Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: lp48FxiWr04w2FoYG7YI8gqtz6vH95ziO75q9lgTvjw=
Subject key identifier: 8B:AA:71:6D:8D:14:66:F4:EB:4A:85:C1:45:84:BC:D3:E9:22:9C:E3
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 0194BBCE802C40DACF75328359A2B936C083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0506
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: ji4xztim6iwOQ6UYVIrOED7XpOuVbCtJURDx+aNItGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:2c:40:da:cf:75:32:83:59:a2:b9:36:c0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=8baa716d8d1466f4eb4a85c14584bcd3e9229ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:81:f5:60:bf:5a:0d:99:72:79:8b:81:f1:
75:06:56:0c:9d:9a:e4:79:e3:47:f0:9d:60:3b:76:
dd:84:a2:e9:c1:ca:bc:03:0e:6a:6e:4e:0d:84:40:
c5:d6:cc:38:7b:e5:3d:1f:c3:58:5f:73:b3:89:87:
36:eb:74:01:bb:20:a0:d8:a9:f0:5a:bc:44:f0:aa:
a5:91:ff:93:1d:76:9e:d3:3e:12:fd:ba:f2:c8:bd:
bf:59:8f:b3:50:a1:f0:36:71:94:49:df:89:90:94:
9d:36:79:bb:40:69:98:c4:8c:ac:91:54:bb:44:9f:
66:cc:31:e5:33:d1:49:0a:29:f8:8a:8a:26:21:dc:
61:a1:d5:1c:b4:89:b3:c0:72:8e:27:b4:84:61:a7:
1a:1b:f2:32:b5:ca:35:d3:2d:fe:66:9f:33:0c:47:
b4:c8:25:fe:69:e1:3c:c9:96:84:01:78:dd:1b:34:
e9:16:df:f4:8d:c4:27:42:fd:54:dd:a7:46:8c:b5:
4b:91:87:81:c6:ea:22:6a:71:c4:ec:6d:ef:3e:04:
a0:31:cb:51:e7:59:4a:8c:d2:3d:77:33:93:45:eb:
98:8b:73:96:66:e8:1b:88:a8:22:24:7e:df:9e:59:
39:05:d1:86:89:d5:fc:60:a1:c2:cc:d6:19:66:09:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AA:71:6D:8D:14:66:F4:EB:4A:85:C1:45:84:BC:D3:E9:22:9C:E3
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:27:c2:0b:91:b9:82:23:40:3b:44:b6:79:7c:d0:83:18:22:
96:08:00:9f:8c:4e:93:0e:4c:51:83:97:94:4c:74:78:30:e4:
0d:f9:4f:e9:9f:84:be:0c:86:3c:21:20:06:be:d1:6a:25:82:
bd:37:ac:0b:5c:1f:b3:4e:c7:b9:53:5f:0c:84:d7:6d:1a:8f:
17:39:87:83:86:88:13:24:9a:20:f6:29:98:79:7f:a4:f0:46:
ef:f8:43:e6:e9:7c:f8:4d:f2:5c:20:d9:43:90:69:09:0c:9f:
ae:97:03:af:d9:6d:4d:a6:80:ab:71:5d:e2:fd:22:4f:e4:e6:
9c:79:aa:5d:a5:a5:07:b0:61:42:96:89:5e:4b:c3:8a:83:96:
37:86:87:1f:0d:7a:7a:f8:a9:3e:c4:66:fb:ef:ab:f1:25:5b:
7b:3c:56:46:e3:51:de:e5:0f:41:f3:80:b8:b6:79:39:7d:9e:
f0:97:c8:f9:af:22:ae:ed:3c:2c:75:99:82:19:d1:41:cd:23:
68:b0:3a:67:b3:14:b9:e9:16:c3:0c:1d:5d:83:a2:a6:be:1b:
21:db:d8:96:0e:a4:ee:86:61:b4:6c:98:ce:f0:a9:07:7d:f5:
3b:1f:e8:a2:52:ef:f1:62:f4:ca:40:2f:97:97:25:f9:b1:71:
fe:db:31:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoAsQNrPdTKDWaK5NsCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDA3Y2ZjMjhhYzQ3MDNkZjZhYjI2ZmNkMmUzOTUzY2Uz
OTA5NzkwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
Eyg4YmFhNzE2ZDhkMTQ2NmY0ZWI0YTg1YzE0NTg0YmNkM2U5MjI5Y2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIGB9WC/Wg2ZcnmLgfF1BlYMnZrk
eeNH8J1gO3bdhKLpwcq8Aw5qbk4NhEDF1sw4e+U9H8NYX3OziYc263QBuyCg2Knw
WrxE8Kqlkf+THXae0z4S/bryyL2/WY+zUKHwNnGUSd+JkJSdNnm7QGmYxIyskVS7
RJ9mzDHlM9FJCin4ioomIdxhodUctImzwHKOJ7SEYacaG/Iytco10y3+Zp8zDEe0
yCX+aeE8yZaEAXjdGzTpFt/0jcQnQv1U3adGjLVLkYeBxuoianHE7G3vPgSgMctR
51lKjNI9dzOTReuYi3OWZugbiKgiJH7fnlk5BdGGidX8YKHCzNYZZgnoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuqcW2NFGb060qFwUWEvNPpIpzjMB8GA1UdIwQY
MBaAFADQfPworEcD32qyb80uOVPOOQl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQt
ODA1NDUyMDU0NTZjLzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQtODA1NDUyMDU0NTZj
LzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsifCC5G5
giNAO0S2eXzQgxgilggAn4xOkw5MUYOXlEx0eDDkDflP6Z+EvgyGPCEgBr7RaiWC
vTesC1wfs07HuVNfDITXbRqPFzmHg4aIEySaIPYpmHl/pPBG7/hD5ul8+E3yXCDZ
Q5BpCQyfrpcDr9ltTaaAq3Fd4v0iT+TmnHmqXaWlB7BhQpaJXkvDioOWN4aHHw16
evipPsRm+++r8SVbezxWRuNR3uUPQfOAuLZ5OX2e8JfI+a8iru08LHWZghnRQc0j
aLA6Z7MUuekWwwwdXYOipr4bIdvYlg6k7oZhtGyYzvCpB331Ox/oolLv8WL0ykAv
l5cl+bFx/tsxeg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:22 2025 by rpki-client