Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.mft
File: AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.mft (raw, json)
Hash identifier: D+bMRJf4luld8Je/ZxbBMokkO3T/SDKhD5HyMBS/mXQ=
Subject key identifier: D7:DD:92:A7:1B:4F:FA:88:81:9D:E1:99:B8:96:A7:8F:71:DF:D5:51
Authority key identifier: AF:74:F6:22:A1:9B:11:E7:14:6F:BF:AD:84:04:D8:24:CF:C3:B5:E0
Certificate issuer: /CN=af74f622a19b11e7146fbfad8404d824cfc3b5e0
Certificate serial: 5C27DECA357A25AA0947C72CC1EA36D5C7ECC567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3T2IqGbEecUb7-thATYJM_DteA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.mft
Manifest number: 06
Signing time: Sun 12 Nov 2023 14:04:51 +0000
Manifest this update: Sun 12 Nov 2023 13:59:51 +0000
Manifest next update: Mon 13 Nov 2023 16:29:51 +0000
Files and hashes: 1: AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.crl (hash: 7EnMtaEqpsY/2vB81YPYomp9G2ObdHnzXGtRbrusez0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:27:de:ca:35:7a:25:aa:09:47:c7:2c:c1:ea:36:d5:c7:ec:c5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af74f622a19b11e7146fbfad8404d824cfc3b5e0
Validity
Not Before: Nov 12 13:59:51 2023 GMT
Not After : Nov 13 16:29:51 2023 GMT
Subject: CN=D7DD92A71B4FFA88819DE199B896A78F71DFD551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:09:87:85:bf:19:47:75:f5:3c:b6:bc:00:
e6:5e:4f:a0:8e:ae:36:2d:bb:78:0a:39:37:11:85:
75:9c:b8:7e:3f:82:64:17:df:bd:84:9d:53:ee:9a:
f7:af:a2:3d:0f:26:c2:9b:cf:3f:af:19:e7:b8:0e:
52:4a:90:92:d2:1b:2d:ef:fe:60:b5:e4:4c:09:3b:
57:65:4c:aa:b3:3f:50:11:74:3a:c5:ff:74:59:a2:
3e:c5:7b:b1:c8:82:93:b6:ce:fb:dd:8c:f7:2f:6c:
ce:b8:12:3d:00:44:70:5e:45:1e:f5:82:3f:60:c7:
ab:76:de:aa:82:04:c3:61:a3:c0:f5:fa:7a:b4:80:
54:9f:10:46:90:80:b2:18:a8:f5:ac:6e:e3:eb:59:
4c:46:76:95:ba:4a:60:a9:71:81:fc:90:64:c3:70:
47:b4:77:1e:49:27:14:fb:d4:fa:ff:a9:90:b9:20:
5d:8a:8c:38:ef:e1:be:8b:c6:3b:58:7e:25:96:b8:
c3:9f:2c:69:12:ca:44:c1:15:b8:80:8a:23:9c:c1:
a4:c8:5b:61:43:0b:d0:40:9d:ec:f5:c8:c7:89:24:
77:99:89:2c:a1:ce:0f:85:3c:bd:0f:4d:b5:65:c7:
84:fd:4a:f0:48:4f:36:e8:2b:81:a2:43:88:11:11:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:92:A7:1B:4F:FA:88:81:9D:E1:99:B8:96:A7:8F:71:DF:D5:51
X509v3 Authority Key Identifier:
keyid:AF:74:F6:22:A1:9B:11:E7:14:6F:BF:AD:84:04:D8:24:CF:C3:B5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3T2IqGbEecUb7-thATYJM_DteA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:87:0f:d0:e8:c0:4e:9b:a9:aa:be:43:1e:40:58:87:ff:c5:
91:73:e2:76:0a:08:d0:47:e1:a9:30:5d:7f:d7:07:57:a6:e2:
cc:25:ea:a9:6c:5a:f2:1a:aa:9e:54:51:49:4b:f9:e4:20:08:
77:89:79:9b:b0:6b:38:04:10:54:e8:d1:9b:4a:2d:2a:a3:3f:
39:0e:21:94:1f:b9:65:ad:96:70:b3:a8:b0:48:2f:6d:c5:a2:
59:86:d0:9e:65:81:18:bb:8d:a4:c3:ec:d5:b4:b4:19:40:26:
1c:17:11:7c:8d:6d:9e:7c:eb:37:63:7e:51:12:63:e9:a0:91:
da:a0:8f:4c:40:ee:fc:39:3c:a6:75:01:40:b6:35:59:26:c2:
73:39:91:1b:3a:be:d9:1a:f4:85:a6:9f:17:72:22:20:ec:4c:
89:a2:ad:3a:c0:e3:d6:eb:e7:24:c4:ff:27:09:ab:20:f9:09:
6e:7f:30:b9:e0:bb:f4:15:86:b8:b6:66:ce:82:2f:79:d1:3f:
83:14:74:2c:2f:82:14:dd:ee:82:75:4c:b5:af:e1:0b:fc:a6:
cb:70:d4:b1:b7:70:1f:8c:e7:a7:59:83:15:91:25:8d:f3:c7:
9d:8b:b5:7a:cb:77:93:af:f1:2d:e9:7b:a4:60:34:e6:c2:a6:
bd:f3:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:22:43 2025 by rpki-client