Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: 0En95jrwPyS1xzbTYeW21So1gQsZclg1sv+lR/l5vEU=
Subject key identifier: 52:4D:9F:A3:7C:87:F0:E7:0F:5A:FF:72:5D:08:13:9F:EA:9C:2D:A1
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 0485A8D4854325233DE50C359D9ED0AAD6B2B265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 03D8
Signing time: Fri 31 Jan 2025 07:37:16 +0000
Manifest this update: Fri 31 Jan 2025 07:32:16 +0000
Manifest next update: Sat 01 Feb 2025 10:31:16 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: ZXJbMKnC2KzEMYmyBPs3wuIiMYWrrAevSN8hOnQG8fU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:85:a8:d4:85:43:25:23:3d:e5:0c:35:9d:9e:d0:aa:d6:b2:b2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Jan 31 07:32:16 2025 GMT
Not After : Feb 1 10:31:16 2025 GMT
Subject: CN=524D9FA37C87F0E70F5AFF725D08139FEA9C2DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:b1:3e:08:0f:9e:22:96:2a:ca:b3:7e:04:
4f:61:50:d4:0e:55:2b:57:ec:26:e0:53:a5:ae:8b:
ee:b8:d7:ba:f4:b1:6b:4c:8d:bf:63:1f:50:4e:19:
be:9b:30:56:9d:1a:25:62:20:0b:92:0e:62:d1:ad:
24:c5:e0:81:01:c3:d9:b3:78:c5:83:34:5b:65:42:
fb:20:3a:05:7a:e4:f3:fc:16:00:9d:b0:1f:c3:d6:
c7:c3:f6:b9:c4:15:77:51:7c:6a:d3:fc:4d:21:be:
05:58:e1:5f:e3:ad:23:7b:db:40:fd:f6:29:b1:4f:
6a:50:36:ba:82:a2:aa:85:8f:a1:30:84:c4:08:1c:
14:4c:d6:ad:7e:0b:55:6e:d9:14:0b:4e:b3:88:28:
73:5d:26:60:e4:a5:f2:db:50:f6:dd:77:f1:b5:5e:
0f:b3:50:17:27:41:31:63:a8:af:db:58:3b:92:04:
ff:da:3b:24:2f:37:78:6d:f8:2b:7e:3f:9a:a0:bd:
15:76:43:59:d2:ed:33:fc:b6:38:df:f7:02:01:16:
14:3b:8b:c2:4d:a9:fe:13:4e:18:67:c5:64:f4:b5:
5a:75:39:5e:12:09:db:67:13:46:61:db:03:ed:5c:
ff:ee:7d:fe:85:f7:48:6f:2a:62:da:5e:ef:85:48:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:9F:A3:7C:87:F0:E7:0F:5A:FF:72:5D:08:13:9F:EA:9C:2D:A1
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0e:9d:99:cb:ca:0d:e6:ca:9c:af:81:3a:c5:54:6a:9e:f0:
35:84:75:94:51:f3:3e:2b:68:5f:a9:af:81:78:a9:e9:a3:af:
3d:25:f6:51:de:66:4c:73:6c:be:58:b1:41:88:e2:8e:08:56:
97:6e:46:42:99:a3:ab:ee:f4:9f:28:71:a2:6e:a4:9d:02:21:
0b:b0:58:3f:df:77:00:0a:0b:76:f9:97:3e:14:06:8a:9c:28:
7a:25:75:c9:1d:2b:30:d9:ec:65:67:b3:39:26:ff:de:cb:db:
71:0d:b6:52:97:0b:d0:f3:de:be:0d:c8:48:0c:11:ab:a0:14:
9b:e1:be:35:0a:1b:61:8b:19:c9:35:75:56:ee:6a:fb:cb:f0:
07:44:85:47:3b:dc:0d:c1:da:d4:de:a5:60:4c:dc:28:6c:4c:
a7:c6:bc:fc:10:27:fd:c1:e8:71:86:a1:77:7a:43:9f:b4:7b:
b9:7f:a7:3d:b5:5e:de:ad:a3:c0:ed:9a:5e:ca:09:d2:d2:79:
56:b0:27:21:a8:2b:80:9f:5f:4b:fd:79:1a:8d:d2:f2:d6:3b:
e2:ce:33:13:c0:70:e9:d3:1d:e0:ab:82:28:ff:00:78:71:8c:
f6:aa:51:3e:77:63:a1:83:0f:e2:20:eb:78:03:b6:ae:5c:25:
f8:a1:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:13:44 2025 by rpki-client