Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: Tr37JXodz+VW79iJ0RlDu/UU8xM9S6HZ52vPMc6UE1Y=
Subject key identifier: 3E:05:AD:76:6A:9E:FB:67:13:A3:89:07:41:F6:DD:07:82:DC:43:40
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 3D2C91FAD91E1457D9E7172671335817446776F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 0150
Signing time: Fri 31 Jan 2025 09:52:15 +0000
Manifest this update: Fri 31 Jan 2025 09:47:15 +0000
Manifest next update: Sat 01 Feb 2025 11:21:15 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: lxSQSlowI9WKu8WPg4l09jaky+lHRL6iybyNi09AobU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2c:91:fa:d9:1e:14:57:d9:e7:17:26:71:33:58:17:44:67:76:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: Jan 31 09:47:15 2025 GMT
Not After : Feb 1 11:21:15 2025 GMT
Subject: CN=3E05AD766A9EFB6713A3890741F6DD0782DC4340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:16:41:b5:2e:f2:a3:f9:46:e7:fa:6a:0b:
b9:b7:31:ef:53:42:55:32:13:66:25:fc:20:be:bf:
04:73:06:e2:e4:2f:97:40:5c:18:b2:13:ec:a4:19:
5d:ef:60:00:b9:c9:88:27:6c:66:59:c3:5d:a8:4b:
4a:8a:ef:30:e1:cc:87:d0:ed:44:68:0c:d6:3b:a8:
44:a6:2d:88:61:82:49:8e:cb:48:6d:ee:c8:d5:a3:
85:4d:b3:3c:c7:68:c5:0c:ac:2f:b5:fb:20:ea:97:
b7:30:b4:c6:ca:8e:b9:d2:7f:64:fe:46:27:dd:08:
9b:59:1d:dc:6b:5a:47:99:ed:7f:e7:cc:f9:51:97:
f8:f6:5d:64:30:0f:9a:8a:74:99:94:ec:d2:20:5e:
0f:c6:3a:c2:81:af:6b:4f:ca:6e:92:89:8d:df:99:
cb:40:60:72:7a:fc:f4:07:3f:69:0c:d7:b8:0e:50:
85:25:7b:56:54:91:5d:28:be:3b:a3:bb:68:3d:c5:
b6:98:14:ac:49:3c:63:54:c0:fd:c0:30:57:84:6a:
9a:49:74:ae:88:48:32:d7:99:4d:cf:fe:a6:5d:cd:
85:08:e3:bf:7e:87:03:ae:55:1f:d9:c0:ea:7f:fe:
b0:42:44:00:d1:d7:f9:e6:86:d6:48:50:c2:cf:49:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:AD:76:6A:9E:FB:67:13:A3:89:07:41:F6:DD:07:82:DC:43:40
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ec:e0:46:44:f5:ff:00:94:ae:f5:84:c8:dd:d7:3a:01:79:
e1:d4:07:fb:a9:5a:e4:d3:01:cb:e1:80:74:07:ad:76:e6:d1:
be:04:e3:eb:90:cb:57:c8:72:d8:56:93:96:7c:23:e5:f6:0f:
84:92:b4:5e:76:b4:b1:26:74:e4:fd:9d:99:af:42:4b:67:e7:
08:1e:c0:82:93:76:8a:46:de:1b:50:0d:f9:57:db:78:93:bb:
dc:dd:48:c2:6a:fa:96:0f:d3:51:17:2c:04:a5:60:e3:c5:08:
94:34:2f:1e:29:8d:e7:5a:25:cb:6e:b1:d4:20:8f:cd:47:64:
7d:4f:8f:83:91:df:b4:17:1f:0d:16:a6:81:09:5b:92:62:23:
96:c2:45:5a:d0:5f:d8:c1:72:e5:18:19:ec:bc:64:38:8f:d4:
98:32:f9:22:8c:dd:59:b5:06:f0:3e:ad:cf:46:f5:dd:0a:a4:
e3:8e:a2:7c:11:e9:d5:9a:f4:6c:85:44:f6:f4:78:bf:2e:19:
ae:c5:53:b4:3d:6d:0d:4b:c9:bc:e4:7d:be:aa:58:10:b4:3c:
96:b1:d6:94:76:29:25:90:47:13:e3:4b:dc:5a:9c:e7:61:e3:
4a:99:df:a0:1c:46:10:18:10:37:df:fe:ce:22:19:24:ee:fb:
e6:f8:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:37 2025 by rpki-client