Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: UrlG6pcYwIxkhOnHzDWyDh01hN9uspr6R4sCNNF76cA=
Subject key identifier: 09:D7:AC:2F:95:CA:D2:71:DD:0C:29:D1:17:8D:36:0F:E4:43:60:9C
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 2E238DDE58BF21CE90C0554BB07CCF80C4AC2A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 025A
Signing time: Fri 31 Jan 2025 07:08:11 +0000
Manifest this update: Fri 31 Jan 2025 07:03:11 +0000
Manifest next update: Sat 01 Feb 2025 08:27:11 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: 1XdyGfN1QY7W/f5PlXC0aUAVnQ43/+Y7RzhM/K0gBeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:23:8d:de:58:bf:21:ce:90:c0:55:4b:b0:7c:cf:80:c4:ac:2a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Jan 31 07:03:11 2025 GMT
Not After : Feb 1 08:27:11 2025 GMT
Subject: CN=09D7AC2F95CAD271DD0C29D1178D360FE443609C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:18:b9:b2:78:d4:a8:39:9e:3e:aa:92:74:
24:71:be:17:12:2b:ed:0b:29:d6:81:41:85:7a:ca:
70:af:f5:7e:dc:ab:1b:c1:ff:98:db:66:f3:e5:f5:
bb:88:3c:71:93:a9:74:95:6b:6a:a9:51:7c:49:52:
8a:73:01:bb:03:48:87:23:10:65:26:a7:27:5e:50:
a5:36:cd:1c:00:74:3c:e1:b4:40:54:ce:34:79:77:
e8:b2:79:e8:63:bb:b5:5c:7c:43:22:6b:17:5e:e4:
14:33:04:a3:a3:24:cf:33:aa:32:9b:0a:cd:28:7c:
35:97:72:3a:b2:87:81:a9:73:f9:a5:08:cf:43:ed:
45:fb:e6:4b:98:0f:ff:d2:6a:80:a6:74:f4:fa:f1:
97:b4:ce:ca:0b:c7:f1:e8:df:e7:11:81:2f:e9:8f:
0c:ee:8d:9f:69:19:1e:68:c6:2d:3d:e8:dd:a5:f0:
02:10:c2:ce:6e:57:86:07:d2:55:45:ee:30:5f:88:
86:ab:6e:59:0b:4e:02:23:f6:fb:76:a3:fc:88:94:
ed:4f:e2:3e:a1:76:22:09:b6:ff:7b:1d:0d:7a:85:
96:61:ae:87:08:c7:fe:9e:e7:58:62:0e:29:09:91:
fc:4d:f0:6a:a2:c8:7c:91:00:cf:e4:16:2f:ab:8a:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:AC:2F:95:CA:D2:71:DD:0C:29:D1:17:8D:36:0F:E4:43:60:9C
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:e7:34:0c:b4:dc:cd:5c:23:a7:6a:86:6c:48:9f:30:57:
42:4a:36:be:39:9f:83:35:41:60:41:1d:00:93:48:60:bb:ae:
1e:d1:9c:11:75:16:1d:a2:96:2e:9e:c2:7b:aa:a3:2e:67:98:
f6:e4:6d:13:f4:6b:10:1f:e0:22:28:1a:e6:c2:65:cf:2f:4c:
09:1e:10:cc:e5:25:cb:04:aa:52:cc:4b:be:2c:53:0f:5c:24:
5e:f1:61:39:6f:93:5f:68:56:73:46:49:ac:25:e6:87:44:1a:
2e:83:e7:32:40:9e:4d:a4:3c:ba:76:72:6b:37:03:92:6e:34:
06:92:71:fe:03:da:11:5c:e0:14:f4:81:ad:f2:ef:76:a9:9d:
00:f8:e7:6d:f1:5b:ec:7f:00:6b:de:85:f4:18:23:db:2e:ae:
0a:21:50:f7:45:75:68:7b:1b:1d:19:94:c8:55:47:0e:7d:c7:
8e:a7:8d:0e:0e:9e:8f:da:14:68:6b:db:16:f5:4f:75:e4:66:
8e:15:c2:c8:9b:d7:4a:10:6a:d1:48:b5:9d:da:70:fa:94:4c:
ed:ea:55:55:91:c9:af:54:d2:3f:32:06:28:9b:95:3b:80:89:
db:b1:fc:5b:2d:89:46:6c:b1:12:fe:b3:38:dc:43:41:7c:a5:
bf:22:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:36 2025 by rpki-client