Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
File: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft (raw, json)
Hash identifier: YCivjO3L6pzaDW8z6jCPbd/MTTyBNwy1+6/4qzBa8yM=
Subject key identifier: 2F:B1:F6:E2:21:10:97:C0:16:99:3F:47:36:B4:6D:73:49:96:70:36
Authority key identifier: AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
Certificate issuer: /CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Certificate serial: 6C332460CA73B0F947E80D9419434D89C29E3F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
Manifest number: D7
Signing time: Fri 31 Jan 2025 01:04:58 +0000
Manifest this update: Fri 31 Jan 2025 00:59:58 +0000
Manifest next update: Sat 01 Feb 2025 02:45:58 +0000
Files and hashes: 1: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl (hash: 2w9q59F5RJYm4cSNBqaHkQUZf3i2d6G7v93XKaG32r4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:33:24:60:ca:73:b0:f9:47:e8:0d:94:19:43:4d:89:c2:9e:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Validity
Not Before: Jan 31 00:59:58 2025 GMT
Not After : Feb 1 02:45:58 2025 GMT
Subject: CN=2FB1F6E2211097C016993F4736B46D7349967036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:e7:39:37:fc:2b:45:8d:22:51:08:f5:d2:
49:bc:54:66:e7:c3:eb:e5:26:f3:b1:6d:e5:e6:5d:
4d:19:ad:72:aa:7f:c6:13:47:0c:b5:e8:61:86:08:
a3:bc:b4:59:f5:d7:2b:92:63:1b:e4:a1:ac:2f:aa:
d4:86:4c:4e:d5:fd:c1:ec:a0:17:20:8e:c2:d8:b8:
c2:e8:7a:5a:75:77:0e:f2:66:e4:76:64:92:b3:76:
35:b1:44:75:04:89:a7:52:30:e6:d1:a3:25:f1:91:
d4:20:ba:61:14:d9:95:c6:55:90:77:d8:36:90:5e:
f8:fc:9f:e8:69:bb:92:4b:f6:92:8f:61:fd:27:99:
fe:38:e5:9d:0b:0a:e4:21:07:c5:54:c7:ff:09:aa:
cc:b3:43:1d:60:8c:00:f4:a8:8e:02:42:b4:4e:07:
c3:ee:f4:95:00:6b:01:b5:69:32:b6:9d:10:5d:b1:
cc:80:b5:22:c5:5a:c7:13:0c:6e:83:6a:5f:d4:59:
6e:7c:12:47:2e:3f:e3:3f:d1:61:5e:14:ca:e6:63:
1f:94:f5:94:2b:17:8e:ae:70:da:15:33:8e:26:83:
d2:a7:fb:76:97:74:fb:25:b3:ec:86:c2:ea:36:ce:
4c:4d:ed:0b:0d:7e:e4:d9:f7:29:5e:26:5d:e7:9e:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:F6:E2:21:10:97:C0:16:99:3F:47:36:B4:6D:73:49:96:70:36
X509v3 Authority Key Identifier:
keyid:AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c6:b4:1f:cb:0c:bf:0d:26:76:f4:e4:99:41:01:bb:5b:af:
7a:ee:66:b7:23:e8:74:b3:ff:af:93:4d:07:c7:5d:b7:63:74:
ee:7f:fb:ee:50:86:32:ad:a7:ae:ce:2b:69:6f:8d:19:4f:d5:
51:c6:7a:f8:fc:7f:d4:b1:70:15:f6:ea:00:c1:e1:75:83:bc:
f1:b5:a0:43:02:ec:41:ca:e0:15:e8:21:e4:e9:eb:c8:74:ae:
cf:0c:06:71:f4:b2:46:24:8c:90:bf:40:c7:9d:9a:8c:dd:03:
fe:16:c5:66:8b:0f:b1:d6:a9:64:da:08:0a:5e:69:4f:1a:9d:
70:5c:7c:09:8a:37:2d:28:66:33:ac:55:b8:a6:36:45:2a:a3:
d3:bb:8d:7c:a9:d9:67:21:6d:72:4f:82:f1:a3:5d:c8:1a:14:
3f:b1:2d:c4:a5:91:23:23:38:0a:b4:3c:92:ce:7f:f8:c5:54:
3a:6d:bb:6c:ff:50:cb:2c:47:b7:6f:7d:44:f7:d2:4f:c7:63:
f7:22:3c:12:94:e0:da:70:3a:12:a2:59:75:40:4f:67:6e:cb:
32:be:61:b7:26:8c:23:ab:2d:de:0d:e7:e1:0e:d5:27:92:2b:
4b:c0:8b:bb:9d:b3:0c:15:ab:21:e0:62:46:e4:5d:33:d0:1e:
d4:71:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:42 2025 by rpki-client