Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.mft
File: 8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.mft (raw, json)
Hash identifier: 1Ay5YX+xNXIwDE5MTyQO3pV+xV/aqElpqP2n1xJVi8U=
Subject key identifier: 70:FB:89:50:70:35:50:FA:FA:70:ED:A0:09:09:CD:6A:57:46:AC:0E
Authority key identifier: 8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
Certificate issuer: /CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Certificate serial: 0E34341545B23FB5D602EAB19B8B546C72C93B8D
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.mft
Manifest number: 015E
Signing time: Fri 31 Jan 2025 08:10:12 +0000
Manifest this update: Fri 31 Jan 2025 08:05:12 +0000
Manifest next update: Sat 01 Feb 2025 10:20:12 +0000
Files and hashes: 1: 8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.crl (hash: d2bdIUpJQU7KtXz9l6+/nYmxYDzEVKO7qpI+PNHLPRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:34:34:15:45:b2:3f:b5:d6:02:ea:b1:9b:8b:54:6c:72:c9:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE926DC29C1ABADF96D6B3B9838B32AFA445C54
Validity
Not Before: Jan 31 08:05:12 2025 GMT
Not After : Feb 1 10:20:12 2025 GMT
Subject: CN=70FB8950703550FAFA70EDA00909CD6A5746AC0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:35:53:e9:f3:70:d4:76:b7:b9:49:b6:1c:
65:b0:e7:64:d1:ab:28:f1:71:67:7f:52:31:d0:4d:
eb:82:da:12:48:9a:bc:cd:bc:5e:43:c8:8c:01:c0:
17:54:d6:c4:fa:13:dc:53:fe:a8:3f:1b:ba:b6:22:
da:b1:04:68:e2:f2:37:fa:24:af:cf:e1:74:ad:7c:
18:9d:83:3f:32:61:74:70:af:13:02:c3:9d:1e:78:
21:39:b0:b2:65:51:5c:e7:81:bf:62:2a:bd:d5:a5:
92:6a:2b:42:55:50:15:62:15:eb:1d:18:3e:2e:f0:
29:c9:4d:8c:ed:7c:ee:ef:fd:71:ba:e6:b8:ba:b7:
1e:6d:19:94:9c:71:84:67:d1:db:75:ab:25:ef:7e:
8e:bb:44:fc:a1:32:e2:26:af:4f:93:09:45:56:7f:
b9:60:53:2d:8a:10:08:86:fa:da:04:31:c9:e7:c2:
df:1c:e8:5a:76:f4:87:f1:3f:6b:41:dc:42:58:2f:
7a:82:e2:1c:85:bb:18:a7:55:dc:f9:b3:83:6c:6a:
bb:0a:4b:34:a2:32:94:58:85:0e:06:bc:c6:1d:46:
3e:da:3d:d9:f1:64:82:d3:c2:4b:e4:f3:96:c8:26:
31:cb:e6:93:20:cc:99:b5:4c:2b:88:1a:30:18:67:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:89:50:70:35:50:FA:FA:70:ED:A0:09:09:CD:6A:57:46:AC:0E
X509v3 Authority Key Identifier:
keyid:8B:E9:26:DC:29:C1:AB:AD:F9:6D:6B:3B:98:38:B3:2A:FA:44:5C:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/4/8BE926DC29C1ABADF96D6B3B9838B32AFA445C54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:00:0e:e4:f2:88:51:d1:5d:ba:40:a9:30:fd:b2:20:1b:73:
f6:67:38:87:d5:2c:18:1a:32:98:21:d9:b5:69:7a:8b:01:cd:
e4:a9:eb:55:f6:9d:8a:a5:29:e1:59:85:8b:0c:c4:74:cb:0e:
26:69:bb:bd:d8:e7:60:6e:42:b6:9d:ef:59:6a:d8:55:38:f8:
43:66:cc:9e:38:91:96:93:43:d4:0e:d0:8a:5e:75:b0:4a:86:
63:32:c4:d9:1f:51:df:84:d4:b9:74:53:76:1e:9f:90:9b:6b:
2c:41:31:70:a0:fa:09:d2:4f:2a:83:8a:c6:c9:68:c0:e0:41:
0f:8f:e2:00:b6:68:a7:6c:a4:12:73:f1:da:f2:8e:b8:b1:c3:
0c:a6:54:a8:a4:b0:8a:41:ec:41:80:47:f3:4c:0b:69:83:aa:
de:c7:00:30:73:e7:fe:ec:95:15:45:27:df:ba:27:35:35:b3:
c2:92:1e:d0:c8:ff:bb:96:15:f9:c9:06:63:e0:86:e5:6c:74:
d3:3f:c6:80:3c:7c:b5:69:51:00:7c:81:89:eb:05:fc:d7:94:
bf:2f:41:77:9d:f4:70:18:21:39:72:21:52:b9:9f:c0:27:9c:
27:e7:e3:39:47:cb:07:09:81:af:d2:00:10:20:82:b7:75:44:
ae:9c:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:32:57 2025 by rpki-client