Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4/F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.mft
File: F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.mft (raw, json)
Hash identifier: 7Q93FAZz1tMTjlr/EYsarq37YcNx4lwUqO8GVKKe4Fk=
Subject key identifier: 9D:92:29:38:DA:C2:6D:B2:63:D9:B2:51:07:11:EE:4D:BC:9A:7C:A8
Authority key identifier: F0:F5:AA:3A:5C:D8:F1:E0:6E:6F:3F:93:CD:3C:7B:D5:8F:91:D3:96
Certificate issuer: /CN=f0f5aa3a5cd8f1e06e6f3f93cd3c7bd58f91d396
Certificate serial: 2BF57390518F46B980D3E7811B98868C2FA7DAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PWqOlzY8eBubz-TzTx71Y-R05Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4/F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.mft
Manifest number: 38
Signing time: Tue 02 Jan 2024 10:29:49 +0000
Manifest this update: Tue 02 Jan 2024 10:24:49 +0000
Manifest next update: Wed 03 Jan 2024 11:27:49 +0000
Files and hashes: 1: F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.crl (hash: zXZgwR7/LBGl+gQvQ7QDx6dd0FquhwmY3PwHfoiBhzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f5:73:90:51:8f:46:b9:80:d3:e7:81:1b:98:86:8c:2f:a7:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f5aa3a5cd8f1e06e6f3f93cd3c7bd58f91d396
Validity
Not Before: Jan 2 10:24:49 2024 GMT
Not After : Jan 3 11:27:49 2024 GMT
Subject: CN=9D922938DAC26DB263D9B2510711EE4DBC9A7CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:b2:0d:38:41:65:66:e3:25:7a:97:6a:5e:
70:6d:7a:d3:2c:f3:b6:fd:bf:87:fd:b1:c2:e9:da:
1a:07:81:c3:ba:24:f3:55:8c:4e:a6:97:6b:2f:aa:
80:cc:3c:4c:70:d5:b8:a8:d6:de:f1:73:e0:36:39:
0b:2d:fb:80:6e:88:47:15:af:cd:2f:ac:01:0d:01:
50:d2:93:9a:21:c3:ab:09:44:1d:00:ce:2e:18:a1:
9b:27:4f:86:d8:ef:76:bb:7c:35:c7:55:ce:bd:34:
d2:4c:a3:49:0a:01:da:76:0d:3f:bf:ac:fb:50:26:
6e:0f:bc:79:7d:0c:1e:24:ca:78:e0:c0:6d:a2:dc:
5e:f6:66:72:e6:7b:f9:27:0b:8a:29:77:12:0e:e1:
06:ae:1b:70:ff:05:3d:0c:c1:59:7e:ec:bf:28:d6:
24:7d:77:84:d1:cc:c0:83:91:98:16:7b:ae:71:10:
68:9b:8d:c8:46:0b:0e:87:6e:21:27:e1:ab:c8:f9:
ac:c1:cb:95:d0:ef:eb:f2:4d:57:12:8f:77:6e:7b:
cc:4d:e2:d4:33:3e:3a:ad:f4:a7:b6:9c:71:fa:3a:
e9:f7:6b:e0:d3:20:83:1f:89:78:74:27:55:50:7d:
5d:61:f3:ac:a1:b7:b1:92:fa:3c:c8:1f:4b:97:a7:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:29:38:DA:C2:6D:B2:63:D9:B2:51:07:11:EE:4D:BC:9A:7C:A8
X509v3 Authority Key Identifier:
keyid:F0:F5:AA:3A:5C:D8:F1:E0:6E:6F:3F:93:CD:3C:7B:D5:8F:91:D3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4/F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PWqOlzY8eBubz-TzTx71Y-R05Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4/F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:bd:74:b7:37:81:57:f6:67:f3:c0:ee:5e:c9:81:c6:35:
1a:ca:77:fc:76:46:48:b5:6f:98:06:48:1e:92:0a:87:73:07:
48:5f:6e:41:8c:40:e0:1c:70:ce:32:09:2c:af:69:99:e9:53:
6e:f0:28:d8:c4:bb:49:7c:2a:e8:14:fb:24:79:36:30:bf:86:
14:41:e1:a3:95:ec:c3:08:a2:9b:15:d3:4a:4d:4c:ba:ba:b3:
a1:30:d9:aa:f2:d0:12:cb:d5:9a:6f:1f:b7:e1:15:0d:9e:08:
b8:10:3f:68:26:07:2f:71:17:62:d1:7a:df:f0:d0:1b:be:12:
c8:f1:08:e9:41:1a:98:19:7b:78:e6:1a:30:a4:ae:e3:d2:93:
45:83:32:cd:36:0c:9b:6a:19:f0:64:53:1d:75:9a:d2:fc:e0:
90:6c:06:66:67:a8:ab:56:d8:30:ac:e7:f0:f1:3e:45:9a:d0:
b6:92:b4:c6:f2:b3:82:fb:e3:79:3d:92:03:0b:6a:35:a4:64:
30:0e:c3:5e:55:a3:bc:47:82:78:62:d5:3d:c1:98:7f:cf:eb:
2c:7b:80:e6:2b:19:78:8f:a8:1a:2d:17:58:88:e6:48:29:f4:
a6:eb:a1:00:78:6b:ee:8d:76:6b:0e:bd:48:7c:20:c6:62:8a:
ff:b7:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:06:27 2025 by rpki-client