
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
File: F066639311596E151E78E34CCC584DC5F500F585.mft (raw, json)
Hash identifier: G3PO/6kdC3zZuJYv4u2i8giyojicCqi++8Yjkr57qsA=
Subject key identifier: 8C:22:03:55:C0:59:D3:8A:19:97:4B:9A:FA:B9:1E:CB:23:12:88:1A
Authority key identifier: F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Certificate issuer: /CN=F066639311596E151E78E34CCC584DC5F500F585
Certificate serial: 0EDD41D6633BD28B5A7E78593CA82940AEABC30D
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
Manifest number: 043C
Signing time: Sun 13 Apr 2025 00:27:49 +0000
Manifest this update: Sun 13 Apr 2025 00:22:49 +0000
Manifest next update: Mon 14 Apr 2025 01:27:49 +0000
Files and hashes: 1: F066639311596E151E78E34CCC584DC5F500F585.crl (hash: NSWDcOrnE5YtHQOkEr1X60FGpZ7/iJTUp/DLlfrapT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:dd:41:d6:63:3b:d2:8b:5a:7e:78:59:3c:a8:29:40:ae:ab:c3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F066639311596E151E78E34CCC584DC5F500F585
Validity
Not Before: Apr 13 00:22:49 2025 GMT
Not After : Apr 14 01:27:49 2025 GMT
Subject: CN=8C220355C059D38A19974B9AFAB91ECB2312881A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:c5:e5:0c:6b:5d:43:5e:a2:91:aa:8e:19:
38:f8:1d:a8:b8:2d:96:0e:af:c1:50:0a:34:1a:8e:
06:ca:b1:a4:c3:37:ab:33:d2:63:6c:af:ed:d6:ed:
4e:df:fe:19:1a:0d:30:04:26:59:3e:62:2b:8e:5c:
68:d9:4f:1a:0c:b9:66:46:a0:09:30:5b:72:94:74:
1f:9d:f9:f4:2e:0f:1f:7b:85:31:41:fd:80:13:0f:
f5:7a:25:ec:ce:84:22:13:38:45:7e:cf:10:3a:b7:
6e:df:2f:5c:21:4f:ba:7a:2a:75:2c:31:65:56:d8:
7c:cd:a7:80:8f:97:c7:49:2d:46:d6:40:10:d9:e2:
c0:9e:67:84:3d:85:f1:f6:3e:c5:e1:89:18:e8:26:
c7:b7:79:18:87:4d:3d:a4:0a:68:27:0f:6f:3a:29:
75:13:54:73:15:82:d0:08:62:f5:d3:b5:ac:ff:5e:
ce:55:89:ae:bd:08:1c:05:bd:1b:6a:2e:64:a2:b9:
af:d0:c1:54:12:8d:a6:98:21:bb:93:18:9c:a2:f4:
9f:a6:63:ab:4c:01:5c:42:79:65:df:fd:6e:fa:57:
89:48:8b:a7:fc:d9:22:30:d0:f1:d6:f1:d7:5f:9b:
68:b6:06:2a:37:49:ba:c9:76:04:51:a9:87:f0:5c:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:22:03:55:C0:59:D3:8A:19:97:4B:9A:FA:B9:1E:CB:23:12:88:1A
X509v3 Authority Key Identifier:
keyid:F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:63:03:1d:78:95:66:f8:e9:ed:4a:a6:60:0e:42:56:b3:48:
38:6b:24:3a:28:d6:c3:88:5c:73:25:25:1f:71:a8:eb:6b:12:
69:fa:3f:fb:01:43:8a:93:a1:73:7f:36:52:33:34:4f:09:47:
a2:7f:6f:7a:8b:71:6c:c5:db:d3:b6:c4:c9:52:70:2e:af:f2:
87:89:81:da:83:39:1d:20:ba:b3:85:c1:cc:08:c9:c6:54:28:
41:99:24:75:a6:71:c8:05:12:4f:21:ee:c0:16:7a:00:0c:c8:
da:20:65:ef:77:f1:9a:66:89:3b:ed:12:d8:f4:e9:73:e2:3f:
b7:1e:b4:cc:f7:35:a7:f1:f5:aa:0a:39:7d:ed:a3:3f:74:b0:
52:25:0d:2c:ff:38:a1:72:60:09:f8:99:e0:0e:91:51:82:8f:
28:ab:f5:94:2e:8c:ed:bc:86:fc:06:88:b2:ca:18:35:4c:2a:
54:01:fd:c6:0b:97:92:82:87:1f:72:92:a6:0e:81:22:3d:70:
14:92:c6:df:c7:a5:fd:c1:74:30:53:f1:ae:08:85:86:18:9f:
6c:32:79:7d:53:7b:eb:31:7c:70:3b:ff:ce:c1:ad:d1:9b:5d:
f7:7e:9b:8d:48:71:5d:a6:90:ac:a0:1e:6a:6a:8c:aa:7c:92:
cb:5e:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net