Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft
File: 32F267CC5A6C13207B7228C9D0A849752F5036FF.mft (raw, json)
Hash identifier: msszTlvmO5zfza2F/9Atrh2+/2hCVPDNGxlCrnGhfn8=
Subject key identifier: 0E:E9:88:10:2C:05:0F:10:4D:11:05:1F:6F:B5:6B:11:D4:04:E8:DD
Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
Certificate issuer: /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Certificate serial: 059AAB5442EE34914CA79B0B056FA8CCD2CE2ABF
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft
Manifest number: 015E
Signing time: Fri 31 Jan 2025 17:25:12 +0000
Manifest this update: Fri 31 Jan 2025 17:20:12 +0000
Manifest next update: Sat 01 Feb 2025 20:26:12 +0000
Files and hashes: 1: 32F267CC5A6C13207B7228C9D0A849752F5036FF.crl (hash: EC+nlJasNPWoZK6uGZ8a81lmkRw7appHUKU50NHBySU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9a:ab:54:42:ee:34:91:4c:a7:9b:0b:05:6f:a8:cc:d2:ce:2a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Validity
Not Before: Jan 31 17:20:12 2025 GMT
Not After : Feb 1 20:26:12 2025 GMT
Subject: CN=0EE988102C050F104D11051F6FB56B11D404E8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:72:7a:81:e9:f8:79:61:a8:86:8c:48:fb:
d2:15:f8:dd:65:ec:42:98:3c:a8:ee:54:6f:8c:ca:
a6:f5:3b:78:6d:f7:54:0d:03:9f:9d:95:4f:f7:8c:
ea:89:19:78:1d:3f:46:12:aa:c4:f7:99:8f:92:57:
06:9a:b9:57:a0:21:23:0f:89:66:b6:a4:02:08:e4:
07:05:62:e0:4e:30:69:88:0c:23:2d:6e:8c:84:71:
a3:c8:5c:7b:8d:c1:c0:38:6d:6f:c8:d9:9f:52:5d:
97:29:21:22:d3:2c:73:90:02:db:fe:8b:38:37:70:
5a:8d:cd:04:5c:2a:a0:48:69:13:9f:f8:f0:16:88:
6b:d6:0f:bf:b8:cc:41:f2:84:8a:6c:99:70:be:6e:
6e:5e:3a:0b:12:6b:db:46:5c:c4:86:4c:ba:81:68:
8c:95:d1:ed:ce:ba:6f:1c:bf:16:3b:0c:5d:92:35:
6a:15:f8:8b:00:de:af:20:5f:ab:61:fa:e4:6d:57:
aa:2b:31:3d:3c:23:e1:b3:69:e7:70:6d:82:84:93:
1a:ba:ea:b4:23:31:d9:f1:79:26:24:a0:0c:cf:f4:
1c:03:ca:52:fa:2f:ab:f5:e3:bb:aa:f5:f7:2d:ef:
64:f6:32:db:15:01:34:e2:6f:d5:af:2f:1c:be:54:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E9:88:10:2C:05:0F:10:4D:11:05:1F:6F:B5:6B:11:D4:04:E8:DD
X509v3 Authority Key Identifier:
keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:53:4d:ea:fa:1a:cc:05:84:48:d2:62:11:21:66:4c:5f:08:
20:cb:6d:e5:92:34:d5:1f:29:ca:19:bd:d7:ad:fd:f6:99:ca:
fa:cb:26:21:5c:e6:7d:bd:c3:ca:1d:23:f5:c7:c5:58:95:ba:
3f:ee:ae:77:e0:93:83:31:00:e4:84:e7:d6:54:cc:ca:c6:23:
74:19:d5:dd:8b:de:0b:fb:77:39:af:b1:36:a7:28:73:aa:ed:
75:dc:1c:94:58:a1:49:e8:aa:26:ba:51:e2:ec:a5:58:76:2c:
5a:1c:14:5d:40:fb:13:ed:26:9a:7f:09:cb:6b:ea:7f:4f:61:
ab:46:b8:4c:b1:36:22:2b:44:4e:ae:f4:2e:88:be:3b:33:7c:
d2:36:9c:0c:a8:b4:c8:b1:fd:a2:15:c7:af:cb:38:59:55:2f:
cf:a1:64:5d:6a:a5:af:ea:4a:b6:89:48:5c:2f:f4:84:ff:13:
91:fd:25:f7:cd:47:96:cb:b6:6d:be:e9:c4:20:48:00:9c:5b:
ac:af:b5:db:6b:30:b7:23:fc:a7:5f:d7:dc:3e:16:6b:11:52:
aa:14:58:79:61:92:b8:1f:f9:33:38:88:e0:25:e9:0e:79:b0:
dd:ea:6a:42:00:33:74:f3:24:f6:d9:db:6d:0c:cc:6b:13:6e:
7f:df:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:37:42 2025 by rpki-client