Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft
File: 98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft (raw, json)
Hash identifier: Z5IAYsv92eJjpPz0rXEA1yVkSUFuH7vpZDtrnfdM1F0=
Subject key identifier: 31:24:75:74:56:F4:1F:64:FA:E1:18:B2:76:0D:3A:36:5B:9E:4F:CE
Authority key identifier: 98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB
Certificate issuer: /CN=98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB
Certificate serial: 47CEDA898282C57A5C742962191A1552AEAEDFDC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft
Manifest number: 0189
Signing time: Fri 31 Jan 2025 07:22:53 +0000
Manifest this update: Fri 31 Jan 2025 07:17:53 +0000
Manifest next update: Sat 01 Feb 2025 08:24:53 +0000
Files and hashes: 1: 98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.crl (hash: 9m98uaihMC1BcJyyArx5Htt6ndyBas8VJaBSxM+4IK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ce:da:89:82:82:c5:7a:5c:74:29:62:19:1a:15:52:ae:ae:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB
Validity
Not Before: Jan 31 07:17:53 2025 GMT
Not After : Feb 1 08:24:53 2025 GMT
Subject: CN=3124757456F41F64FAE118B2760D3A365B9E4FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:4b:54:1e:b2:01:1f:85:c1:b1:0f:9b:33:
f5:24:72:ef:0b:13:29:c5:8f:f0:9d:62:0f:ac:8e:
6e:45:88:51:76:9f:88:58:86:50:1d:9c:b1:34:34:
6b:99:1e:55:a2:dd:c0:25:2a:41:2b:cb:e3:28:6c:
fc:b3:0c:ec:14:a7:2d:e1:95:99:38:37:f3:9f:91:
b1:09:05:af:3b:2e:53:1d:59:1e:01:fb:e4:38:28:
68:ab:6b:eb:b1:7e:27:95:1d:cd:74:ad:65:d2:15:
0c:d7:f3:01:d6:3a:7f:6c:33:26:6f:e4:87:16:38:
b2:36:b9:d0:2e:78:3d:88:7e:8b:98:7e:c9:1d:12:
7a:98:c4:c6:04:76:2c:1c:75:3a:c1:c5:b9:96:b6:
6f:4e:28:92:55:a3:fd:8c:41:41:6b:3d:ff:a9:18:
50:68:14:a0:b1:21:40:64:c6:a6:91:e1:52:7a:6f:
6a:a1:bc:6b:7a:7f:25:02:c2:69:14:ae:65:45:49:
e7:67:3b:01:e0:e6:bd:c3:38:7f:9e:6e:51:6e:de:
c1:72:e4:67:85:eb:4b:ab:c6:bd:e8:54:91:39:b2:
1b:83:ac:2f:b9:96:97:8b:db:77:70:8f:75:f5:c0:
44:8a:b7:cd:9a:a9:29:d0:33:2c:07:9a:56:9a:71:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:75:74:56:F4:1F:64:FA:E1:18:B2:76:0D:3A:36:5B:9E:4F:CE
X509v3 Authority Key Identifier:
keyid:98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:2e:90:43:14:58:9c:55:78:ae:1e:bb:98:81:b3:f7:42:
45:b8:ba:55:ac:da:d7:32:f7:87:d5:a2:16:c7:d7:2f:2b:d6:
44:c0:bd:9a:b1:72:05:47:db:f8:b2:c0:be:5f:b6:3b:f8:b5:
36:ee:80:13:90:f6:79:48:e3:2a:ea:12:ef:65:d9:17:01:ec:
a5:83:98:48:39:0c:5d:e8:29:cf:2d:06:1e:7b:17:f4:e2:65:
f0:7d:5b:ca:42:51:e1:45:11:1f:3d:83:38:64:1d:f8:1b:9c:
7f:6f:88:22:e6:20:ed:fa:0f:de:09:b7:ed:3f:a4:d9:21:a8:
55:65:ce:ec:8e:a3:43:ab:ff:3f:d5:61:05:1d:f0:ce:cb:17:
55:50:78:5e:19:0f:fd:93:50:5b:a7:09:92:d9:54:1e:3d:04:
11:0e:ee:a0:db:b3:b0:19:25:3a:37:45:18:26:e3:e3:8e:c9:
96:f1:28:f2:5a:4d:7b:4f:cb:29:40:b6:ab:88:93:94:08:69:
b5:31:42:e0:56:a4:c0:c8:a9:dc:46:69:5d:3d:f2:9b:a6:9c:
d9:74:be:03:83:7f:d0:3c:16:f2:44:37:90:15:af:1e:9e:bf:
a4:cd:7a:54:d7:f0:8c:e2:dd:6d:35:90:f5:13:d5:69:54:11:
b1:e5:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:32:06 2025 by rpki-client