Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft
File: 80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft (raw, json)
Hash identifier: P/5M/PVcRCqNSG5zUPgoWGjoqZjODqmqJJEWvp1zBkw=
Subject key identifier: 44:AB:65:83:E3:BE:C1:5D:21:1E:6C:13:17:10:D0:77:44:95:D2:65
Authority key identifier: 80:A2:3E:AC:4D:62:0D:C2:C1:B1:70:1F:21:E4:6E:CC:A0:5E:4D:BE
Certificate issuer: /CN=80a23eac4d620dc2c1b1701f21e46ecca05e4dbe
Certificate serial: 2C1779A9C5B024074265B4EEFBF98BC968E7F083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft
Manifest number: 032B
Signing time: Sun 30 Jun 2024 00:33:59 +0000
Manifest this update: Sun 30 Jun 2024 00:28:59 +0000
Manifest next update: Mon 01 Jul 2024 03:10:59 +0000
Files and hashes: 1: AS211244.asa (hash: xNnTD1Tj+LfyQOBmPw0zrM5lmL7GtYR6ihBeIqSa7i8=)
2: 80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.crl (hash: ZOkBUDMt0CYTapvPT6IcmyHKQ9bTrTIzeU7TdhsuIVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:17:79:a9:c5:b0:24:07:42:65:b4:ee:fb:f9:8b:c9:68:e7:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a23eac4d620dc2c1b1701f21e46ecca05e4dbe
Validity
Not Before: Jun 30 00:28:59 2024 GMT
Not After : Jul 1 03:10:59 2024 GMT
Subject: CN=44AB6583E3BEC15D211E6C131710D0774495D265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:9e:a4:57:02:83:cb:97:eb:41:aa:d8:8f:
b7:74:e9:c1:34:6e:39:da:77:f7:c5:d0:02:66:9c:
96:b9:01:4b:1a:be:93:12:51:44:4c:9c:3c:5a:f7:
b4:c4:eb:25:41:69:50:e8:55:61:18:b3:ea:ae:55:
60:7f:77:aa:4b:1e:bd:a8:b3:d3:62:92:14:86:75:
9f:8a:76:e6:6c:d3:8c:d5:93:85:7c:d5:12:dd:a4:
66:ba:d5:7b:ac:35:e2:70:2b:87:40:54:49:a3:5e:
a8:a3:a7:c9:b9:17:cf:e5:92:6b:9b:0d:d0:e2:08:
a4:10:ce:0d:0f:a6:f2:b7:b0:9f:83:c6:7b:8c:37:
67:25:7f:87:2c:5e:47:00:95:58:88:8c:9c:90:bc:
b9:5a:a4:7b:a0:0d:8c:50:10:74:34:d3:01:41:67:
a0:e7:aa:24:0c:45:c6:fd:27:81:90:8f:f4:59:ad:
81:f9:e3:58:01:c6:dc:db:d5:4f:1d:38:f1:4c:ec:
a0:e9:b1:e1:84:c7:95:3c:b3:07:d3:ce:24:b1:04:
22:f0:be:3a:90:06:93:5a:59:db:27:9c:ef:2f:eb:
48:c4:e7:d8:5c:3b:db:6f:91:0e:87:7e:a4:12:cc:
b0:3f:46:e2:e3:a1:f3:b7:f5:9a:13:f5:45:75:79:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AB:65:83:E3:BE:C1:5D:21:1E:6C:13:17:10:D0:77:44:95:D2:65
X509v3 Authority Key Identifier:
keyid:80:A2:3E:AC:4D:62:0D:C2:C1:B1:70:1F:21:E4:6E:CC:A0:5E:4D:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ef:b1:17:98:9a:00:0d:c6:e4:83:be:52:4b:2a:b8:a5:bd:
7f:bd:b8:3f:32:bf:b1:89:9a:5b:27:a7:b7:6f:af:86:e8:15:
98:ee:e2:44:d0:60:16:44:8f:ee:3c:fe:e9:7b:a4:af:57:5e:
72:66:7f:3e:f8:b8:be:54:3d:c6:4e:23:e3:14:ee:d0:63:36:
59:b1:1a:7d:9d:a3:97:42:44:d0:e6:67:22:26:34:63:6b:8d:
4d:d8:96:d9:ba:a9:22:66:d4:ec:55:d2:74:48:12:fc:8d:e2:
21:84:d2:d1:7b:15:32:c7:89:c7:21:c4:66:8b:f0:2d:a8:6b:
d2:5b:74:4a:cb:4e:af:25:00:5a:62:d6:95:3a:ef:9c:32:23:
4d:ae:86:44:45:f8:b5:7e:79:df:a3:cb:61:86:52:4e:e3:ce:
20:23:8a:a1:84:cd:f6:28:c9:8d:3f:e8:82:d3:cf:95:df:2c:
f2:88:86:c8:05:9b:58:ac:e1:90:cc:c9:c1:06:98:51:eb:c1:
8d:e6:bf:1c:5b:12:b6:29:a1:bf:d6:5c:67:10:c5:7d:eb:c8:
71:e0:9e:ee:4d:d9:e1:b2:9c:d5:5d:ba:30:e3:d6:79:a4:25:
c6:35:4b:3c:0b:5d:aa:a0:ae:09:65:a0:b7:a6:28:72:09:0f:
29:25:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:58 2025 by rpki-client