Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: z3bBmixGV4867yORaEYBopSeRhzPiB+n0e+otZMozy8=
Subject key identifier: 23:E8:2C:B7:57:15:97:26:8D:DB:44:EA:5A:E2:8B:80:27:12:F8:78
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 0194BD85A260CD26D2CA9DA8118EFDC69B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 09DC
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: vKfxnnwslGbTUFnzmt8oIExNRHZS9XB+A+j8MIYHMMw=)
2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:60:cd:26:d2:ca:9d:a8:11:8e:fd:c6:9b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=23e82cb7571597268ddb44ea5ae28b802712f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:2f:c8:c4:87:a8:80:b2:44:04:92:c7:70:
b7:08:d2:01:01:cd:51:38:9e:56:21:00:d3:29:26:
b9:13:3f:9f:e4:fb:ba:18:a1:7e:34:94:11:2b:3e:
35:2d:33:66:8a:6a:83:d8:ba:bc:3e:72:ad:a5:ba:
cc:e6:76:14:4d:eb:58:76:9c:5c:0b:27:28:4b:e6:
23:8a:75:9b:85:22:3d:8a:2f:61:f2:e9:94:29:ad:
13:5f:17:e2:96:6b:8d:f4:90:db:b6:43:7a:be:df:
1c:60:5d:aa:03:33:6d:aa:47:54:d1:9e:ce:fa:17:
98:4e:09:e7:de:d2:ed:ab:7e:d1:73:84:aa:f0:a9:
2d:82:e0:5c:79:da:92:29:f0:56:cf:38:62:f8:e1:
52:98:a8:9b:a1:fc:58:19:14:58:32:70:b6:11:ca:
22:4f:bc:bd:0c:f3:34:c6:fc:4c:9d:cb:9f:dd:72:
18:1e:d3:5b:c7:67:d8:7d:30:7b:b0:25:0d:6b:11:
1a:68:04:70:c0:41:e1:57:01:b1:77:42:4e:a8:64:
03:57:60:be:47:91:de:1e:86:ad:1d:16:72:b0:7b:
5d:63:19:85:e2:f0:6a:28:48:22:70:67:4b:fc:c2:
10:8a:a2:00:28:a5:42:20:05:8a:dd:c7:73:d3:79:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:2C:B7:57:15:97:26:8D:DB:44:EA:5A:E2:8B:80:27:12:F8:78
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d9:fc:2b:3b:bf:81:65:33:97:dd:2e:12:56:3f:fd:ef:af:
53:22:e9:0e:be:85:08:73:fe:5c:52:d8:c8:18:c9:cf:05:2b:
b9:e4:f1:15:49:d0:67:d7:79:86:c9:62:f3:b5:35:85:fa:7a:
21:37:41:c6:ce:dd:99:4e:d3:31:3f:87:ce:b2:3e:a7:72:5a:
4c:cc:38:d1:f4:4b:c6:cd:91:83:41:32:7c:c4:18:55:17:03:
f0:90:d5:9f:91:51:b0:15:76:5d:b1:cb:6a:37:a7:19:1b:a7:
3b:39:ba:7f:69:45:cc:1d:13:7e:53:86:16:a2:c0:3b:f1:9d:
55:c4:14:03:e3:89:26:2b:44:66:cf:0a:b6:45:0c:fd:89:dd:
01:5d:d2:0b:c9:e9:aa:28:25:a4:64:a4:7e:af:c5:ee:ac:ca:
f2:64:c7:fd:d4:bd:fa:3c:89:77:17:17:f1:cc:e2:24:a6:d7:
4d:49:d5:fc:70:7a:c9:4e:e9:57:91:6c:b9:48:20:2c:c1:a4:
b3:d1:26:30:ac:3e:96:11:a5:b0:d6:94:79:47:d8:55:4f:f6:
39:54:ee:49:ea:1b:0d:17:81:fa:8b:41:8e:76:9a:cf:dd:80:
2a:73:10:c2:f2:51:1d:bf:b8:28:f6:20:da:65:e9:0a:7f:cb:
9a:ee:b5:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haJgzSbSyp2oEY79xptuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDdjZWQ5YTBlZDdmOTQ0YjlmNGVmYzM4NTc3YjM4ZTZk
MWM2NzMwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
EygyM2U4MmNiNzU3MTU5NzI2OGRkYjQ0ZWE1YWUyOGI4MDI3MTJmODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTAvyMSHqICyRASSx3C3CNIBAc1R
OJ5WIQDTKSa5Ez+f5Pu6GKF+NJQRKz41LTNmimqD2Lq8PnKtpbrM5nYUTetYdpxc
CycoS+YjinWbhSI9ii9h8umUKa0TXxfilmuN9JDbtkN6vt8cYF2qAzNtqkdU0Z7O
+heYTgnn3tLtq37Rc4Sq8KktguBcedqSKfBWzzhi+OFSmKibofxYGRRYMnC2Ecoi
T7y9DPM0xvxMncuf3XIYHtNbx2fYfTB7sCUNaxEaaARwwEHhVwGxd0JOqGQDV2C+
R5HeHoatHRZysHtdYxmF4vBqKEgicGdL/MIQiqIAKKVCIAWK3cdz03mdjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPoLLdXFZcmjdtE6lrii4AnEvh4MB8GA1UdIwQY
MBaAFPNHztmg7X+US59O/DhXezjm0cZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjIt
MjMyYjRiNDY1N2U5LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjItMjMyYjRiNDY1N2U5
LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtn8Kzu/
gWUzl90uElY//e+vUyLpDr6FCHP+XFLYyBjJzwUrueTxFUnQZ9d5hsli87U1hfp6
ITdBxs7dmU7TMT+HzrI+p3JaTMw40fRLxs2Rg0EyfMQYVRcD8JDVn5FRsBV2XbHL
ajenGRunOzm6f2lFzB0TflOGFqLAO/GdVcQUA+OJJitEZs8KtkUM/YndAV3SC8np
qiglpGSkfq/F7qzK8mTH/dS9+jyJdxcX8cziJKbXTUnV/HB6yU7pV5FsuUggLMGk
s9EmMKw+lhGlsNaUeUfYVU/2OVTuSeobDReB+otBjnaaz92AKnMQwvJRHb+4KPYg
2mXpCn/Lmu61BA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:57 2025 by rpki-client