Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: KddIz5z3MLCibxL72FIimeH+aE5g6KnFuhm3ZPA1G3k=
Subject key identifier: D5:5B:35:37:E1:DA:71:C3:73:DE:BA:84:8E:D9:4F:29:A6:BF:1D:4E
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 0194BD17F064A8E78E04B16963441A9D6321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 13C1
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: GR2vz9yqdwQSDkw76VW4XNDN7v2rUzuNBTwZqPNaLXw=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f0:64:a8:e7:8e:04:b1:69:63:44:1a:9d:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=d55b3537e1da71c373deba848ed94f29a6bf1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:b9:e1:76:31:0b:52:48:c4:9a:64:b6:12:
1f:00:f2:d7:b6:c4:64:dd:b8:89:fd:c5:10:c9:e6:
9f:9f:e7:ab:af:d6:dd:51:eb:4e:9d:ef:83:12:00:
43:7d:b3:b5:64:45:cb:20:c2:ba:88:de:4d:12:d2:
b2:c9:17:9a:fd:57:30:8d:3a:38:6a:33:7d:d5:8a:
84:75:66:b5:0e:ee:80:3a:b0:d0:6d:1a:16:28:42:
f9:9e:99:e5:e9:8d:0b:9c:13:05:cd:cd:bb:ea:e3:
2c:00:4e:19:ef:57:35:d3:6d:8e:b1:81:5a:53:d6:
d9:ab:e3:1d:d8:22:b8:fa:1a:f5:54:a8:05:e1:e5:
e6:f0:bd:4f:3e:fe:23:0c:5d:be:ed:e1:4a:87:bb:
7f:b2:51:66:0d:ff:c3:3c:db:dc:1c:1b:e7:af:61:
63:b0:c3:d7:a1:e0:19:68:51:cb:46:ab:a2:e1:c3:
96:c5:82:15:38:eb:23:b7:b2:f7:d5:a4:76:e2:df:
f1:ed:fe:d9:d2:7e:59:89:1e:f5:cd:4a:41:7d:e7:
d1:e9:72:db:d4:8d:fd:34:e6:c9:f8:d8:76:e2:c2:
aa:9a:63:08:00:71:35:68:b5:d5:38:9b:17:db:a5:
4d:4d:55:0f:0b:99:f4:45:6a:6a:55:ff:d9:f1:64:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5B:35:37:E1:DA:71:C3:73:DE:BA:84:8E:D9:4F:29:A6:BF:1D:4E
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:02:09:bc:26:ee:dd:ed:b6:37:4b:1c:f8:42:9b:2c:74:92:
d0:0f:ff:4b:12:6c:eb:14:05:a8:a3:42:0f:74:78:9e:8b:66:
ab:54:2c:f8:28:f0:94:6a:bb:06:2a:8f:e5:18:93:2c:bd:e7:
08:dc:9a:80:7f:99:07:b2:fd:6c:aa:e6:c8:27:cf:b6:de:8f:
ab:b3:f4:8f:d5:4a:93:66:e5:3d:3c:d5:25:c1:cd:5d:e2:cc:
c3:51:0c:5c:d8:0f:4f:32:3d:c9:76:b5:f9:1b:63:48:1f:0f:
cd:d6:a6:70:b9:36:78:0d:28:a7:03:c5:b0:eb:06:67:11:9d:
f9:a1:a2:d0:65:89:59:72:70:51:7f:76:c7:98:fe:6b:51:49:
1d:08:8c:5f:82:77:0c:1b:9c:9b:6d:6b:a8:5e:32:cb:fc:4b:
de:9c:ed:b3:84:43:84:f2:62:e6:f4:62:28:4d:83:8f:35:a0:
2a:8d:52:12:d0:a7:90:22:31:e2:b5:64:64:ba:1b:87:15:55:
9c:22:a1:ab:81:d1:0c:06:a5:f9:f1:f8:9f:dc:ca:4d:c6:c4:
00:48:92:e7:0d:89:78:9b:91:0c:d1:ff:73:b0:1c:36:75:5e:
86:32:6e:40:cb:54:52:2f:a1:41:fc:a4:85:44:ac:bb:16:92:
8a:25:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:10 2025 by rpki-client