Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: CTsrig5lhEmtigXxA2oPDkfZpMmcWyyZhpv+KqyQ+Gs=
Subject key identifier: B7:C5:39:5C:57:50:6A:7A:A6:0E:54:C8:10:B0:F4:3F:5C:71:73:24
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 3E73FC82F4784FC59266C07A75691ADC60F5E8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 020D
Signing time: Fri 31 Jan 2025 17:14:00 +0000
Manifest this update: Fri 31 Jan 2025 17:09:00 +0000
Manifest next update: Sat 01 Feb 2025 20:19:00 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: puAR70tfLbtx+e5XyY0+TqNROPNsyb9I5jNwCzoxYWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:73:fc:82:f4:78:4f:c5:92:66:c0:7a:75:69:1a:dc:60:f5:e8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Jan 31 17:09:00 2025 GMT
Not After : Feb 1 20:19:00 2025 GMT
Subject: CN=B7C5395C57506A7AA60E54C810B0F43F5C717324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:f5:e6:5d:70:43:0f:cd:6f:0c:51:32:6b:
31:45:2d:81:4a:11:0d:a2:5a:72:25:2d:26:0d:cb:
f2:55:d7:f7:4b:83:6a:3a:b4:a1:47:98:f9:f7:9f:
49:a4:43:82:13:51:ad:f9:88:dd:f1:5d:a0:14:3c:
25:12:54:56:d5:42:92:e2:7d:09:a3:62:ee:61:3e:
bb:91:06:ae:1d:12:77:eb:e6:bf:4a:82:f5:60:bb:
af:4d:bd:54:e4:ad:b7:4f:35:64:dd:90:4b:f9:cf:
72:a6:79:8b:90:68:d8:06:be:05:6a:f4:3a:63:d8:
4e:22:fd:a6:03:70:e6:30:db:21:cb:6e:b2:d5:94:
7c:6d:b7:92:ad:21:ea:47:19:e8:35:65:1f:6b:83:
0b:ae:8e:bc:d2:70:f8:53:2d:44:d0:41:90:af:18:
0e:3a:2a:38:1f:33:01:10:ef:85:c0:40:bc:cf:86:
53:e9:5c:49:8f:6a:0b:f7:29:5f:8e:cf:2b:ac:de:
cb:1d:ce:95:a4:95:df:dc:e6:18:e8:74:4c:a7:c0:
31:76:8d:2d:7d:0c:72:c4:13:a6:b3:95:81:76:9b:
fa:e8:4f:b6:73:c1:bb:94:43:42:31:ae:29:14:1e:
7d:06:52:32:fe:8b:dd:52:0b:c9:4f:0b:b3:58:6d:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:39:5C:57:50:6A:7A:A6:0E:54:C8:10:B0:F4:3F:5C:71:73:24
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:36:ae:3b:17:10:bf:79:28:fe:f7:40:3f:3f:42:eb:31:
bf:5e:6c:e8:39:7b:09:bf:23:ac:c9:26:55:ff:be:85:13:d5:
0c:98:59:3e:df:da:91:9c:57:30:32:fa:a7:67:2e:4e:47:c4:
53:27:e1:73:1e:bb:c6:03:c3:8c:93:c2:7e:ec:74:2c:40:eb:
59:65:5f:4b:15:2e:b6:a5:73:07:ee:b8:6d:92:03:46:ee:74:
ab:e7:af:6a:36:12:2b:37:52:dc:f2:71:74:16:a4:a6:4b:ab:
52:cc:5b:0c:ba:d8:7d:74:25:ab:98:e1:01:35:99:ed:ed:f6:
36:d2:37:f1:21:5f:de:71:1f:8b:82:43:e5:a8:4c:43:d8:2d:
50:94:8a:e7:3e:5c:1b:d2:20:f3:02:28:64:17:13:3c:6e:c5:
a4:3a:d7:8b:ed:fb:10:37:97:cd:d9:e0:e0:5b:b6:6d:df:92:
13:87:85:44:5a:31:98:bd:b2:0b:60:55:d7:cb:b1:2f:27:74:
20:fd:4e:a7:6c:63:7c:67:50:c9:c1:92:fb:b1:42:c4:c4:cd:
d2:4f:07:97:29:c2:17:9c:50:6b:b6:fa:e5:96:ce:3d:ac:9f:
76:95:80:a2:61:24:e1:3f:1f:75:6a:92:ea:b4:72:f9:2c:86:
25:1f:2d:0f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPnP8gvR4T8WSZsB6dWka3GD16PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxMWUyNWMyMjM0YzFlNWEyYmZjZjdmZGNhYzU0YjAx
YWYzNzNiZDAeFw0yNTAxMzExNzA5MDBaFw0yNTAyMDEyMDE5MDBaMDMxMTAvBgNV
BAMTKEI3QzUzOTVDNTc1MDZBN0FBNjBFNTRDODEwQjBGNDNGNUM3MTczMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8N/XmXXBDD81vDFEyazFFLYFK
EQ2iWnIlLSYNy/JV1/dLg2o6tKFHmPn3n0mkQ4ITUa35iN3xXaAUPCUSVFbVQpLi
fQmjYu5hPruRBq4dEnfr5r9KgvVgu69NvVTkrbdPNWTdkEv5z3KmeYuQaNgGvgVq
9Dpj2E4i/aYDcOYw2yHLbrLVlHxtt5KtIepHGeg1ZR9rgwuujrzScPhTLUTQQZCv
GA46KjgfMwEQ74XAQLzPhlPpXEmPagv3KV+Ozyus3ssdzpWkld/c5hjodEynwDF2
jS19DHLEE6azlYF2m/roT7ZzwbuUQ0IxrikUHn0GUjL+i91SC8lPC7NYbWiHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUt8U5XFdQanqmDlTIELD0P1xxcyQwHwYDVR0j
BBgwFoAUIhHiXCI0weWiv89/3KxUsBrzc70wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzAvMjIxMUUyNUMyMjM0QzFFNUEyQkZDRjdGRENBQzU0QjAxQUYzNzNCRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0loSGlYQ0kwd2VXaXY4OV8zS3hVc0Jy
emM3MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZGE0ZDhiNC1h
MTU3LTQ2MzQtYWIxOC0zZWY5ZDA5ODIzNTIvMC8yMjExRTI1QzIyMzRDMUU1QTJC
RkNGN0ZEQ0FDNTRCMDFBRjM3M0JELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI242rjsXEL95KP73QD8/
Qusxv15s6Dl7Cb8jrMkmVf++hRPVDJhZPt/akZxXMDL6p2cuTkfEUyfhcx67xgPD
jJPCfux0LEDrWWVfSxUutqVzB+64bZIDRu50q+evajYSKzdS3PJxdBakpkurUsxb
DLrYfXQlq5jhATWZ7e32NtI38SFf3nEfi4JD5ahMQ9gtUJSK5z5cG9Ig8wIoZBcT
PG7FpDrXi+37EDeXzdng4Fu2bd+SE4eFRFoxmL2yC2BV18uxLyd0IP1Op2xjfGdQ
ycGS+7FCxMTN0k8HlynCF5xQa7b65ZbOPayfdpWAomEk4T8fdWqS6rRy+SyGJR8t
Dw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:31 2025 by rpki-client