Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: Ob1X5uI5+AZHkX4wv7i1XddNE3oufckgId+v2IEuxbk=
Subject key identifier: F2:A4:DE:75:C8:68:0D:C8:39:31:49:75:97:52:E3:BD:BE:9A:40:5D
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 027244654E0955AC368DFA84F0B833617F45F55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 85
Signing time: Fri 31 Jan 2025 02:11:59 +0000
Manifest this update: Fri 31 Jan 2025 02:06:59 +0000
Manifest next update: Sat 01 Feb 2025 03:26:59 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: vYpwpxZ2D9kqK7XJAT7m7O2SB5VwyGvMP7vCf/cQCrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:72:44:65:4e:09:55:ac:36:8d:fa:84:f0:b8:33:61:7f:45:f5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Jan 31 02:06:59 2025 GMT
Not After : Feb 1 03:26:59 2025 GMT
Subject: CN=F2A4DE75C8680DC8393149759752E3BDBE9A405D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:ba:62:65:1b:48:4e:c4:73:b1:8e:1a:b8:
a7:56:b1:4e:2e:96:b2:7e:90:5d:34:73:ad:52:6c:
bc:3b:fb:2b:18:2d:b8:62:7a:58:57:68:16:07:5c:
d5:06:ca:d2:aa:11:90:fd:9f:3c:8c:43:bd:f3:1c:
f4:b4:09:78:3d:05:69:8a:1a:19:23:eb:2b:b9:35:
c4:59:09:93:85:b0:ba:94:02:9f:39:d8:0e:42:a3:
2f:7d:f3:93:0d:f4:ec:a7:1f:74:1e:5a:53:70:97:
1d:41:6a:f9:57:22:5a:00:43:a2:1c:c1:9a:b0:16:
13:66:90:64:f2:64:09:27:2d:0e:eb:28:d0:bb:26:
7f:7a:20:fc:6e:f0:5a:69:6a:c4:ea:89:72:e1:e3:
95:9c:89:60:56:bb:99:77:c9:10:a6:8f:9f:f6:6f:
8f:82:07:2b:a2:d1:de:72:62:98:52:03:a8:59:76:
b6:3b:a8:37:c9:35:fe:f0:33:82:8a:87:d2:e7:f2:
92:ca:cd:ff:f1:7f:b7:56:2d:54:11:c0:fd:63:a8:
ad:9f:a9:8c:cc:01:2d:6a:96:81:49:b7:41:d8:2f:
1e:8d:7d:3d:d0:63:66:48:9f:e5:dc:c3:26:86:c5:
d4:5f:f2:65:8b:91:33:46:77:d5:41:09:d5:73:66:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:DE:75:C8:68:0D:C8:39:31:49:75:97:52:E3:BD:BE:9A:40:5D
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b9:c2:32:e8:54:f1:cb:73:cf:59:6e:29:ae:9a:51:db:ce:
89:35:87:4e:bd:5d:a0:39:6a:f4:fa:c9:64:24:36:31:fd:fa:
cc:d5:e7:9d:6f:3a:34:a2:34:54:45:52:bb:e4:32:53:4a:f2:
27:f7:c1:8d:d3:64:1d:39:78:eb:1f:07:0f:81:68:d1:c1:b9:
0a:8d:e0:ca:de:ab:a3:e7:14:97:51:c3:3a:3d:f2:24:67:d9:
28:25:62:88:91:3d:5d:b6:ca:b7:1a:b2:a5:b2:ed:d7:29:87:
ab:e2:60:e0:fe:a1:a9:bf:9f:ed:5f:3c:2c:c2:b0:5b:28:06:
04:79:56:90:77:48:05:0e:ff:c1:8d:08:a0:72:9e:b9:ae:9e:
3c:f1:04:2d:74:a4:58:2d:b9:30:e6:91:04:89:9c:fb:df:7c:
23:25:cd:a5:eb:f3:c3:4d:cb:34:57:8e:dd:3f:08:28:12:86:
80:20:7b:14:6f:b0:74:af:eb:bc:d1:65:69:f0:28:86:ed:fd:
08:cb:87:ff:85:14:5a:57:12:45:62:82:71:c9:ce:39:be:8e:
c3:40:eb:08:7a:de:68:98:fe:b9:d1:6b:47:c6:70:93:36:dd:
f5:5b:d0:26:cf:70:42:3c:3d:e9:70:14:83:84:2d:3f:07:c2:
9c:77:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:13:46 2025 by rpki-client