Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
File: 627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft (raw, json)
Hash identifier: 1jJzkiSKCIgDAkNiNj1u7t08EwUECOBO28RrKFdEM90=
Subject key identifier: 99:7D:A9:7E:4B:4A:C2:90:1B:81:91:DA:41:70:2F:47:4C:83:D7:97
Authority key identifier: 62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
Certificate issuer: /CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
Certificate serial: 3AE524BFF168CCA78BF24F83182F365BB65BE121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
Manifest number: 02DF
Signing time: Fri 31 Jan 2025 04:37:46 +0000
Manifest this update: Fri 31 Jan 2025 04:32:46 +0000
Manifest next update: Sat 01 Feb 2025 06:29:46 +0000
Files and hashes: 1: 627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl (hash: sevdLgtsntwSzJqMsW14lMhiDqBlm+v31UCCYWVw/TA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e5:24:bf:f1:68:cc:a7:8b:f2:4f:83:18:2f:36:5b:b6:5b:e1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
Validity
Not Before: Jan 31 04:32:46 2025 GMT
Not After : Feb 1 06:29:46 2025 GMT
Subject: CN=997DA97E4B4AC2901B8191DA41702F474C83D797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:4d:9a:fc:71:b0:a5:d7:48:32:ad:df:95:
93:02:41:0a:d3:50:d7:a8:a9:96:64:40:f1:d4:d6:
a4:10:df:21:fc:f1:55:4c:f6:b6:32:8a:8e:57:8f:
2e:08:e6:47:98:e7:6c:7a:b6:08:3b:15:b9:62:b7:
ad:2d:e9:a2:34:42:d3:77:59:7e:34:9f:bf:a3:dc:
ae:0a:5b:b0:c0:57:da:0f:4a:23:21:88:dd:2c:d2:
c1:95:d7:15:31:ac:79:a6:35:78:65:64:30:b3:b6:
d1:2f:16:48:f1:cd:02:b2:15:b3:04:2d:3d:6c:75:
3c:36:9a:4f:15:f6:d6:1b:8c:e6:5e:c0:ca:31:24:
72:14:a6:8f:07:0e:e0:82:c2:68:06:6e:05:f8:53:
1f:0c:d0:d3:06:f7:8f:66:dc:57:6a:0a:99:24:d2:
17:a1:32:80:f5:1c:c2:13:69:69:ae:d3:31:cf:a9:
42:2c:e3:c7:2a:34:51:bb:c5:da:d9:35:1b:52:ce:
7a:32:66:cd:98:3b:42:50:92:26:c4:fc:1a:61:af:
67:c6:22:7b:31:0e:2b:c8:8d:ae:51:21:67:f7:92:
9a:8f:54:28:60:ec:bf:10:51:bf:e4:a1:8b:f2:1a:
93:17:59:8b:06:9c:bb:56:b7:b3:2e:2a:58:21:54:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:A9:7E:4B:4A:C2:90:1B:81:91:DA:41:70:2F:47:4C:83:D7:97
X509v3 Authority Key Identifier:
keyid:62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:29:fe:b9:98:c2:c8:7e:c6:d9:bf:34:ef:f7:1b:74:26:1c:
30:2b:fb:9b:8b:bc:0d:a6:0d:2e:b7:7a:b3:9a:64:60:b4:be:
e2:e7:1f:c3:93:97:b1:7f:20:20:34:6c:52:dc:34:b2:77:e7:
7e:d8:eb:5d:6f:f0:dd:f3:e1:df:9c:5b:5c:e5:b7:36:e6:cb:
a1:68:f4:c6:6a:77:ff:10:36:51:e7:51:56:84:a9:80:91:04:
8f:7e:fa:e7:46:e9:e0:21:39:ba:9c:21:0c:c4:37:20:df:c3:
8e:2e:5f:db:e4:ac:82:1a:13:e3:89:35:e5:43:90:f6:b1:87:
b7:8e:90:2e:88:f3:08:58:49:bd:de:5e:f6:32:6a:c6:11:44:
67:1a:0d:d6:9f:ed:22:66:8e:d1:a9:9e:b2:16:dc:6d:bf:f4:
e7:3a:61:1d:d7:b1:40:a0:38:10:87:4a:12:03:29:4a:e1:77:
10:98:34:7a:22:3a:86:c7:c3:cf:22:97:6b:81:c2:34:7c:e0:
24:a1:60:88:6e:00:9e:2c:b3:2f:1a:9a:7e:40:a1:04:0e:59:
3c:8f:fa:0d:f9:97:8c:28:d0:06:6c:fa:7e:ee:ef:b1:e8:f9:
e2:b6:c7:ca:ba:1d:9f:8c:09:e6:52:b8:b9:65:26:33:fd:d5:
5f:f3:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:00:30 2025 by rpki-client