Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File: bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier: s/TWMtISz37Eja3PSp0Dt3q4UtyMJo7fmghjAh6o9zI=
Subject key identifier: 64:FD:7F:41:88:1A:90:26:3C:90:F3:16:9F:F9:9E:0D:54:39:7F:BA
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer: /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial: 0194BC3C4008A490E6917521DE8E67F8E479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: 0MDUZ5j1MGcThYTayUW7MWDzNIVTVsxwKCSXQSSnIe8=)
2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:08:a4:90:e6:91:75:21:de:8e:67:f8:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=64fd7f41881a90263c90f3169ff99e0d54397fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:91:8c:83:16:db:27:15:3b:58:f6:48:bf:
3d:9d:01:e0:92:a0:53:8e:ea:49:93:84:06:ef:d2:
bf:5b:66:26:c1:2a:2e:51:d7:12:9a:65:53:70:10:
03:7d:f7:58:b2:00:08:a8:f2:03:cf:71:d0:e5:c9:
ab:7e:05:dd:78:2e:c6:2a:d3:9a:ec:f1:c8:0a:51:
a0:57:ca:61:cc:75:bd:9c:48:7b:9e:53:c3:66:db:
9a:a6:7c:4f:4a:79:16:4c:7a:11:c3:7a:dc:a1:39:
d5:7a:6b:00:f0:0b:9a:01:84:9f:da:1b:e4:b7:f8:
96:48:93:3f:ec:cb:3f:a9:d5:cd:01:8e:d5:71:fd:
d6:43:57:d1:12:23:e6:4d:c8:cf:6b:73:cc:85:af:
90:f0:e7:fa:33:e5:91:42:25:5a:dd:df:a9:1d:9c:
3e:0d:79:e0:c6:8c:62:85:ae:14:3f:35:66:fd:b0:
9f:e2:23:48:b8:e3:b1:c8:2d:3f:73:2b:b5:e1:dd:
8e:c5:dd:93:e3:df:9e:11:2a:ae:f4:58:4f:3a:75:
f6:7d:c2:8b:53:b2:a7:92:3f:aa:61:91:73:85:85:
36:07:0f:2a:e5:51:fc:63:6e:2f:e6:9d:4e:80:30:
d9:12:d0:47:21:1f:52:44:08:aa:1f:db:0d:05:ad:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:7F:41:88:1A:90:26:3C:90:F3:16:9F:F9:9E:0D:54:39:7F:BA
X509v3 Authority Key Identifier:
keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a5:66:e0:a0:5b:3f:02:e7:57:ad:65:43:cb:e8:a9:b2:f6:
76:88:81:8c:e8:c9:cd:f2:82:db:3f:ac:3e:ce:f4:2f:79:89:
64:11:1f:fb:0c:53:c8:70:15:f3:62:ce:80:41:6e:61:26:4c:
41:0b:a4:9c:de:68:9b:1f:ac:99:f2:df:69:34:4d:93:07:1d:
0a:7d:c7:7e:1f:5c:fd:d2:9f:e4:10:c4:90:7a:48:60:06:35:
88:ad:3e:62:e7:2d:ef:7d:50:ef:c2:36:48:f1:35:a0:a7:9b:
8e:3b:25:61:c7:25:7d:b9:17:eb:f1:fc:d3:07:9d:3e:b7:1b:
85:0d:e4:34:0f:22:e1:24:af:3f:d5:5e:c8:9b:fd:f5:fe:56:
b7:3a:9b:fc:d6:d4:b5:9d:a1:6d:5a:3c:e6:99:64:53:b6:3a:
03:ff:93:d0:ec:37:80:6d:d5:26:46:2f:cc:23:9f:e1:1a:88:
eb:87:f5:cf:53:3d:ac:47:c5:b2:01:3a:e2:df:b6:af:f3:8c:
e3:68:c2:de:95:de:9b:45:d5:9d:c0:25:7f:62:23:a6:6f:c0:
fa:cc:ba:c4:9d:f8:ec:b2:0f:b1:3e:29:3c:20:71:c3:b4:d4:
0d:b7:a3:3e:d9:0a:b8:79:41:19:da:84:4c:75:c4:f0:56:93:
76:12:69:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEAIpJDmkXUh3o5n+OR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYmNiNTdlMmQ1ZTQwNjMwZTE5M2JkNWNlYjE2ZjFlZjE4
NzQzYTMwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
Eyg2NGZkN2Y0MTg4MWE5MDI2M2M5MGYzMTY5ZmY5OWUwZDU0Mzk3ZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzORjIMW2ycVO1j2SL89nQHgkqBT
jupJk4QG79K/W2YmwSouUdcSmmVTcBADffdYsgAIqPIDz3HQ5cmrfgXdeC7GKtOa
7PHIClGgV8phzHW9nEh7nlPDZtuapnxPSnkWTHoRw3rcoTnVemsA8AuaAYSf2hvk
t/iWSJM/7Ms/qdXNAY7Vcf3WQ1fREiPmTcjPa3PMha+Q8Of6M+WRQiVa3d+pHZw+
DXngxoxiha4UPzVm/bCf4iNIuOOxyC0/cyu14d2Oxd2T49+eESqu9FhPOnX2fcKL
U7Knkj+qYZFzhYU2Bw8q5VH8Y24v5p1OgDDZEtBHIR9SRAiqH9sNBa01wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT9f0GIGpAmPJDzFp/5ng1UOX+6MB8GA1UdIwQY
MBaAFG68tX4tXkBjDhk71c6xbx7xh0OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgt
OWFkMThiYTFhM2Q5LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgtOWFkMThiYTFhM2Q5
LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwaVm4KBb
PwLnV61lQ8voqbL2doiBjOjJzfKC2z+sPs70L3mJZBEf+wxTyHAV82LOgEFuYSZM
QQuknN5omx+smfLfaTRNkwcdCn3Hfh9c/dKf5BDEkHpIYAY1iK0+Yuct731Q78I2
SPE1oKebjjslYcclfbkX6/H80wedPrcbhQ3kNA8i4SSvP9VeyJv99f5Wtzqb/NbU
tZ2hbVo85plkU7Y6A/+T0Ow3gG3VJkYvzCOf4RqI64f1z1M9rEfFsgE64t+2r/OM
42jC3pXem0XVncAlf2Ijpm/A+sy6xJ347LIPsT4pPCBxw7TUDbejPtkKuHlBGdqE
THXE8FaTdhJpcg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:04 2025 by rpki-client