Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: ryqWdUVB1lHlrD8YdVp8AuHRfZu95o5sc0622YHa0EU=
Subject key identifier: 92:30:CA:B0:97:95:67:6C:01:8F:19:ED:90:6C:71:8F:DE:C8:BE:3A
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 0194BC04FCF9C4C6EA17C051B6EA014DDEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 01B1
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: 9i/J4Y7cREn+GXS4wc7aZcpM+iGqjPmC1hDmSS/ywws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:f9:c4:c6:ea:17:c0:51:b6:ea:01:4d:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=9230cab09795676c018f19ed906c718fdec8be3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:03:73:f0:ba:e6:3a:89:d0:57:34:22:d4:
1c:14:ac:bf:96:5a:24:2f:3d:92:6c:a1:a0:32:43:
b8:26:32:8b:c2:01:12:7e:6a:8a:50:14:f0:c5:57:
48:b5:bc:e2:fe:bf:a9:8e:4c:a9:4c:27:42:30:a5:
8e:97:8e:27:08:d8:45:e3:cf:13:7c:52:13:0d:7b:
4c:5d:8f:f8:ea:d4:45:bc:d2:93:17:f9:b8:ec:9a:
0e:4b:7f:3d:01:61:29:99:37:5b:87:76:d6:9f:1b:
ff:8d:de:a5:8d:15:c6:3a:4e:e2:a7:3a:72:fa:3a:
1f:96:ca:27:64:60:79:a0:3e:06:70:44:71:e4:e1:
05:02:43:d8:b2:17:e2:df:61:e3:85:43:61:cd:a8:
28:03:f7:fb:8f:b6:e1:ce:8e:fe:b2:8b:c4:5c:cc:
ba:bc:a6:70:f3:c0:ec:b3:db:93:3e:5e:2b:33:84:
59:20:74:45:cf:96:0a:6e:0e:6c:95:99:af:3f:e7:
36:4c:1a:e2:6d:4e:7d:ac:5b:04:bc:8f:cc:5e:4a:
b9:3e:0f:24:f8:c9:7c:6d:80:5c:6e:c6:2b:5f:78:
b4:5d:f0:8d:43:27:22:79:0a:91:3a:2f:15:6b:43:
50:b3:f0:04:0a:ca:1c:66:33:6f:20:dd:ee:08:ee:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:CA:B0:97:95:67:6C:01:8F:19:ED:90:6C:71:8F:DE:C8:BE:3A
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ae:63:af:8b:42:6e:14:b4:49:5a:f2:6d:c7:7f:10:8b:ad:
16:7d:f6:2e:a0:8b:4d:4e:6e:1c:f9:e8:ef:da:66:8b:2f:71:
ee:98:f6:90:8f:60:4d:13:9f:1b:6f:24:b0:1c:f9:e5:2f:ad:
b4:55:4c:b3:2d:e5:10:0f:25:54:84:df:ba:7f:82:ab:47:fd:
26:30:ad:0b:97:4b:91:e1:20:81:46:02:8f:f7:88:02:18:d2:
86:4b:21:ff:b7:fa:b3:a6:3d:7c:8e:6a:4d:f2:8e:06:15:d7:
d3:07:6b:1f:b7:68:e3:80:c1:44:4d:2d:8f:e0:d1:86:1b:6a:
44:dc:b4:d1:14:ae:2b:24:f2:ed:83:31:64:91:04:57:dc:be:
3b:cd:df:e3:0d:80:76:76:f8:60:1a:63:82:3f:1f:79:2b:a8:
75:bf:99:8c:9d:cc:3e:b5:fe:ea:5e:a7:ad:dc:98:4d:10:20:
5d:3b:b1:ac:73:93:60:6a:9a:a8:22:96:86:a3:50:59:b2:8a:
a5:95:83:90:c9:57:1d:85:35:b9:79:ef:5b:50:41:7f:18:e1:
15:44:8c:8c:7b:ed:6d:d3:22:04:86:ce:68:d2:37:61:f2:f9:
d8:e0:47:81:6c:f7:77:b9:de:43:4d:8a:18:19:c1:db:bc:bd:
6c:da:a2:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPz5xMbqF8BRtuoBTd7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGIxOTM4NjY4YjI3YjA1MmM2ODNkMWUyNjBjMGNkM2Q1
Njg3NWIwHhcNMjUwMTMxMTEwMDMxWhcNMjUwMjAxMTEwMDMxWjAzMTEwLwYDVQQD
Eyg5MjMwY2FiMDk3OTU2NzZjMDE4ZjE5ZWQ5MDZjNzE4ZmRlYzhiZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBUDc/C65jqJ0Fc0ItQcFKy/llok
Lz2SbKGgMkO4JjKLwgESfmqKUBTwxVdItbzi/r+pjkypTCdCMKWOl44nCNhF488T
fFITDXtMXY/46tRFvNKTF/m47JoOS389AWEpmTdbh3bWnxv/jd6ljRXGOk7ipzpy
+joflsonZGB5oD4GcERx5OEFAkPYshfi32HjhUNhzagoA/f7j7bhzo7+sovEXMy6
vKZw88Dss9uTPl4rM4RZIHRFz5YKbg5slZmvP+c2TBribU59rFsEvI/MXkq5Pg8k
+Ml8bYBcbsYrX3i0XfCNQycieQqROi8Va0NQs/AECsocZjNvIN3uCO7kMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIwyrCXlWdsAY8Z7ZBscY/eyL46MB8GA1UdIwQY
MBaAFLtLGThmiyewUsaD0eJgwM09VodbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUt
YjNjNzQyNTQzZGRmLzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUtYjNjNzQyNTQzZGRm
LzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl65jr4tC
bhS0SVrybcd/EIutFn32LqCLTU5uHPno79pmiy9x7pj2kI9gTROfG28ksBz55S+t
tFVMsy3lEA8lVITfun+Cq0f9JjCtC5dLkeEggUYCj/eIAhjShksh/7f6s6Y9fI5q
TfKOBhXX0wdrH7do44DBRE0tj+DRhhtqRNy00RSuKyTy7YMxZJEEV9y+O83f4w2A
dnb4YBpjgj8feSuodb+ZjJ3MPrX+6l6nrdyYTRAgXTuxrHOTYGqaqCKWhqNQWbKK
pZWDkMlXHYU1uXnvW1BBfxjhFUSMjHvtbdMiBIbOaNI3YfL52OBHgWz3d7neQ02K
GBnB27y9bNqiUw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:27 2025 by rpki-client