Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: Q3JKdqRYS+8yQJ9L5a2EEE70U7edRBardRPOikGFlrY=
Subject key identifier: 8D:79:E4:38:1C:41:70:0F:F6:CD:B1:39:49:86:95:1E:42:87:ED:C6
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 0194BC050DBB8F8D0240EC07882B281F334D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 0F65
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: nLtuK0Od1TDOJwxZTetn0O3XkUH5cppVGEjg2d+aBoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0d:bb:8f:8d:02:40:ec:07:88:2b:28:1f:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=8d79e4381c41700ff6cdb1394986951e4287edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:1c:63:9a:d0:96:43:5c:19:23:62:6c:01:
11:cc:75:fb:ca:1d:bb:16:1e:2b:2b:e8:f8:77:71:
56:b5:c0:ce:1a:7d:40:24:1e:37:95:04:09:5e:2b:
4a:10:cc:4d:28:2a:f0:75:29:54:7b:48:ec:a4:64:
88:6d:fe:70:ae:fa:e3:06:85:94:96:15:14:d1:30:
ec:01:10:26:5b:1d:f8:c8:f2:05:62:50:96:8c:06:
f3:48:6a:2c:4e:95:f0:de:1a:46:a7:57:ac:d8:5e:
64:88:98:d5:56:9c:fe:1b:4f:ab:e8:a3:77:2f:29:
01:4d:da:67:e4:15:6c:57:b0:84:c7:7d:f6:e8:46:
10:63:99:dd:ee:16:74:df:48:5f:ed:37:64:4f:ac:
a6:5b:18:a6:4f:9f:d2:a1:bd:a9:86:0d:5d:8c:19:
0d:d0:8b:d6:f4:a5:c2:35:3c:aa:aa:79:f5:0a:68:
76:57:4d:7c:0c:6e:22:72:b8:e2:01:ad:0f:8b:5b:
27:05:ca:63:5a:00:71:a4:a6:f0:fc:14:cc:1c:65:
5a:72:bd:bc:0f:cb:27:93:bf:1a:99:95:3a:1b:13:
8e:22:5f:47:fe:8f:f6:27:a7:9d:eb:11:9e:3e:d0:
53:b8:b4:ee:c8:5b:fa:5e:12:df:31:bb:8f:3a:5f:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:E4:38:1C:41:70:0F:F6:CD:B1:39:49:86:95:1E:42:87:ED:C6
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:af:cb:f2:0a:c9:43:e8:59:de:6b:c0:aa:b1:97:c9:12:f5:
3d:68:6a:3d:91:49:24:ad:30:bb:88:ca:c5:3e:a1:39:6f:9b:
d0:33:12:37:f8:8d:95:20:13:b5:3a:ac:78:06:10:89:53:2e:
16:21:ee:76:eb:30:cc:ed:c5:8f:be:3c:7e:af:cb:3f:ce:63:
06:b5:2e:14:73:20:69:39:42:0c:7d:13:e1:73:0d:c7:54:0d:
1f:62:cb:4f:b9:58:4f:00:ac:2d:5e:ca:e8:6a:20:83:2d:ec:
09:bb:b2:e7:34:3b:22:4e:a2:68:39:10:86:48:8f:a9:09:8b:
bf:d2:84:81:2a:48:d8:bd:9b:f6:59:ef:a3:b2:b9:f1:59:e2:
d2:25:88:54:0d:75:9d:68:ec:17:e8:39:a5:11:d9:8f:c3:f7:
21:db:7a:74:fe:41:21:36:d4:65:49:68:20:10:a9:8a:1c:af:
1b:ec:a9:aa:9d:bd:05:33:47:ac:08:3e:70:6c:bb:69:cd:45:
9e:8c:f1:54:7f:5c:5f:b0:94:e3:03:47:ff:40:d1:88:85:47:
f4:34:b3:5e:b2:2a:cb:37:b7:3f:70:f2:6e:6f:ed:fb:8c:1f:
e4:95:a6:ad:a2:5d:51:52:d5:89:d4:11:a5:79:0a:cb:04:e4:
b4:f1:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:10:02 2025 by rpki-client