Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df401fed-a808-45d8-bdf8-dd0bd2899b13/0/14F67B94DF3406CF5E01480EC328AB6508737CB7.mft
File: 14F67B94DF3406CF5E01480EC328AB6508737CB7.mft (raw, json)
Hash identifier: bgwWdGkxiHs/QhwSRkYvGAVfaXZWc8G3Jm2F4dkC0xk=
Subject key identifier: A9:3C:5F:18:F8:FF:E6:F5:9B:81:32:79:8D:65:B8:1E:4F:2F:2D:53
Authority key identifier: 14:F6:7B:94:DF:34:06:CF:5E:01:48:0E:C3:28:AB:65:08:73:7C:B7
Certificate issuer: /CN=14f67b94df3406cf5e01480ec328ab6508737cb7
Certificate serial: 1B14473082718CF0D5CF2F8DC2A75B07182B9BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPZ7lN80Bs9eAUgOwyirZQhzfLc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df401fed-a808-45d8-bdf8-dd0bd2899b13/0/14F67B94DF3406CF5E01480EC328AB6508737CB7.mft
Manifest number: 02
Signing time: Sat 22 Mar 2025 13:12:08 +0000
Manifest this update: Sat 22 Mar 2025 13:07:08 +0000
Manifest next update: Sun 23 Mar 2025 15:12:08 +0000
Files and hashes: 1: 14F67B94DF3406CF5E01480EC328AB6508737CB7.crl (hash: XRiCIH6MM7qHDNh6aOVxBL2/jl7OyA3+TBwX2pG/vao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:14:47:30:82:71:8c:f0:d5:cf:2f:8d:c2:a7:5b:07:18:2b:9b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14f67b94df3406cf5e01480ec328ab6508737cb7
Validity
Not Before: Mar 22 13:07:08 2025 GMT
Not After : Mar 23 15:12:08 2025 GMT
Subject: CN=A93C5F18F8FFE6F59B8132798D65B81E4F2F2D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:31:d0:10:f1:48:6d:9b:ed:09:48:c7:ba:
bb:17:05:ac:39:3e:76:3a:ae:f1:7a:a0:c9:9c:5a:
21:8f:07:1d:06:65:20:08:5b:a3:32:e5:55:9b:c2:
79:05:d6:5d:c8:7e:82:21:30:eb:12:0b:a2:0e:02:
f8:a0:f4:5c:87:9a:58:1c:c2:1c:b2:77:1f:bf:71:
45:0a:53:ac:e7:0c:fe:96:45:66:8f:d4:d4:70:61:
7c:f5:2a:50:55:5c:89:94:09:6d:86:79:4b:26:52:
40:1a:09:91:1a:9e:6a:ec:73:4f:33:00:22:d5:7e:
16:0e:0b:46:30:eb:8d:22:20:76:5b:17:de:55:43:
18:71:fa:b9:92:af:77:be:0b:26:4b:ae:7e:3a:62:
64:9d:81:6d:0c:6d:b3:a7:a8:52:7f:4a:16:74:83:
db:31:c3:6d:3c:8f:2d:ff:d6:f2:93:87:9c:82:0c:
e1:f8:cb:fc:e1:4c:bf:d6:54:30:d9:7b:16:eb:5d:
b9:c1:38:cb:3c:33:30:5d:28:fd:bb:b5:27:a8:4d:
03:57:70:74:f9:23:e1:32:f7:a9:fb:23:06:f0:8d:
3f:5f:ed:5e:35:70:31:be:05:62:3d:32:95:9d:08:
c7:b3:58:45:06:f9:07:0c:7c:13:cc:3f:7f:2d:bb:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:5F:18:F8:FF:E6:F5:9B:81:32:79:8D:65:B8:1E:4F:2F:2D:53
X509v3 Authority Key Identifier:
keyid:14:F6:7B:94:DF:34:06:CF:5E:01:48:0E:C3:28:AB:65:08:73:7C:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/df401fed-a808-45d8-bdf8-dd0bd2899b13/0/14F67B94DF3406CF5E01480EC328AB6508737CB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPZ7lN80Bs9eAUgOwyirZQhzfLc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df401fed-a808-45d8-bdf8-dd0bd2899b13/0/14F67B94DF3406CF5E01480EC328AB6508737CB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fe:b3:59:63:33:3d:40:db:62:70:33:4b:35:e3:a2:49:80:
5b:5b:74:92:d4:c0:35:e0:8f:6a:ef:06:4d:1f:a3:97:0a:60:
11:93:a9:5e:78:20:3c:8a:0d:f1:96:b0:62:23:3d:6f:96:01:
75:38:89:07:06:b4:0d:5e:3b:a4:e6:13:a1:d9:e1:65:e9:67:
ad:b6:dc:0a:bb:ec:f2:77:c7:6f:d7:24:f2:06:a2:c1:bc:d1:
48:95:ee:a7:67:69:fd:81:cb:06:c7:5e:93:90:aa:48:1b:84:
35:bd:5d:c6:d7:75:89:43:08:ed:05:09:6a:7f:b4:2f:0d:5a:
39:2e:64:31:64:40:f0:e6:74:21:80:2f:b3:59:5f:a4:14:b3:
3b:df:85:b2:e3:7a:c0:14:3f:c1:88:fd:ab:98:de:65:12:12:
52:8f:d1:10:86:94:15:0f:43:33:b7:c0:b6:f1:cf:b3:9f:5d:
17:b2:31:4c:23:e1:9f:e4:06:63:b6:9c:62:22:8b:aa:51:fe:
3c:05:da:46:21:9e:c2:78:3f:cb:fc:40:a7:12:d9:6c:60:a3:
54:b2:86:95:78:de:73:50:8f:7c:ad:8d:e8:11:90:39:94:18:
d5:c0:1c:d9:99:8f:8f:bc:ae:9f:1f:7d:16:d0:25:f0:3a:51:
81:26:27:c0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGxRHMIJxjPDVzy+NwqdbBxgrm60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRmNjdiOTRkZjM0MDZjZjVlMDE0ODBlYzMyOGFiNjUw
ODczN2NiNzAeFw0yNTAzMjIxMzA3MDhaFw0yNTAzMjMxNTEyMDhaMDMxMTAvBgNV
BAMTKEE5M0M1RjE4RjhGRkU2RjU5QjgxMzI3OThENjVCODFFNEYyRjJENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MjHQEPFIbZvtCUjHursXBaw5
PnY6rvF6oMmcWiGPBx0GZSAIW6My5VWbwnkF1l3IfoIhMOsSC6IOAvig9FyHmlgc
whyydx+/cUUKU6znDP6WRWaP1NRwYXz1KlBVXImUCW2GeUsmUkAaCZEanmrsc08z
ACLVfhYOC0Yw640iIHZbF95VQxhx+rmSr3e+CyZLrn46YmSdgW0MbbOnqFJ/ShZ0
g9sxw208jy3/1vKTh5yCDOH4y/zhTL/WVDDZexbrXbnBOMs8MzBdKP27tSeoTQNX
cHT5I+Ey96n7IwbwjT9f7V41cDG+BWI9MpWdCMezWEUG+QcMfBPMP38tu241AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqTxfGPj/5vWbgTJ5jWW4Hk8vLVMwHwYDVR0j
BBgwFoAUFPZ7lN80Bs9eAUgOwyirZQhzfLcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGY0MDFmZWQtYTgwOC00NWQ4LWJkZjgtZGQwYmQyODk5
YjEzLzAvMTRGNjdCOTRERjM0MDZDRjVFMDE0ODBFQzMyOEFCNjUwODczN0NCNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZQWjdsTjgwQnM5ZUFVZ093eWlyWlFo
emZMYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjQwMWZlZC1h
ODA4LTQ1ZDgtYmRmOC1kZDBiZDI4OTliMTMvMC8xNEY2N0I5NERGMzQwNkNGNUUw
MTQ4MEVDMzI4QUI2NTA4NzM3Q0I3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjP6zWWMzPUDbYnAzSzXj
okmAW1t0ktTANeCPau8GTR+jlwpgEZOpXnggPIoN8ZawYiM9b5YBdTiJBwa0DV47
pOYTodnhZelnrbbcCrvs8nfHb9ck8gaiwbzRSJXup2dp/YHLBsdek5CqSBuENb1d
xtd1iUMI7QUJan+0Lw1aOS5kMWRA8OZ0IYAvs1lfpBSzO9+FsuN6wBQ/wYj9q5je
ZRISUo/REIaUFQ9DM7fAtvHPs59dF7IxTCPhn+QGY7acYiKLqlH+PAXaRiGewng/
y/xApxLZbGCjVLKGlXjec1CPfK2N6BGQOZQY1cAc2ZmPj7yunx99FtAl8DpRgSYn
wA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:26 2025 by rpki-client