Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/EEA617E7347563A86C63E921D8841FA17CEF04B0.mft
File: EEA617E7347563A86C63E921D8841FA17CEF04B0.mft (raw, json)
Hash identifier: xuKMEtUiG0FLNg+5oCNDRJCfyqQKkvQ/9ktsY4fP4+s=
Subject key identifier: 29:AC:D4:8F:9C:63:03:36:C1:B1:F1:64:57:76:E8:AB:12:27:88:19
Authority key identifier: EE:A6:17:E7:34:75:63:A8:6C:63:E9:21:D8:84:1F:A1:7C:EF:04:B0
Certificate issuer: /CN=EEA617E7347563A86C63E921D8841FA17CEF04B0
Certificate serial: 010B2B204152B647AC0B209D890AAAB486F093BC
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/EEA617E7347563A86C63E921D8841FA17CEF04B0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/EEA617E7347563A86C63E921D8841FA17CEF04B0.mft
Manifest number: 8B
Signing time: Thu 03 Apr 2025 21:52:29 +0000
Manifest this update: Thu 03 Apr 2025 21:47:29 +0000
Manifest next update: Fri 04 Apr 2025 23:12:29 +0000
Files and hashes: 1: EEA617E7347563A86C63E921D8841FA17CEF04B0.crl (hash: IiFuHnPMYvsnG4IqLixyDT+RJBjRT97sRzUFKCfn0Fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0b:2b:20:41:52:b6:47:ac:0b:20:9d:89:0a:aa:b4:86:f0:93:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEA617E7347563A86C63E921D8841FA17CEF04B0
Validity
Not Before: Apr 3 21:47:29 2025 GMT
Not After : Apr 4 23:12:29 2025 GMT
Subject: CN=29ACD48F9C630336C1B1F1645776E8AB12278819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:6f:12:8c:46:63:85:2b:27:41:ce:12:d6:
d3:43:a7:0f:13:cd:e0:5c:f5:99:b4:0a:3f:64:4c:
02:50:7b:4c:eb:45:93:d3:8e:7c:bf:a4:97:e1:c3:
2a:cf:9e:d2:fb:c6:14:c4:10:84:74:5f:16:f6:19:
2e:0d:ed:b1:d3:e9:76:36:b9:42:aa:49:72:6b:b0:
00:45:be:9b:09:c0:b1:ea:c1:ab:ed:6e:c6:a8:8d:
39:42:0a:9e:61:50:a9:81:19:fe:00:92:f9:6c:0c:
7c:d7:24:c1:c0:5c:37:4f:31:7a:a1:11:71:8c:2c:
4b:02:9f:b6:8f:5b:06:e3:a2:f3:b6:21:75:8a:75:
fd:5a:7a:fe:61:fe:27:61:ab:63:b4:0f:73:b8:85:
97:6b:53:30:59:a1:4e:d3:41:7b:65:9f:c4:5d:a7:
dc:3b:29:9d:02:5c:80:09:8b:62:fc:8f:ce:af:8b:
94:97:47:9b:bc:41:2f:de:a8:c0:8b:a7:d2:b4:3a:
81:ff:fe:d0:86:de:c6:36:f6:0f:5c:7a:b4:2a:09:
ab:20:be:03:44:55:12:5c:f1:82:6b:b0:36:53:ca:
1e:2d:23:60:fb:12:21:9c:8c:3a:1b:4e:09:11:76:
d0:54:b1:04:5d:a4:af:b0:d8:d0:55:a9:22:08:60:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AC:D4:8F:9C:63:03:36:C1:B1:F1:64:57:76:E8:AB:12:27:88:19
X509v3 Authority Key Identifier:
keyid:EE:A6:17:E7:34:75:63:A8:6C:63:E9:21:D8:84:1F:A1:7C:EF:04:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/EEA617E7347563A86C63E921D8841FA17CEF04B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/EEA617E7347563A86C63E921D8841FA17CEF04B0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/2/EEA617E7347563A86C63E921D8841FA17CEF04B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d1:ed:ef:dc:d2:4d:d4:7d:7b:aa:e4:0b:d8:7e:cb:0a:89:
49:02:55:c4:1f:2d:4e:49:b4:8d:c4:a6:74:45:e3:f7:63:f8:
b0:42:dc:65:f3:3b:99:c9:87:2e:7b:dd:05:2b:6a:e6:f2:e8:
7f:92:9c:5a:19:81:53:b5:45:c6:ec:89:26:c1:26:d7:ff:77:
e6:41:ec:b8:03:17:5c:17:0c:d9:f3:d5:0b:2a:ed:48:50:6e:
22:49:a7:40:52:d9:c4:6e:91:ae:fc:42:1a:f7:7d:90:6d:6d:
a1:ec:9c:6c:2b:30:1f:cf:e9:86:c3:e4:9c:14:d7:b9:d6:41:
7d:11:e7:f4:a8:8f:00:1b:33:a7:7f:4b:62:45:b9:d1:63:c8:
f7:f8:bc:f0:df:60:04:63:f1:e7:13:84:75:2f:e8:f6:38:0c:
25:ec:bb:fa:b9:71:9d:6a:0f:77:41:10:a7:d1:d0:c3:b6:84:
f8:9d:43:69:f9:44:47:2b:3e:11:c9:93:aa:f7:f4:8f:cf:cf:
26:0b:99:32:95:b1:45:16:78:41:74:7d:5f:47:06:83:50:96:
ef:7d:95:ce:10:04:57:98:7a:89:5f:5b:3d:01:3a:d8:90:d7:
ce:fd:a1:bc:0f:c1:84:c3:b7:62:18:f6:3f:e6:86:31:ce:d5:
ee:39:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:51 2025 by rpki-client