Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File: 91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier: 6FTwhY67kBTJffE3zDdbOMdwcTN/F5G7azL7EVl/yL8=
Subject key identifier: FB:44:49:27:D0:FB:A7:BB:C4:AA:EC:55:D5:F1:FA:8E:3C:6B:57:1D
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 2029196793EEECCE2AE1BE8A309E8BD49CF76FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number: 0256
Signing time: Fri 31 Jan 2025 08:55:57 +0000
Manifest this update: Fri 31 Jan 2025 08:50:57 +0000
Manifest next update: Sat 01 Feb 2025 10:06:57 +0000
Files and hashes: 1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: XATJSq6ntr7zZD2rD9lO2PGWCBQQhnmv54JTwN15z3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:29:19:67:93:ee:ec:ce:2a:e1:be:8a:30:9e:8b:d4:9c:f7:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Jan 31 08:50:57 2025 GMT
Not After : Feb 1 10:06:57 2025 GMT
Subject: CN=FB444927D0FBA7BBC4AAEC55D5F1FA8E3C6B571D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:ac:da:ac:44:a2:02:fa:d7:28:67:0d:2a:
ef:28:f8:ee:57:08:7b:19:3d:15:e3:6e:71:dd:65:
0f:5f:2a:2c:aa:11:9f:a8:52:a8:47:a0:1e:03:89:
5a:e8:c2:d5:8b:a4:4f:dd:41:aa:05:ee:ff:0d:88:
0b:67:ec:51:9e:c0:ec:05:95:2f:06:5c:7a:df:dc:
5a:55:e8:3a:99:16:b7:25:c0:bc:f8:69:5b:94:15:
82:0b:35:70:c7:32:2d:0e:f9:5b:ba:69:5a:3d:81:
7a:80:5f:0f:bb:0f:7b:28:48:a2:9e:1e:77:b5:41:
8c:46:47:b3:d8:30:5e:da:46:78:32:fc:0f:ec:fa:
1f:f3:a5:e9:00:87:e7:d0:ed:0b:d0:5c:e0:44:53:
f3:c1:28:0f:25:80:0e:3a:05:0b:c4:58:a3:d1:a1:
3c:a5:f7:1c:e0:24:0e:06:9a:56:44:c2:55:63:74:
8b:87:2d:76:29:13:91:bf:f0:db:0b:d4:cb:fd:bf:
a9:ce:13:6c:f8:9d:19:fb:b8:33:f6:b9:e8:c2:0f:
47:b1:36:28:9d:01:df:10:b5:8b:5a:65:d5:27:c3:
6d:9e:9f:a1:8e:cb:59:c2:3f:6f:68:05:07:aa:6b:
f3:ab:e7:c9:81:55:fd:a4:ee:dc:df:29:e0:8c:20:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:44:49:27:D0:FB:A7:BB:C4:AA:EC:55:D5:F1:FA:8E:3C:6B:57:1D
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:94:f1:c7:0c:b4:c0:b9:d6:aa:5e:7e:f0:2d:66:e5:6d:6a:
b4:40:10:18:0a:6e:eb:c4:33:3e:10:20:65:33:44:4b:0a:ff:
40:f2:2d:3a:9a:7a:d2:12:44:65:8b:28:60:e6:ea:28:89:47:
86:7e:62:69:7d:1b:06:92:7a:ea:45:a3:c6:06:65:d4:99:2a:
33:65:ec:0d:a1:3c:f5:12:88:6f:a6:ce:b3:dc:c7:c6:5a:de:
27:1b:0c:f1:c7:17:ad:3f:59:d3:6f:d5:bd:31:04:84:1f:ca:
ac:36:7a:0b:60:7c:48:02:ff:89:27:22:ba:59:c3:7d:45:ec:
1b:7e:5b:28:0d:62:87:bb:c5:57:fb:82:61:2b:e2:85:11:d7:
b9:72:8a:a1:c8:15:fe:ab:39:2a:41:b6:d7:31:0d:3f:29:b9:
78:3c:2e:3a:27:13:5b:b5:c6:69:7a:6f:22:0c:41:89:17:28:
9e:c2:5e:0b:a3:e4:ed:7c:60:09:dc:4b:4f:d1:49:f0:44:17:
25:0f:0d:cf:be:91:5c:79:56:95:2b:10:28:a9:58:e2:79:5a:
c3:d4:23:56:34:d0:f4:4c:77:c8:d1:48:45:04:f2:3f:74:25:
ae:6e:39:2f:7b:6b:55:50:66:e4:31:e5:fe:37:21:b9:40:91:
af:02:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:32 2025 by rpki-client