Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: S4mDNEZzYPz8dAx3p9zWC+VCkoAWShc/HEbeiDmbohc=
Subject key identifier: AC:5C:1B:D7:18:B4:A3:90:93:89:99:26:DF:44:03:4C:68:F8:8B:29
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 383B80CC713B55BADFD07F2C8737C2CC06652F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 87
Signing time: Fri 31 Jan 2025 17:22:14 +0000
Manifest this update: Fri 31 Jan 2025 17:17:14 +0000
Manifest next update: Sat 01 Feb 2025 20:08:14 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: wOhdnI2m83SN1g0EY3yIC2TujLOgZX5vD4hmswTLj3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3b:80:cc:71:3b:55:ba:df:d0:7f:2c:87:37:c2:cc:06:65:2f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Jan 31 17:17:14 2025 GMT
Not After : Feb 1 20:08:14 2025 GMT
Subject: CN=AC5C1BD718B4A39093899926DF44034C68F88B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:08:a2:d6:06:67:9e:c6:29:d6:e3:ca:43:
46:81:8f:10:d3:22:08:26:6f:e3:64:90:db:b2:19:
b1:7f:d5:84:ce:61:fe:04:75:8a:7d:79:9f:08:cf:
a5:24:e1:92:05:69:33:ae:18:e8:3f:85:d7:71:e0:
38:5e:ef:f5:d7:55:ac:0d:39:91:ec:15:04:b6:6a:
8c:72:af:ee:26:da:b4:c7:20:2f:fc:ce:05:05:86:
0b:8d:97:cc:01:be:43:c5:bf:60:92:34:20:d1:f0:
0f:36:da:e6:51:b4:47:4b:59:26:b6:c2:55:15:0f:
c3:2d:57:43:a3:4f:f1:91:37:ef:3b:ff:6c:87:0e:
8d:67:9e:0f:b0:4a:c3:75:10:77:09:c0:44:f7:bd:
cd:0b:80:36:de:d2:1d:e0:86:b2:d8:d6:1b:0d:79:
f1:fc:a9:97:5f:d5:ce:0e:46:af:40:25:90:28:5e:
e5:b0:01:44:d2:e4:8f:08:17:ba:bd:fd:66:e7:69:
57:b3:42:1f:e3:6e:d1:99:39:c4:ba:8d:95:7d:36:
10:37:fc:7f:aa:f3:ee:74:85:63:c4:47:93:97:1e:
15:b9:b0:ed:ec:0a:36:e3:43:af:37:bc:a0:f8:fb:
9c:b7:07:11:5b:bf:5f:e9:ac:29:52:29:08:4b:c5:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5C:1B:D7:18:B4:A3:90:93:89:99:26:DF:44:03:4C:68:F8:8B:29
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:f4:7a:c6:b2:bb:cf:b1:5d:56:28:33:23:53:66:5b:ba:
07:ef:87:84:2f:53:49:a1:71:46:04:82:69:9c:3d:67:b0:0b:
c5:e1:45:cd:ef:39:ca:b4:35:af:c4:b3:fa:4d:3c:ff:fc:c9:
ef:99:fa:64:b2:99:c0:fd:8e:80:2c:bd:0f:60:2d:61:05:85:
80:2e:ac:f1:85:81:22:92:7f:4d:22:5e:86:bd:70:a4:9d:74:
0c:9d:ab:06:1f:a6:3a:a3:b0:c3:88:50:91:64:11:84:22:7a:
62:c0:85:95:23:c2:50:02:4a:68:20:c7:fd:8f:6a:16:fa:13:
dc:78:f5:d3:af:d8:66:a3:bb:5e:34:60:e5:4e:50:b1:83:b9:
f7:f5:8c:d1:76:49:4d:c7:2a:15:32:46:26:dc:96:d8:c1:12:
78:f1:5a:04:fd:05:6d:27:77:1a:b2:28:5a:ff:1c:6f:93:d4:
4d:45:19:bc:72:51:51:68:e9:0e:a5:f2:95:73:6c:66:7b:07:
b5:e7:a7:cb:d2:54:f0:e6:7c:e9:2f:24:3a:ce:f1:5a:a5:78:
6e:4d:da:e1:a2:aa:b5:bd:8e:82:0a:f6:8b:10:69:52:af:a2:
51:f3:df:fc:c9:94:c9:ff:15:75:ae:11:ef:31:14:1a:d3:8b:
40:af:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:38 2025 by rpki-client