Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
File: 42CC538CA37931CF39A85418E983E932F716DF8A.mft (raw, json)
Hash identifier: N0duYL13/CBfDch4fB4DsymR/ynJZTVVlR1icIN+qLg=
Subject key identifier: E5:70:73:A6:A5:67:70:C0:78:0A:86:6D:9F:73:71:E3:E2:93:02:91
Authority key identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A
Certificate issuer: /CN=42CC538CA37931CF39A85418E983E932F716DF8A
Certificate serial: 2C029D0DFFD76C75609073A4A09C4190CE5F4AD5
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
Manifest number: 01F3
Signing time: Fri 31 Jan 2025 17:29:09 +0000
Manifest this update: Fri 31 Jan 2025 17:24:09 +0000
Manifest next update: Sat 01 Feb 2025 17:55:09 +0000
Files and hashes: 1: 42CC538CA37931CF39A85418E983E932F716DF8A.crl (hash: OlPV/jKzWDLXH2l3PGxsPsH+HUxO2sL1qmLBnkrGPNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:02:9d:0d:ff:d7:6c:75:60:90:73:a4:a0:9c:41:90:ce:5f:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CC538CA37931CF39A85418E983E932F716DF8A
Validity
Not Before: Jan 31 17:24:09 2025 GMT
Not After : Feb 1 17:55:09 2025 GMT
Subject: CN=E57073A6A56770C0780A866D9F7371E3E2930291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:e6:a0:14:51:6c:4b:34:25:95:41:c3:54:
ef:3c:cf:21:95:e1:0c:65:f5:c3:e1:f9:3c:22:2c:
48:0d:5c:f5:44:81:cb:0d:64:98:9d:5a:41:5b:31:
ea:0e:47:b4:cc:fa:53:74:40:d6:ab:c8:2d:01:7b:
05:26:fd:22:30:b9:96:e4:45:7d:68:7f:74:1a:48:
21:eb:b1:e3:63:dd:8d:59:db:df:7e:59:bc:86:1f:
63:a9:d1:25:41:e9:24:f2:83:f4:e4:0f:c1:f5:f0:
19:e6:37:96:be:e1:87:43:e1:70:9c:bd:7d:07:09:
65:dc:99:67:cc:89:84:9d:36:d1:f4:78:94:3a:7f:
2d:5d:8b:a7:d5:e5:37:aa:13:a5:8a:38:f6:1c:97:
f1:2f:2b:5b:4a:33:8a:ae:fe:02:7f:08:60:04:e8:
55:67:6e:9a:7d:60:87:c6:d4:bf:33:d2:a4:aa:ca:
02:5f:b6:8f:c7:b5:22:c8:82:cc:38:1b:f7:31:e4:
52:58:98:e6:d5:74:bc:c5:c7:ea:47:d0:7c:46:04:
28:4a:0b:43:5c:ba:f9:17:d2:aa:f9:d2:c5:29:5e:
e3:0a:93:43:65:ea:7e:28:7b:e8:c4:de:46:4d:f8:
8d:e6:d4:04:96:78:44:1e:45:f5:e6:c9:74:62:d5:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:73:A6:A5:67:70:C0:78:0A:86:6D:9F:73:71:E3:E2:93:02:91
X509v3 Authority Key Identifier:
keyid:42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e6:a6:a4:38:14:e3:8b:ec:98:34:03:79:bb:b5:c6:d8:74:
11:d7:37:9c:78:99:eb:47:bc:b8:f2:0a:1c:90:81:90:3d:a6:
7a:3e:3a:04:f8:39:a8:14:ba:51:93:64:5c:80:82:13:be:a3:
71:16:c4:72:4e:82:9b:e9:01:c1:8e:53:d8:25:e2:97:98:dc:
46:ae:59:1a:89:d5:f7:db:b1:29:c3:ac:3a:0a:7b:59:b6:d4:
fc:e5:4a:f1:bf:54:38:bf:16:73:54:fd:e3:69:8c:dc:7e:4d:
60:38:46:a7:32:80:50:73:04:37:18:7c:bd:e9:99:74:5a:81:
17:0d:84:16:f5:23:36:7b:8b:f0:53:5d:aa:e1:ba:38:b8:c5:
bb:ae:06:04:60:cb:d0:d0:77:c3:73:ac:0d:89:f4:d3:3c:7b:
83:cd:18:e8:dd:f5:5a:03:19:6e:81:43:b5:32:6d:00:df:cb:
12:81:c9:57:c5:a7:89:24:04:3b:4d:f9:7d:be:44:2b:76:5e:
9a:0b:2b:c5:f5:50:41:65:77:c7:dc:7f:1d:65:6f:7a:a7:9e:
be:34:a5:91:4c:8a:14:54:f5:17:b4:b5:3d:65:c6:99:dc:64:
f9:5c:22:eb:e4:7b:a9:f2:1c:26:e4:44:41:d2:fa:11:76:50:
8d:a7:ae:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:49:17 2025 by rpki-client