be:58:1b:40:77:b4:43:41:05:96:
86:39:6d:74:1c:08:d5:3a:d9:d7:bc:51:cf:52:34:
73:e6:7d:54:99:c1:68:c6:32:cd:64:43:b6:8a:87:
14:f9:19:02:85:4f:38:ed:ec:3b:a8:ea:cd:0e:7b:
3e:b0:05:28:28:c1:2d:f3:71:ea:5e:92:ee:6d:15:
94:69:91:ab:bd:c0:98:32:1c:66:ff:c7:a1:59:19:
a8:34:89:3c:9d:54:e6:ca:95:26:a7:66:b2:45:bf:
86:80:97:b6:f6:eb:7b:6a:3c:2a:a0:ae:0b:e9:fe:
cf:74:e9:0f:be:8d:fa:37:5e:73:73:d0:79:c0:ef:
16:89:b1:ed:9f:90:a5:5e:ee:99:64:fc:dc:4e:e4:
06:7b:4e:96:e9:9f:dd:8b:88:39:e2:b3:8d:e1:ae:
d5:95:9f:72:b6:2b:a8:68:0d:fb:49:86:83:fc:c0:
c9:d8:51:1b:b9:98:6b:75:85:b1:d9:73:f3:f3:6b:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:05:A4:09:89:6D:87:3F:10:65:96:F5:34:5F:DB:8F:8A:A7:27
X509v3 Authority Key Identifier:
keyid:1A:F1:44:6C:EC:44:84:C1:D2:F2:48:B4:45:B6:68:A8:7C:ED:8B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFEbOxEhMHS8ki0RbZoqHzti5c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/0/1AF1446CEC4484C1D2F248B445B668A87CED8B97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:33:e3:09:a6:b8:bc:03:73:e3:a9:2c:65:7d:37:2b:9a:b3:
da:e0:da:98:42:ca:a5:b5:3e:50:6a:be:e7:6c:e3:0c:4a:f6:
e7:85:f9:78:dd:c8:bd:31:a8:f4:98:a5:1c:7b:df:9c:29:81:
81:37:50:9f:dd:43:8f:31:2c:31:9f:a8:6a:c9:aa:2e:a4:8d:
d7:b1:bd:30:ed:3a:86:2a:b3:c2:20:5f:c1:82:19:69:e4:09:
09:14:3c:e9:d2:05:5f:2e:07:b6:25:b4:aa:ab:47:82:13:64:
13:7b:9f:22:a5:f4:bb:4b:56:90:57:71:27:ef:15:cc:bd:04:
b5:e3:ee:e9:1f:ce:af:01:12:5c:a1:f0:b6:6e:e4:52:3e:36:
c9:e7:36:d1:d9:5d:35:3b:0d:96:0f:50:46:d1:b7:40:82:bd:
d9:44:9f:81:f8:2f:e8:c0:5f:af:2e:3f:59:1e:9a:fb:35:93:
db:d7:c3:f0:4b:a5:ee:d3:e1:fe:c2:f2:d6:d5:f7:d2:c8:e1:
75:8e:52:a8:b6:22:68:45:0a:a1:c3:88:c0:a9:fe:21:9b:b3:
cb:75:a1:ec:9e:56:08:b4:89:48:90:18:36:b7:10:5d:b8:11:
d9:cc:75:3f:fe:4e:43:62:50:35:9c:48:ff:7f:85:58:bb:d6:
10:2d:f2:29
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcxA0ljcKjkbcK6gjtvKZSMILxmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWFmMTQ0NmNlYzQ0ODRjMWQyZjI0OGI0NDViNjY4YTg3
Y2VkOGI5NzAeFw0yNDAyMDMwODU4MTlaFw0yNDAyMDQxMTMwMTlaMDMxMTAvBgNV
BAMTKEJCODAwNUE0MDk4OTZEODczRjEwNjU5NkY1MzQ1RkRCOEY4QUE3MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIGQ5QTvmda12lqUjdqZgjXSU
JSN4ApDgmnveUyxcnM60ERNOuWPFybJ/9LpL6QdJBjm5DhuVTywqTtLO8f2Gvlgb
QHe0Q0EFloY5bXQcCNU62de8Uc9SNHPmfVSZwWjGMs1kQ7aKhxT5GQKFTzjt7Duo
6s0Oez6wBSgowS3zcepeku5tFZRpkau9wJgyHGb/x6FZGag0iTydVObKlSanZrJF
v4aAl7b263tqPCqgrgvp/s906Q++jfo3XnNz0HnA7xaJse2fkKVe7plk/NxO5AZ7
Tpbpn92LiDnis43hrtWVn3K2K6hoDftJhoP8wMnYURu5mGt1hbHZc/Pzaw0bAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUu4AFpAmJbYc/EGWW9TRf24+KpycwHwYDVR0j
BBgwFoAUGvFEbOxEhMHS8ki0RbZoqHzti5cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzhhOTgzNDYtNjA3My00Nzg5LWJkOTgtYjM3Njc1MGEx
MzAxLzAvMUFGMTQ0NkNFQzQ0ODRDMUQyRjI0OEI0NDVCNjY4QTg3Q0VEOEI5Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0d2RkViT3hFaE1IUzhraTBSYlpvcUh6
dGk1Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGE5ODM0Ni02
MDczLTQ3ODktYmQ5OC1iMzc2NzUwYTEzMDEvMC8xQUYxNDQ2Q0VDNDQ4NEMxRDJG
MjQ4QjQ0NUI2NjhBODdDRUQ4Qjk3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjPjCaa4vANz46ksZX03
K5qz2uDamELKpbU+UGq+52zjDEr254X5eN3IvTGo9JilHHvfnCmBgTdQn91DjzEs
MZ+oasmqLqSN17G9MO06hiqzwiBfwYIZaeQJCRQ86dIFXy4HtiW0qqtHghNkE3uf
IqX0u0tWkFdxJ+8VzL0EtePu6R/OrwESXKHwtm7kUj42yec20dldNTsNlg9QRtG3
QIK92USfgfgv6MBfry4/WR6a+zWT29fD8Eul7tPh/sLy1tX30sjhdY5SqLYiaEUK
ocOIwKn+IZuzy3Wh7J5WCLSJSJAYNrcQXbgR2cx1P/5OQ2JQNZxI/3+FWLvWEC3y
KQ==
Generated at Sat Feb 3 17:21:47 2024 by rpki-client on console-ams.rpki-client.org