Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: 53gyt7PJLuV+mLITyb3x0x4sNLHo4v9jbQTlsJAVmpY=
Subject key identifier: 6F:68:42:05:1C:8C:AD:25:B7:11:4F:20:4C:CB:E2:85:77:92:59:BE
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 0194BBCEB1E75D7676C7365142EBC0984BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 08AE
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: VSSkrT492rRqr1BbgzQfUZ/YEz5HXHm/2hnZAn3rmRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b1:e7:5d:76:76:c7:36:51:42:eb:c0:98:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=6f6842051c8cad25b7114f204ccbe285779259be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:08:ae:e2:1c:a8:ed:e9:06:ac:8c:23:3b:
86:11:59:24:8d:cd:8c:97:c6:b6:79:9e:cd:1c:b3:
ab:c1:07:e8:b4:ff:5c:a7:03:68:90:cc:37:d9:19:
dc:52:a5:4c:c8:f5:da:de:3b:b0:39:03:d5:4b:c3:
d6:a2:4e:4d:93:9e:63:2f:bf:05:a7:ab:2a:d8:95:
97:9f:d6:91:e9:ef:09:b7:35:f6:84:c0:c2:7f:94:
56:55:87:9b:ea:9a:f9:45:ab:cc:32:28:b5:6b:1c:
09:fa:13:aa:8b:f1:45:5e:3f:11:79:66:44:a5:e5:
aa:5e:c6:aa:f7:32:3c:04:a4:a8:c7:7e:e7:08:2a:
ee:ac:7b:35:ae:71:96:a8:88:a5:fd:9f:cb:0a:1f:
25:49:81:87:d4:04:66:03:16:70:63:ea:66:7d:a8:
57:21:3a:60:d5:c9:4e:e8:a4:35:d9:b9:89:df:85:
b3:f9:ce:42:72:86:f9:72:30:71:c0:76:8e:d0:73:
90:b6:79:2e:4a:83:5a:68:99:b1:4b:10:cd:37:b5:
7c:12:e5:15:0d:e8:70:c4:12:de:98:6a:2b:35:db:
2f:c3:5a:36:71:33:7c:77:a9:39:48:68:ca:bb:d5:
8d:d2:27:d3:bf:52:23:df:90:6f:a4:74:a7:19:4d:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:42:05:1C:8C:AD:25:B7:11:4F:20:4C:CB:E2:85:77:92:59:BE
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:45:7c:1e:ca:ab:b9:3f:da:04:3a:0e:00:db:7f:d1:bb:
f4:16:1f:20:97:94:5d:93:9e:89:c4:d6:84:e7:2b:2a:85:e9:
d9:5e:2f:69:a3:4f:a4:e7:b0:e9:9b:f3:40:27:e4:71:ea:2a:
59:b4:6f:2d:e2:1d:d4:c2:0a:2e:86:d3:bd:40:9a:93:f3:9f:
73:2a:8d:90:7b:b0:c1:61:de:d7:f5:3f:3d:31:a9:98:b9:c3:
d3:bb:95:28:0d:a8:44:fb:ac:e3:45:78:0b:db:e3:4d:6a:17:
55:00:09:46:60:33:18:d7:69:5b:91:e5:bd:16:30:41:20:5c:
2d:67:67:b1:9f:27:65:98:dc:7b:2a:e6:6e:44:79:14:76:9b:
a4:ac:7a:49:28:3e:cd:6a:76:31:cb:b6:d1:66:ff:b9:5a:ea:
55:f3:a2:03:ad:a6:46:9f:6f:33:71:9a:9d:fb:11:5f:cf:15:
59:89:06:4c:3b:7e:e3:85:a2:ce:58:b3:fb:60:55:16:d3:1c:
08:af:5e:2a:58:3a:48:e2:11:d2:4b:c2:bf:74:f0:28:a9:e3:
aa:4b:9f:12:36:c0:15:e1:31:ab:e2:62:25:26:b4:75:b9:67:
5b:63:f1:a7:e1:e0:65:b9:16:79:a0:05:24:04:3d:f3:3e:27:
43:cb:36:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrHnXXZ2xzZRQuvAmEvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjhlNjZmYWQ4MTQ2NDU5ODRmZDRlYWFkMzEzYjZmZTAw
NTg5YjcwHhcNMjUwMTMxMTAwMTEyWhcNMjUwMjAxMTAwMTEyWjAzMTEwLwYDVQQD
Eyg2ZjY4NDIwNTFjOGNhZDI1YjcxMTRmMjA0Y2NiZTI4NTc3OTI1OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJwIruIcqO3pBqyMIzuGEVkkjc2M
l8a2eZ7NHLOrwQfotP9cpwNokMw32RncUqVMyPXa3juwOQPVS8PWok5Nk55jL78F
p6sq2JWXn9aR6e8JtzX2hMDCf5RWVYeb6pr5RavMMii1axwJ+hOqi/FFXj8ReWZE
peWqXsaq9zI8BKSox37nCCrurHs1rnGWqIil/Z/LCh8lSYGH1ARmAxZwY+pmfahX
ITpg1clO6KQ12bmJ34Wz+c5Ccob5cjBxwHaO0HOQtnkuSoNaaJmxSxDNN7V8EuUV
DehwxBLemGorNdsvw1o2cTN8d6k5SGjKu9WN0ifTv1Ij35BvpHSnGU2U4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9oQgUcjK0ltxFPIEzL4oV3klm+MB8GA1UdIwQY
MBaAFLm45m+tgUZFmE/U6q0xO2/gBYm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYt
MmE2MWM0ZTNlMDU3LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYtMmE2MWM0ZTNlMDU3
LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/dFfB7K
q7k/2gQ6DgDbf9G79BYfIJeUXZOeicTWhOcrKoXp2V4vaaNPpOew6ZvzQCfkceoq
WbRvLeId1MIKLobTvUCak/OfcyqNkHuwwWHe1/U/PTGpmLnD07uVKA2oRPus40V4
C9vjTWoXVQAJRmAzGNdpW5HlvRYwQSBcLWdnsZ8nZZjceyrmbkR5FHabpKx6SSg+
zWp2Mcu20Wb/uVrqVfOiA62mRp9vM3GanfsRX88VWYkGTDt+44Wizliz+2BVFtMc
CK9eKlg6SOIR0kvCv3TwKKnjqkufEjbAFeExq+JiJSa0dblnW2Pxp+HgZbkWeaAF
JAQ98z4nQ8s26w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:19 2025 by rpki-client