Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
File: 6A4F35CEDC6A01683A678AB4E598897526A40880.mft (raw, json)
Hash identifier: gieW5Xk5gYFXOmJZdVlgidWgiXACnnLfjgbtiaNYtfo=
Subject key identifier: 65:BE:36:E1:FA:4C:E4:74:1A:C3:42:D2:BF:E4:3C:C4:1D:AC:03:14
Authority key identifier: 6A:4F:35:CE:DC:6A:01:68:3A:67:8A:B4:E5:98:89:75:26:A4:08:80
Certificate issuer: /CN=6a4f35cedc6a01683a678ab4e598897526a40880
Certificate serial: 420EB129AF113FFA092640066241CFDC837F1771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ak81ztxqAWg6Z4q05ZiJdSakCIA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
Manifest number: 0186
Signing time: Tue 25 Feb 2025 21:16:10 +0000
Manifest this update: Tue 25 Feb 2025 21:11:10 +0000
Manifest next update: Wed 26 Feb 2025 22:21:10 +0000
Files and hashes: 1: 6A4F35CEDC6A01683A678AB4E598897526A40880.crl (hash: evpX2FHzhQJnohNzH+bPicLwyuePQjUFSGcOMSLGugw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0e:b1:29:af:11:3f:fa:09:26:40:06:62:41:cf:dc:83:7f:17:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4f35cedc6a01683a678ab4e598897526a40880
Validity
Not Before: Feb 25 21:11:10 2025 GMT
Not After : Feb 26 22:21:10 2025 GMT
Subject: CN=65BE36E1FA4CE4741AC342D2BFE43CC41DAC0314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:a5:2d:1a:0b:a5:ea:da:60:9d:ca:c0:23:
0f:bf:95:df:30:1a:07:d7:6e:3b:46:05:fb:c5:03:
44:59:18:ac:54:bb:12:a2:90:12:6c:37:47:da:3b:
34:8b:02:13:f2:57:02:99:de:40:3b:9c:8e:8d:2c:
3a:c9:bf:45:d5:d9:be:83:41:19:92:01:ff:38:59:
12:26:8a:a0:fd:19:c3:8f:ab:b0:37:aa:9c:5d:a7:
60:99:73:c5:4a:cf:5d:f5:a0:41:7d:d5:72:25:f0:
2d:47:2d:ea:36:d7:bf:3e:b4:76:80:52:d3:81:cd:
11:f2:e9:8a:39:7f:85:98:fa:44:01:33:25:e5:99:
48:10:d1:d1:47:44:dc:2e:98:ee:c2:f4:5c:0c:78:
5d:11:85:fe:10:03:93:b3:50:74:29:c4:a2:4c:a3:
e8:bb:3e:56:60:48:e9:5f:da:b9:3f:36:c0:d7:85:
64:43:5f:21:ee:62:71:f6:34:1f:32:12:b9:9b:ab:
18:8e:fe:be:9a:05:1a:cf:a4:56:ae:6a:e2:bb:d7:
ff:ae:3e:a3:3d:a9:15:8b:37:b7:4f:49:b0:71:19:
68:61:35:30:24:d5:fa:21:07:e8:5a:ac:bb:9f:bc:
24:78:be:b7:b4:c2:69:d4:05:86:80:7d:bd:97:7a:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:36:E1:FA:4C:E4:74:1A:C3:42:D2:BF:E4:3C:C4:1D:AC:03:14
X509v3 Authority Key Identifier:
keyid:6A:4F:35:CE:DC:6A:01:68:3A:67:8A:B4:E5:98:89:75:26:A4:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ak81ztxqAWg6Z4q05ZiJdSakCIA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:e9:19:e9:1f:70:d4:51:78:70:6a:49:b3:4a:42:ca:d2:
81:8a:76:03:1e:a0:41:2f:15:a8:2d:5a:56:e4:f2:26:c1:6c:
0b:18:71:47:72:fc:26:71:68:30:ec:08:7f:30:d1:32:86:a1:
78:52:80:03:82:28:8d:5e:87:f2:22:a3:58:bc:65:34:ad:eb:
ef:39:9c:c3:af:f1:f9:df:67:95:08:9e:36:db:13:ee:42:e6:
3f:41:f4:93:b0:f7:6e:d8:25:b6:28:ec:53:ae:23:c5:63:0d:
ba:ad:38:d2:82:d9:55:fe:64:dc:78:99:75:7c:0f:17:27:4c:
22:7d:5b:2e:c4:0f:15:1e:cd:af:60:61:5d:81:e4:09:dd:d3:
96:b1:a5:2d:12:9d:ff:c1:1d:51:30:51:9c:1e:8a:a9:20:e7:
c7:fc:de:62:66:19:45:d1:82:cf:34:f0:51:0b:19:74:3b:db:
6b:6e:ce:ce:6c:e4:56:09:11:d5:80:44:3c:f5:d3:64:31:5e:
42:30:85:b6:72:57:44:63:99:a3:24:35:37:e6:0d:0e:4d:e7:
c6:e1:a5:b3:fd:67:40:62:61:17:99:2a:fd:2d:ce:b9:1a:e0:
53:ab:0b:ac:7e:04:3c:5f:fd:af:31:0a:18:75:bc:99:57:49:
1e:c7:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:03:06 2025 by rpki-client