Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
File: 42CC538CA37931CF39A85418E983E932F716DF8A.mft (raw, json)
Hash identifier: cV/YDCNn37vin5R6WLBya8UJWSY7ODWYjucvtkSqAdI=
Subject key identifier: B3:79:1E:A2:62:E2:C1:27:64:A4:3C:D4:0D:41:95:3B:83:3B:C7:12
Authority key identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A
Certificate issuer: /CN=42CC538CA37931CF39A85418E983E932F716DF8A
Certificate serial: 3B193C8C783F110D1F5114F2EEB138D17DE8FDCE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
Manifest number: 01E8
Signing time: Thu 23 Jan 2025 08:33:44 +0000
Manifest this update: Thu 23 Jan 2025 08:28:44 +0000
Manifest next update: Fri 24 Jan 2025 11:33:44 +0000
Files and hashes: 1: 42CC538CA37931CF39A85418E983E932F716DF8A.crl (hash: ytWmE9fw5PaCqN7sYzh6Zj844je7scOr9laZQb+sLSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:19:3c:8c:78:3f:11:0d:1f:51:14:f2:ee:b1:38:d1:7d:e8:fd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CC538CA37931CF39A85418E983E932F716DF8A
Validity
Not Before: Jan 23 08:28:44 2025 GMT
Not After : Jan 24 11:33:44 2025 GMT
Subject: CN=B3791EA262E2C12764A43CD40D41953B833BC712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:f4:ab:3c:b7:3a:04:90:ba:8b:7b:00:bf:
1c:17:26:cb:3d:b2:0a:60:f1:f9:d8:56:c2:da:7f:
83:1d:69:61:d5:15:fb:d7:6b:ea:07:dd:89:30:4f:
96:8f:01:61:8b:b5:7c:09:10:d7:64:e0:f1:1f:7e:
1f:6b:a1:d7:e3:75:2e:07:79:7f:31:e3:c9:1e:15:
cc:1c:1b:cf:71:67:5a:3a:df:35:f2:42:93:ba:41:
c2:c4:07:49:4a:6c:4b:a5:15:38:9b:bf:85:6d:c3:
f8:a5:75:e0:8a:30:c5:f3:25:5a:e1:b5:3b:22:7a:
2c:ee:db:69:d9:97:07:14:f2:d9:8f:43:2d:8a:e6:
f1:a8:1a:95:5c:b1:61:da:ad:18:72:70:bd:c8:db:
73:6d:c6:25:66:a4:e7:07:1e:de:eb:16:b8:8c:98:
0c:01:f9:6c:26:d2:b5:7d:fa:f9:2c:2d:bd:cc:7a:
29:2d:9c:46:98:f1:04:e2:64:2d:d8:02:9b:2e:bb:
09:c1:3d:3c:09:e6:85:c4:81:f8:d6:cf:33:d3:60:
30:26:ba:68:22:9c:66:c4:76:41:13:9d:82:fb:35:
02:a3:6f:72:a6:30:11:1a:f6:1e:aa:49:ae:42:67:
b0:1c:fa:66:7a:79:91:5c:81:6f:de:64:51:b6:65:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:1E:A2:62:E2:C1:27:64:A4:3C:D4:0D:41:95:3B:83:3B:C7:12
X509v3 Authority Key Identifier:
keyid:42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d0:ce:e6:8b:60:8b:ec:55:5b:75:ac:8c:0d:15:aa:12:b6:
ee:46:fe:6a:5e:fe:f7:17:74:ca:12:6e:fa:83:91:35:2a:a0:
92:48:d9:86:8e:69:0f:61:8f:08:2d:45:4e:e5:a4:82:82:75:
fa:bb:11:33:f8:6f:1c:c5:65:bf:82:67:c6:8a:63:d6:6c:2f:
3a:ec:b8:81:2c:6e:ca:c2:e2:f9:d7:ea:a2:d3:14:ab:35:32:
dc:02:f5:70:01:83:70:7a:6c:b0:59:af:0b:4a:1d:32:13:8b:
6b:52:10:b8:b9:44:d2:c5:91:eb:5a:4a:85:b6:71:eb:06:cb:
6f:a1:6d:d9:fe:21:ad:a9:80:34:05:e2:73:18:69:a5:f1:02:
04:3b:9c:1e:e9:6f:a4:ae:c5:5a:7e:28:ed:c7:47:34:ae:64:
d1:f6:f2:13:db:ff:79:34:31:c1:86:a1:0c:48:e9:81:06:e7:
92:0b:a2:aa:5d:cc:e7:f3:48:9c:90:12:0b:50:ee:1d:0b:45:
21:90:a6:d7:09:c1:f1:67:66:fc:e6:c3:02:69:71:9c:81:e0:
1e:24:d4:46:5e:d6:55:51:f8:f9:44:0f:a6:66:46:61:11:6b:
74:8f:a8:27:f4:2f:ef:aa:2b:0e:80:0e:be:82:55:a0:bb:9d:
33:66:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:47 2025 by rpki-client on console.sobornost.net