Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
File: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft (raw, json)
Hash identifier: DPTDQMYiStznF8T8USqaEUrE/jm4bNuB+cXASKlEKjA=
Subject key identifier: 20:57:B2:1D:BE:9B:26:EB:68:E5:9D:36:1B:94:C8:F6:71:04:84:33
Authority key identifier: 1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
Certificate issuer: /CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Certificate serial: 5D8D1CC38BD39C34CB4D7BBB1F7E1E7E085C531E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
Manifest number: 0151
Signing time: Fri 28 Mar 2025 17:50:16 +0000
Manifest this update: Fri 28 Mar 2025 17:45:16 +0000
Manifest next update: Sat 29 Mar 2025 20:45:16 +0000
Files and hashes: 1: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl (hash: bOWIeTjFelN3N0UX55S5/cYcjTmv0t8q8HOXajYcgEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8d:1c:c3:8b:d3:9c:34:cb:4d:7b:bb:1f:7e:1e:7e:08:5c:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Validity
Not Before: Mar 28 17:45:16 2025 GMT
Not After : Mar 29 20:45:16 2025 GMT
Subject: CN=2057B21DBE9B26EB68E59D361B94C8F671048433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:e6:3b:32:34:a9:a2:9e:19:7f:b8:88:a9:
20:64:8e:4d:92:1c:8f:35:04:64:ee:d5:9e:ef:f9:
db:43:f0:23:c0:b9:1e:ff:f7:4d:b3:c2:93:6e:85:
ac:17:50:9e:e2:88:07:4a:5e:6a:32:a1:10:74:6e:
c1:52:65:3d:1f:5b:c4:18:81:d4:37:e9:76:45:ee:
08:fb:0f:b4:ec:58:0d:8c:aa:1a:09:14:f0:65:70:
c3:f2:ef:0c:98:fe:2d:5d:82:b6:1a:c6:39:61:57:
96:43:d0:96:d5:4e:fc:d4:c5:65:00:41:f1:41:be:
a8:aa:dd:a2:e2:1c:85:75:02:53:13:49:89:f8:21:
07:84:44:48:f2:7b:c1:35:67:b1:f4:6f:0a:37:62:
e7:b8:e0:2e:69:81:fb:45:25:f9:b8:4b:b7:10:44:
f8:4f:60:71:0c:30:d9:87:35:88:0e:43:4e:e1:42:
d4:79:93:95:3f:60:9e:1b:f8:60:2a:6a:1a:58:9f:
4b:9b:51:f7:b5:ba:15:9b:5c:bc:89:b8:9c:7c:f7:
cc:55:22:da:26:6a:49:93:27:03:0f:c6:74:ee:67:
54:2d:f3:58:70:f0:7a:d0:08:45:00:e8:2f:d7:38:
2f:79:12:34:c7:54:de:aa:3d:73:d0:24:15:0c:45:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:B2:1D:BE:9B:26:EB:68:E5:9D:36:1B:94:C8:F6:71:04:84:33
X509v3 Authority Key Identifier:
keyid:1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:17:94:26:c8:b9:6f:b4:73:fa:4a:1f:1d:37:14:7d:74:
7d:55:9d:f3:e4:07:39:e0:97:4c:71:da:0c:53:c3:4b:28:21:
d9:84:cb:99:ec:ef:c9:57:7a:3e:29:f7:9f:01:7d:d0:fc:86:
aa:2c:f6:7f:6f:da:f7:59:30:36:39:06:9d:d5:73:17:a0:14:
ae:14:46:aa:41:e2:1c:60:9f:3f:27:aa:15:49:64:4f:ea:4b:
ad:9e:d4:b6:67:fc:1a:65:4d:cc:65:b1:7c:87:28:1c:b4:f3:
78:0a:92:6a:86:12:dd:2f:12:af:b0:2c:bb:8c:4e:f4:ad:e8:
87:7f:e0:27:62:49:79:87:f7:66:88:b8:4d:3f:ec:6e:31:09:
65:66:34:99:7d:50:ee:5a:06:07:f5:ad:a4:c3:7e:0d:43:6e:
19:92:29:cf:f2:0c:92:17:ff:57:da:19:4d:dd:04:5f:3d:22:
5d:38:19:2a:71:37:59:1d:cc:1e:b8:5c:65:db:09:d1:b2:89:
b0:fe:30:74:3c:a3:28:f8:32:03:d4:56:18:a7:1b:8b:ea:35:
77:ac:17:c4:5d:d4:15:30:15:87:15:83:6c:0b:c1:89:40:2e:
ed:57:50:99:0d:39:b4:fd:83:65:28:ca:90:19:7a:aa:33:12:
66:b6:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:02 2025 by rpki-client