Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
File: F066639311596E151E78E34CCC584DC5F500F585.mft (raw, json)
Hash identifier: j+qA8wJvXrt6gDT+hadSsDXWSur8waO8uJC2SaO/9ZU=
Subject key identifier: D2:D6:BF:A9:30:9C:26:36:5E:2D:17:DB:3A:79:F6:AF:B8:CB:2C:23
Authority key identifier: F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Certificate issuer: /CN=F066639311596E151E78E34CCC584DC5F500F585
Certificate serial: 0BE56E29EE38CD2AA489F9A92E623273FF503E5D
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
Manifest number: 03D2
Signing time: Fri 31 Jan 2025 05:27:06 +0000
Manifest this update: Fri 31 Jan 2025 05:22:06 +0000
Manifest next update: Sat 01 Feb 2025 05:45:06 +0000
Files and hashes: 1: F066639311596E151E78E34CCC584DC5F500F585.crl (hash: Uv2kzMqRAzvTnpUhTbW4IbcpCDH6mRjWtejgF2nH76M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e5:6e:29:ee:38:cd:2a:a4:89:f9:a9:2e:62:32:73:ff:50:3e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F066639311596E151E78E34CCC584DC5F500F585
Validity
Not Before: Jan 31 05:22:06 2025 GMT
Not After : Feb 1 05:45:06 2025 GMT
Subject: CN=D2D6BFA9309C26365E2D17DB3A79F6AFB8CB2C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:60:68:23:03:c4:ab:59:02:4c:dd:e3:a3:
86:64:6b:d9:aa:33:3d:0b:d7:a6:1b:f6:de:40:9c:
d0:3e:10:aa:80:69:79:f2:a4:a1:04:a4:c0:21:f3:
fb:ae:9e:83:f5:91:8c:eb:2d:64:b0:64:a5:cd:0f:
19:99:9e:3c:08:1a:44:f1:1d:db:fa:d8:fe:6d:4e:
54:d8:c1:73:5a:60:1e:70:c1:bc:7b:06:92:ca:25:
01:44:4f:a0:9d:8f:8a:e7:34:c0:b6:f2:02:03:38:
50:6e:52:ab:f8:a7:a4:10:4e:fe:82:30:ce:a4:84:
92:3f:96:d3:3d:e0:a4:f1:8d:6d:c5:63:34:5c:4d:
57:6f:46:59:ca:6f:d1:6a:d5:96:8e:5d:b0:17:f0:
ba:1e:69:65:33:e5:85:9e:e7:89:d0:18:44:16:e8:
70:30:b3:52:49:68:72:86:14:f5:9c:f6:62:4d:82:
62:ff:50:4e:88:27:84:3f:84:62:af:e8:8a:32:03:
f6:f9:91:53:c4:07:eb:3d:40:9e:ef:60:5f:fb:0d:
a1:b6:46:88:35:1a:4d:64:19:da:00:8a:02:83:8e:
d9:85:68:5f:d1:97:90:cc:c6:ab:0c:27:81:6b:60:
e1:c7:f6:83:40:96:a0:40:ce:6d:54:05:8d:3e:b7:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D6:BF:A9:30:9C:26:36:5E:2D:17:DB:3A:79:F6:AF:B8:CB:2C:23
X509v3 Authority Key Identifier:
keyid:F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ab:29:a7:5e:2a:63:d5:79:f4:c7:6e:14:bf:4c:6b:11:35:
98:1f:57:d9:5c:c2:e0:36:ac:47:82:af:20:22:4c:2f:43:33:
3f:f9:d8:74:5b:5e:c1:33:7d:98:a2:e1:b2:8f:e8:c4:1a:8b:
d8:f5:b4:7b:46:05:2e:e2:5a:9b:b0:8c:a2:f5:2e:22:cc:97:
47:16:00:37:9a:ed:0e:f8:eb:61:26:5c:01:55:11:60:15:f3:
fb:e1:44:f6:a4:16:e4:6c:9c:5a:c5:40:22:c4:6d:d7:b4:88:
ce:86:6d:36:fd:d3:e6:aa:a3:f3:54:71:09:33:4c:61:6f:a4:
48:46:f4:bd:a2:f9:d6:f4:65:1f:a2:f9:bf:42:5f:a6:4e:49:
f6:12:88:15:d6:1b:79:10:4b:bd:b0:2e:48:a7:2e:c0:56:04:
ac:c9:99:77:e4:f2:df:1d:e8:c0:6e:45:c5:1e:17:b4:18:f7:
60:62:96:5f:6e:67:4b:7e:cb:c7:bf:4f:47:5b:0b:9e:43:55:
07:ca:e6:6e:ab:c0:d8:6a:80:1d:1f:93:28:17:64:52:45:e7:
ea:e9:f5:cf:a5:21:78:b3:c1:cc:1f:fc:d3:54:ae:2d:39:8a:
66:48:72:6b:cd:d0:64:5a:cf:b4:f1:47:df:f2:9d:7c:1e:61:
2b:c5:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:47:58 2025 by rpki-client