Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: GOzxDApQ8zsKldL8+UT+CSHQ4vmaP9G97kxV3hz/Njc=
Subject key identifier: 4A:0B:71:A2:8F:26:14:F4:AD:2F:69:4F:70:1C:40:34:E5:52:A9:2D
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 38B77F89A74CCBC9A91EAD6E42BE1761E0EA6D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 16:05:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 19:08:22 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: ltv4ZytxoMl54irDROoV+54dTQfUb/9IcDFDo7+iKNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b7:7f:89:a7:4c:cb:c9:a9:1e:ad:6e:42:be:17:61:e0:ea:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 19:08:22 2025 GMT
Subject: CN=4A0B71A28F2614F4AD2F694F701C4034E552A92D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:f9:bb:37:92:0a:a1:d6:8b:0a:99:7e:cf:
59:ee:56:6d:d6:f0:4d:45:fb:2c:c1:a8:99:b7:3e:
a7:2f:c3:09:bc:b7:f7:99:22:0b:82:fc:0f:23:46:
8f:dc:2c:b3:44:d5:f9:64:bc:0b:f2:1b:84:a1:16:
29:98:fc:40:48:fa:9c:34:73:f5:68:b7:56:1a:6d:
d8:4c:81:57:96:7d:52:97:15:9e:50:ee:c1:98:be:
45:6a:bb:58:32:b8:fb:3e:2e:42:30:a1:f0:e1:ba:
72:35:08:52:ec:69:08:c5:8a:a3:93:77:07:7a:2e:
6d:bf:06:c8:34:48:5a:88:85:9f:bd:39:ba:f9:32:
e9:18:f2:0d:0a:df:4f:5b:75:94:80:39:1e:4e:bb:
5e:0d:35:43:e8:96:5d:8a:83:e5:66:e7:07:7a:b1:
d8:27:aa:de:32:f4:b5:09:4b:01:b1:48:a7:aa:6a:
53:c6:a7:d1:db:02:c2:8d:79:5e:e8:17:f5:d5:40:
b9:30:87:23:c7:d4:ff:18:53:ef:4e:f9:70:6a:19:
2b:e3:fa:4b:6a:e9:05:5c:9b:db:28:f8:c4:5a:dd:
4f:0f:ca:b0:20:5a:4d:ba:66:85:78:7d:9f:69:89:
25:de:fb:8a:b8:42:d9:5d:2e:30:1a:18:64:c8:b4:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:71:A2:8F:26:14:F4:AD:2F:69:4F:70:1C:40:34:E5:52:A9:2D
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:03:ab:38:a9:d3:4c:bb:e2:e1:b1:c5:c8:b7:31:e7:25:7c:
b9:10:e5:ae:0b:ca:d8:99:94:a6:0a:c4:23:cc:cc:5b:f1:c8:
9b:c0:90:a0:92:19:c7:52:b5:fe:0a:4c:34:e8:4f:54:93:ca:
86:34:5d:bc:e2:60:ed:60:ac:d0:30:7b:5e:b0:35:c6:c2:2b:
99:3e:87:d5:c1:68:81:fc:60:c9:44:6f:8a:c7:be:57:d5:c4:
81:23:d6:99:d8:56:74:2b:a8:15:f0:ca:be:c1:87:31:bf:8c:
7a:05:61:81:a1:8e:7e:f9:01:a7:ca:56:c5:d1:a0:14:00:56:
9b:8b:c4:07:30:66:96:04:ec:b0:ed:a6:08:2c:21:13:82:6f:
ca:30:e4:15:0e:87:0e:a1:13:39:0f:db:b9:62:9f:e4:9c:ac:
e7:31:aa:dd:ab:40:77:04:0a:f9:05:e9:2c:0d:6a:ef:dd:8c:
ec:ec:7a:a9:df:df:6f:23:c4:50:9f:6f:d9:a0:2a:65:90:70:
21:fc:56:90:a5:11:18:45:7d:7b:8a:40:53:2f:5e:4f:14:a2:
62:a9:33:d9:5f:4f:64:31:43:e7:c4:ae:35:2b:63:52:1e:a7:
b0:03:34:18:64:fc:82:65:b2:74:e6:19:e5:e1:84:98:1e:a9:
74:b6:96:c5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOLd/iadMy8mpHq1uQr4XYeDqbQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZjY2YxOWQ3YjYxMDg4MGRiMjJkNDBlYzliYWUwMmIx
MjAxMzc2MzAeFw0yNTAxMzExNjAwMjJaFw0yNTAyMDExOTA4MjJaMDMxMTAvBgNV
BAMTKDRBMEI3MUEyOEYyNjE0RjRBRDJGNjk0RjcwMUM0MDM0RTU1MkE5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCts/m7N5IKodaLCpl+z1nuVm3W
8E1F+yzBqJm3Pqcvwwm8t/eZIguC/A8jRo/cLLNE1flkvAvyG4ShFimY/EBI+pw0
c/Vot1YabdhMgVeWfVKXFZ5Q7sGYvkVqu1gyuPs+LkIwofDhunI1CFLsaQjFiqOT
dwd6Lm2/Bsg0SFqIhZ+9Obr5MukY8g0K309bdZSAOR5Ou14NNUPoll2Kg+Vm5wd6
sdgnqt4y9LUJSwGxSKeqalPGp9HbAsKNeV7oF/XVQLkwhyPH1P8YU+9O+XBqGSvj
+ktq6QVcm9so+MRa3U8PyrAgWk26ZoV4fZ9piSXe+4q4QtldLjAaGGTItPdLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUSgtxoo8mFPStL2lPcBxANOVSqS0wHwYDVR0j
BBgwFoAUZszxnXthCIDbItQOybrgKxIBN2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzIvNjZDQ0YxOUQ3QjYxMDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pzenhuWHRoQ0lEYkl0UU95YnJnS3hJ
Qk4yTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02
ZGI5LTQyNWItYWNhZS03ZTIwZmJlNmUxMjkvMi82NkNDRjE5RDdCNjEwODgwREIy
MkQ0MEVDOUJBRTAyQjEyMDEzNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwOrOKnTTLvi4bHFyLcx
5yV8uRDlrgvK2JmUpgrEI8zMW/HIm8CQoJIZx1K1/gpMNOhPVJPKhjRdvOJg7WCs
0DB7XrA1xsIrmT6H1cFogfxgyURvise+V9XEgSPWmdhWdCuoFfDKvsGHMb+MegVh
gaGOfvkBp8pWxdGgFABWm4vEBzBmlgTssO2mCCwhE4JvyjDkFQ6HDqETOQ/buWKf
5Jys5zGq3atAdwQK+QXpLA1q792M7Ox6qd/fbyPEUJ9v2aAqZZBwIfxWkKURGEV9
e4pAUy9eTxSiYqkz2V9PZDFD58SuNStjUh6nsAM0GGT8gmWydOYZ5eGEmB6pdLaW
xQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:33 2025 by rpki-client