
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
File: B5703F6700E832900122BBE6A5086441EB37BD2C.mft (raw, json)
Hash identifier: 36boSzdf1/IC5KCF1c3R2V+0lJABhHWuW63CbCqmqdE=
Subject key identifier: 74:0F:42:1E:A8:B8:08:5E:42:F2:0D:94:8E:47:DA:70:E1:0D:B0:7B
Authority key identifier: B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
Certificate issuer: /CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Certificate serial: 19E07E72F33C516BB04798704B00B2D9E7BE93F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
Manifest number: 5C
Signing time: Fri 31 Jan 2025 16:32:31 +0000
Manifest this update: Fri 31 Jan 2025 16:27:31 +0000
Manifest next update: Sat 01 Feb 2025 18:43:31 +0000
Files and hashes: 1: B5703F6700E832900122BBE6A5086441EB37BD2C.crl (hash: Tw0ATH9zBalmmDPXGkCfVv6W2IoD4N5RNjp/Ie6B7ZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e0:7e:72:f3:3c:51:6b:b0:47:98:70:4b:00:b2:d9:e7:be:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Validity
Not Before: Jan 31 16:27:31 2025 GMT
Not After : Feb 1 18:43:31 2025 GMT
Subject: CN=740F421EA8B8085E42F20D948E47DA70E10DB07B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:e4:ff:5e:f2:8c:95:db:dd:50:a8:a8:d9:
e7:ac:68:bf:98:34:b1:0a:76:02:8a:d1:5e:6e:f8:
a7:f8:a3:e4:c5:45:a8:a2:be:30:03:54:79:2e:18:
18:66:aa:8d:8b:5a:23:65:d8:c8:2d:58:0a:62:c1:
09:3f:d6:ad:9f:1d:71:e2:99:60:12:35:36:22:69:
a5:71:b0:67:3d:6a:ac:e5:c6:fc:d5:3a:60:0b:e4:
cf:64:bb:a4:4a:74:85:4b:92:ba:f7:cf:0a:0b:b5:
29:1c:25:8a:60:55:29:e1:2a:45:61:7d:8a:17:21:
0f:f3:13:ff:c4:37:b7:c9:ea:a2:67:d7:10:c4:73:
e4:0e:e7:9e:eb:c3:e7:3c:d0:66:c9:64:ff:1b:3d:
52:46:2d:d8:17:22:c3:47:1a:0c:93:b8:5f:e6:4a:
64:fa:bf:00:ad:b3:91:8f:e1:34:e0:82:cb:62:d0:
7e:bc:77:aa:45:50:7f:20:0b:42:3d:1d:e4:71:0e:
96:8f:e9:4e:86:14:e9:4f:d0:c1:73:75:42:75:e3:
64:a0:5a:f9:82:6d:e3:ef:3e:b1:0d:bd:40:1f:84:
63:56:56:cb:de:e1:9b:e6:23:76:97:c4:6e:b3:7c:
03:80:12:a6:c7:42:e8:ba:dd:93:cd:a7:e6:38:6e:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0F:42:1E:A8:B8:08:5E:42:F2:0D:94:8E:47:DA:70:E1:0D:B0:7B
X509v3 Authority Key Identifier:
keyid:B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a2:7f:af:e4:a3:f2:bf:aa:e0:cb:30:43:c1:41:29:6a:7f:
50:8c:71:66:36:d7:9b:41:45:41:36:fe:89:88:fe:f7:91:de:
ba:3c:be:4b:4b:1e:75:df:79:16:86:aa:15:38:a5:9f:d1:59:
01:78:0c:6c:1b:a7:2f:ab:a8:9e:cc:09:42:91:82:fa:85:03:
3e:5b:a7:4e:db:80:85:6c:27:cf:f3:0f:2c:e8:e6:44:9c:ae:
fb:ae:99:c5:3b:8f:b5:17:98:60:a4:5e:a1:4c:b3:9b:d4:92:
0f:30:12:ad:cf:cc:82:8f:02:2d:62:bc:ce:4f:64:a1:46:d7:
56:e4:fc:02:fb:a7:12:0a:95:86:a6:6b:fc:b7:c3:76:d5:30:
c3:bf:4d:43:2c:29:44:5f:04:5c:8e:78:d0:1f:03:15:65:f9:
f8:fb:72:76:d0:67:46:a5:63:0c:4f:c5:ee:30:1a:8f:84:43:
92:e5:3a:af:c9:0b:1c:e0:ae:51:76:b7:57:e8:50:cf:79:8f:
41:8a:b6:e3:11:cf:98:56:53:43:6f:e1:67:76:51:20:f5:23:
b1:41:db:73:90:cf:a5:a1:10:ad:10:e8:26:f9:a3:92:ac:5c:
91:76:2b:f2:ad:36:82:e7:de:8f:c0:95:c4:42:5a:4e:d5:51:
75:6c:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:35 2025 by rpki-client