Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
File: 333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft (raw, json)
Hash identifier: HBZkL2sB1tnD2/3cyO9CgckB/V0Kcj1leHqtZuH2Zwc=
Subject key identifier: B8:16:E3:CD:96:56:02:73:F2:2A:67:AE:A8:4A:EF:B9:20:46:68:92
Authority key identifier: 33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
Certificate issuer: /CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Certificate serial: 480C4267B807BAD98339B0992E7D9ADD3250F927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
Manifest number: 60
Signing time: Fri 23 May 2025 20:57:07 +0000
Manifest this update: Fri 23 May 2025 20:52:07 +0000
Manifest next update: Sun 25 May 2025 00:15:07 +0000
Files and hashes: 1: 333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl (hash: ex2hjRz4zu9Z1TwH8FHkUboyvks9rZPo8R7i+l5NADk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0c:42:67:b8:07:ba:d9:83:39:b0:99:2e:7d:9a:dd:32:50:f9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Validity
Not Before: May 23 20:52:07 2025 GMT
Not After : May 25 00:15:07 2025 GMT
Subject: CN=B816E3CD96560273F22A67AEA84AEFB920466892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:b5:0e:c1:8f:bc:de:87:20:f4:36:17:79:
7a:ed:52:ba:85:40:a6:87:7c:5c:f7:24:36:d7:0f:
b4:e6:e6:a5:a0:d8:7b:6a:64:74:bf:33:26:be:bd:
6c:9b:79:24:e8:6d:54:8f:ef:3b:07:90:8a:cc:90:
44:ca:4e:b5:87:db:9b:44:9f:83:4f:8f:df:54:71:
75:66:94:50:99:56:4f:a0:cb:07:0a:fc:a7:83:90:
24:6c:55:d5:d9:8f:02:19:60:34:24:ec:89:a0:0a:
57:8f:1a:41:f9:b8:e7:14:1a:23:af:65:8a:4b:2f:
ca:8a:16:69:90:6b:fb:2f:16:3b:b5:88:64:21:17:
29:1d:fb:2b:29:96:57:bf:95:47:70:bf:f2:a8:f2:
f0:f0:31:48:cd:18:9f:75:56:0e:8f:6a:c2:d3:70:
d6:2c:f0:b1:cd:bf:8a:db:5f:a5:93:c0:44:55:f9:
b5:17:99:a7:12:e9:fd:2e:92:a8:9f:05:18:1b:7b:
ff:97:5c:4b:2e:63:3c:1f:e7:00:94:50:d2:39:2e:
2f:3c:d5:0e:13:06:40:f4:90:4b:22:e5:0b:1f:8a:
d5:a7:13:39:0d:6c:3d:1e:3d:2d:f3:32:c3:a8:2e:
db:c0:8d:c3:e2:e9:3b:40:93:08:6c:2a:e2:4e:a4:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:E3:CD:96:56:02:73:F2:2A:67:AE:A8:4A:EF:B9:20:46:68:92
X509v3 Authority Key Identifier:
keyid:33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ee:44:5b:5d:95:c1:f4:38:0f:b1:f0:fc:1c:d1:13:22:d7:
4f:88:c0:f5:25:e6:44:15:75:72:19:4d:a0:85:25:dc:cc:17:
4a:3a:a0:c5:b8:8c:94:cd:01:aa:f1:f3:a8:ab:10:a8:a8:e4:
9d:55:45:e1:24:c9:d3:f9:19:f7:3a:09:e1:bc:be:38:18:c0:
1f:45:cf:18:5a:ba:ae:15:b0:8f:a3:62:a4:5e:39:a2:d4:5c:
9a:32:3c:07:71:e9:0b:04:64:a1:a9:65:ad:9b:c9:c5:ec:36:
5e:cf:df:7a:d5:0d:86:97:02:b3:9d:75:f3:84:7a:81:26:ff:
aa:86:86:62:8e:8e:7a:28:7e:8c:6e:bd:c4:36:78:67:d8:bc:
e1:fa:21:04:92:54:43:95:f6:2a:a0:da:04:26:9a:03:c6:b9:
b0:62:ff:18:10:05:6e:48:3c:55:92:c5:88:8a:fb:45:86:66:
12:74:84:b7:64:f1:32:75:f9:b3:43:57:af:d1:cf:52:ad:74:
11:d6:1e:1c:ea:e5:29:5c:28:c9:15:21:37:c1:46:c7:51:13:
3c:04:a0:3c:8a:96:64:c6:a4:ca:22:8d:88:ae:7a:76:32:60:
ba:9e:31:31:4b:42:db:bb:8b:84:ca:ba:47:17:00:43:7c:45:
8a:13:51:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:39:40 2025 by rpki-client