Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: j8ct3DsXLXYZmvonnkQBT/jqmcRiwkatbZ8LtbTz5m4=
Subject key identifier: 13:FD:8D:02:BC:F8:FE:AC:1D:69:DB:4A:6F:DA:3E:50:0F:A6:53:0B
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 594EB204F3C9D5A6021AA6E7795E299D534713AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 0357
Signing time: Fri 31 Jan 2025 01:59:42 +0000
Manifest this update: Fri 31 Jan 2025 01:54:42 +0000
Manifest next update: Sat 01 Feb 2025 04:44:42 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: PPhnFM0vtU/tehUTAlsyApIL/akg7QezLp3koG0lI2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4e:b2:04:f3:c9:d5:a6:02:1a:a6:e7:79:5e:29:9d:53:47:13:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Jan 31 01:54:42 2025 GMT
Not After : Feb 1 04:44:42 2025 GMT
Subject: CN=13FD8D02BCF8FEAC1D69DB4A6FDA3E500FA6530B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:68:55:87:b6:7e:55:c2:6c:09:37:91:39:
18:95:95:f6:b3:bb:c0:e8:52:e5:4a:48:dc:4e:10:
ea:b7:03:f8:b1:ea:5d:15:bf:15:e5:ba:d6:58:85:
38:29:53:f8:d2:a5:1d:5c:2f:d6:79:70:86:7a:60:
f5:51:f8:af:7a:0e:c1:c8:c4:8c:ce:ed:98:ef:99:
05:99:b2:3d:db:a0:98:88:b6:d3:33:f8:f1:51:ee:
d1:5c:8e:22:63:df:36:a3:3e:bc:af:40:db:d2:2c:
b5:12:9f:68:84:b5:99:94:fa:03:a2:0c:54:37:6f:
54:73:6c:47:38:91:d5:ae:f7:ce:7e:35:9b:30:50:
6b:9e:2f:bf:be:fd:f1:fe:95:ae:85:94:f9:e2:23:
77:79:ec:a6:2b:b4:2e:e7:9a:05:4d:8a:02:51:15:
ab:a5:f3:cf:e0:f4:5e:6d:b3:86:5e:a2:ec:4e:a2:
0d:a1:5b:9d:9b:10:d9:88:0e:93:f7:e6:f2:74:e1:
1f:77:2c:cf:7c:2e:be:43:0e:77:34:00:4f:b3:a7:
f3:2a:80:22:e3:95:10:ef:f6:5d:1f:bb:74:2f:0c:
5d:13:a6:d6:c3:d6:6e:cb:0e:c3:c7:01:67:c9:44:
a5:6f:ef:63:25:2c:99:bb:cc:2a:b4:94:98:4b:60:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:8D:02:BC:F8:FE:AC:1D:69:DB:4A:6F:DA:3E:50:0F:A6:53:0B
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:9c:a8:3c:7f:5a:ea:b8:51:37:8f:bf:f5:6d:10:38:bd:
ad:25:6a:4d:5b:d9:c8:09:1f:04:d9:88:0c:7c:6a:3b:70:7e:
03:2f:bc:6c:68:76:9a:81:12:e3:6f:60:bf:f6:61:2d:81:72:
a2:92:f7:d9:21:03:b2:b4:4b:31:8b:e7:ff:79:ca:dc:85:71:
e2:ee:ed:d1:d5:72:4d:f2:0a:09:40:15:dc:9d:94:fe:df:f0:
d9:d3:7b:e5:f0:68:10:47:5e:24:a8:ba:60:48:c0:5f:bd:82:
78:39:78:33:6b:1f:80:1d:6e:55:ed:17:cd:ed:72:a6:2f:ce:
1a:1c:fd:c6:ea:16:49:95:88:bf:e1:7a:ab:32:a8:1c:23:d6:
ad:04:28:74:18:cb:5b:3a:c7:6d:0d:54:19:5c:c7:9f:d9:30:
4e:10:81:f1:a2:1f:85:39:23:64:2c:55:db:ab:52:6c:40:28:
e5:52:be:a1:df:40:07:98:23:f2:4f:83:5b:3b:88:f2:e2:b1:
3f:eb:77:a3:62:27:da:39:fb:53:f1:2e:51:f6:a6:ed:59:09:
3a:01:39:37:0a:30:9e:71:b3:a7:3f:d2:3d:d6:5c:23:f9:7e:
c6:0e:b6:fa:17:a0:bd:63:fe:d3:53:47:d2:a1:b1:39:96:e3:
0c:d2:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:59:00 2025 by rpki-client