Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft
File: B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft (raw, json)
Hash identifier: qU4hSZMvbluBEAKQnTd1wBqcVWGlPkW4u/Mx1GJxBAY=
Subject key identifier: 12:1C:90:10:26:03:85:7C:D2:63:0E:34:83:32:14:EE:39:37:8F:8D
Authority key identifier: B0:1C:2D:3B:55:7A:6A:01:19:7F:CA:36:1D:DD:36:CD:39:12:1C:B8
Certificate issuer: /CN=B01C2D3B557A6A01197FCA361DDD36CD39121CB8
Certificate serial: 67B4EF86FE10505C79E5ADDFCB75093488BD95CD
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft
Manifest number: 01
Signing time: Sat 25 Nov 2023 08:27:00 +0000
Manifest this update: Sat 25 Nov 2023 08:22:00 +0000
Manifest next update: Sun 26 Nov 2023 12:18:00 +0000
Files and hashes: 1: B01C2D3B557A6A01197FCA361DDD36CD39121CB8.crl (hash: 5QN08cDIkv+jKCY+n9yxTsc9uUnwu/XZ6RGzq51Yz7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b4:ef:86:fe:10:50:5c:79:e5:ad:df:cb:75:09:34:88:bd:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B01C2D3B557A6A01197FCA361DDD36CD39121CB8
Validity
Not Before: Nov 25 08:22:00 2023 GMT
Not After : Nov 26 12:18:00 2023 GMT
Subject: CN=121C90102603857CD2630E34833214EE39378F8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:82:07:f9:01:87:8b:7a:52:c8:ec:69:17:
9a:47:26:00:56:a6:e1:fc:9d:89:32:d5:a5:6e:a4:
16:c9:71:5f:d3:7a:b8:29:d6:b9:06:c6:dc:b1:ef:
7c:df:c0:d1:df:22:62:58:7b:64:f3:cf:6e:35:9c:
2b:26:ff:5e:a0:bb:66:0c:3f:68:f7:03:d8:8e:7d:
e3:ff:b2:6c:10:80:67:2f:3a:6a:b5:17:cf:09:f0:
d1:79:81:4b:18:5d:6e:97:e2:5d:57:8f:3d:46:d7:
f6:59:41:27:b7:4f:db:a3:96:07:71:ff:24:28:75:
32:a8:5f:0c:c3:32:66:c6:b0:51:eb:90:bf:57:4c:
5c:9d:72:ef:1c:33:7d:f8:fd:1b:df:c7:ce:af:09:
22:8f:ca:ce:e1:49:4c:37:2c:df:6b:b3:3e:2a:27:
db:14:2a:5c:71:a0:57:f9:53:af:3f:80:cf:70:8b:
3d:2e:ca:6d:79:2a:b9:6a:f2:26:be:6c:6f:f2:0e:
34:e5:fc:a8:c0:69:32:46:8a:5d:54:e1:2b:c1:c0:
05:73:02:6e:d7:e9:79:8c:15:f6:73:47:45:a4:cb:
a1:6e:44:60:07:2c:ed:50:30:b1:e5:e5:1a:b3:de:
dc:01:5c:86:08:11:b5:d0:bc:18:94:40:a8:e2:9c:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:90:10:26:03:85:7C:D2:63:0E:34:83:32:14:EE:39:37:8F:8D
X509v3 Authority Key Identifier:
keyid:B0:1C:2D:3B:55:7A:6A:01:19:7F:CA:36:1D:DD:36:CD:39:12:1C:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/1/B01C2D3B557A6A01197FCA361DDD36CD39121CB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:47:54:c8:43:c8:29:53:c0:fd:69:d4:dc:8f:77:2f:12:9a:
89:4c:58:be:a6:2d:a0:92:2d:5f:5a:66:2a:3b:85:92:0d:a6:
96:df:79:35:bc:23:10:fd:ff:90:7a:69:ac:73:98:0f:c2:31:
27:07:5e:de:20:62:f3:5d:fa:12:65:8b:b8:5b:82:1e:0d:32:
1c:df:b1:0a:07:ca:5b:01:60:01:7f:cc:f4:a8:fb:74:17:73:
af:05:03:ea:c4:d3:e2:4f:63:ef:b9:b6:ee:de:4a:b6:b6:4d:
e4:d6:f7:10:79:0d:ae:5c:65:ca:60:2d:a6:36:2b:01:24:3d:
18:19:c6:84:51:65:5c:93:b2:d5:6c:ab:2e:25:ec:80:60:1a:
9a:a3:8c:23:ae:b6:bc:98:c9:fd:ae:f9:6e:c2:8c:95:54:88:
09:ed:84:77:f2:fb:2b:82:93:1b:02:4a:c3:66:e3:bf:15:9f:
03:35:ef:ad:45:8e:42:9a:bf:ce:2f:27:0c:01:fb:4c:c0:58:
51:86:8d:a0:2c:91:0e:13:6c:80:97:fe:38:29:4a:99:47:50:
b1:ed:4d:ec:1e:6b:dc:75:4f:bb:87:85:37:e6:04:11:4b:5f:
f4:6d:1e:07:81:d5:38:c8:fd:29:61:6a:ad:8e:3f:8c:ba:93:
ca:50:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:30:21 2025 by rpki-client