Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: 9IJgaUcdTunz532uUMgT3c7JnXkthuGThtmYF6sApVg=
Subject key identifier: 49:ED:F0:50:73:95:C8:39:A9:8F:37:25:40:6C:19:A5:D7:6D:3A:6C
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0194BCA9CE68C2773F790D92194E7BBAAB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 1176
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: qKZKklSLnDTMdS/VscdlsTbGe2x1B/ygVwP0Kf/p9g4=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:68:c2:77:3f:79:0d:92:19:4e:7b:ba:ab:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=49edf0507395c839a98f3725406c19a5d76d3a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:47:9b:fb:f5:bf:08:e7:9d:f0:92:5f:32:
8b:77:a2:c3:e4:d9:c2:23:ae:3b:2f:be:0a:09:86:
15:42:55:8a:84:e0:c7:fa:cb:96:30:9a:66:9a:b4:
03:7f:9c:8b:fc:60:66:60:25:7c:86:4b:38:42:c5:
c1:f0:56:37:6a:62:aa:c9:ef:47:03:74:f2:77:70:
7f:cf:48:79:aa:43:d1:cb:cf:4c:21:7e:25:4f:d2:
c7:73:36:d8:78:f1:d2:f5:61:d1:8f:89:0c:ec:41:
ab:71:1b:49:50:5d:96:0a:83:96:8c:6d:25:ae:e5:
bb:dc:c0:09:20:06:8e:23:d7:94:b4:cc:76:e2:cf:
54:60:b1:89:e9:ba:f5:55:c5:e7:7f:c1:02:c3:5e:
b7:a6:e5:88:b9:8c:a3:a1:2e:fd:9f:d1:38:38:23:
80:d4:05:6f:f4:25:b3:ab:46:4f:31:09:a5:69:f6:
0b:3d:c0:16:fc:de:ae:68:85:37:8f:8a:ed:9d:b3:
b6:71:40:be:06:1d:71:04:40:b0:f0:48:9c:06:71:
bc:11:c1:fb:42:c9:1b:77:41:8c:4f:42:23:ac:9c:
74:d3:5b:1f:91:99:2f:2a:c5:25:0a:9a:52:32:a7:
0a:a5:41:f9:e2:16:65:8b:05:59:41:e2:4d:18:4f:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:F0:50:73:95:C8:39:A9:8F:37:25:40:6C:19:A5:D7:6D:3A:6C
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:05:b6:73:4e:9d:53:52:ba:d3:20:d3:1e:5e:09:1c:8b:5d:
71:7d:93:45:98:e1:db:da:7a:92:fc:e9:fc:98:ca:34:4c:10:
a8:c7:67:d5:6e:16:03:1b:8f:eb:f5:ec:af:d6:3f:5a:3e:af:
06:51:b1:17:0d:c3:53:6c:75:ed:d3:2c:84:fb:be:ca:84:3e:
5c:3f:c7:1a:04:db:8e:d3:2e:d2:62:5e:aa:0c:ad:8b:d1:85:
a1:4c:e9:3a:19:b5:95:42:c3:fc:57:60:4d:9a:52:15:8c:d9:
6b:8f:34:61:79:4e:2b:89:cf:61:91:be:d7:e6:d1:29:26:8b:
04:6f:81:14:9e:71:0d:fa:00:f2:f2:f1:7b:a2:6d:6f:03:95:
be:aa:1d:0b:01:b5:f9:e0:56:f1:1c:bf:3d:96:5f:d2:1e:02:
2f:d2:ea:42:68:4c:16:22:cf:38:f3:39:42:a8:60:30:35:f9:
19:b2:aa:29:4c:90:ba:e6:9c:a6:06:bc:b6:3b:2b:67:b4:99:
27:37:c5:1c:77:4a:24:8c:a6:3d:b2:5b:88:eb:64:8f:7b:c1:
92:b1:d0:ea:a2:9c:13:36:42:ea:38:3d:6d:39:e1:09:9c:12:
5f:93:64:94:13:c4:eb:eb:e6:f3:24:f7:b4:7d:08:12:ce:f6:
f8:56:96:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qc5ownc/eQ2SGU57uqsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjliMjRmMmMwODQ3ZDA0MWMxZTY2YTEyZjAxZWFiYTQ3
OGI0ZmMwHhcNMjUwMTMxMTQwMDMyWhcNMjUwMjAxMTQwMDMyWjAzMTEwLwYDVQQD
Eyg0OWVkZjA1MDczOTVjODM5YTk4ZjM3MjU0MDZjMTlhNWQ3NmQzYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPhHm/v1vwjnnfCSXzKLd6LD5NnC
I647L74KCYYVQlWKhODH+suWMJpmmrQDf5yL/GBmYCV8hks4QsXB8FY3amKqye9H
A3Tyd3B/z0h5qkPRy89MIX4lT9LHczbYePHS9WHRj4kM7EGrcRtJUF2WCoOWjG0l
ruW73MAJIAaOI9eUtMx24s9UYLGJ6br1VcXnf8ECw163puWIuYyjoS79n9E4OCOA
1AVv9CWzq0ZPMQmlafYLPcAW/N6uaIU3j4rtnbO2cUC+Bh1xBECw8EicBnG8EcH7
Qskbd0GMT0IjrJx001sfkZkvKsUlCppSMqcKpUH54hZliwVZQeJNGE/jzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnt8FBzlcg5qY83JUBsGaXXbTpsMB8GA1UdIwQY
MBaAFGz5sk8sCEfQQcHmahLwHqukeLT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWIt
OTQ2ODkyZjg4YmViLzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWItOTQ2ODkyZjg4YmVi
LzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQW2c06d
U1K60yDTHl4JHItdcX2TRZjh29p6kvzp/JjKNEwQqMdn1W4WAxuP6/Xsr9Y/Wj6v
BlGxFw3DU2x17dMshPu+yoQ+XD/HGgTbjtMu0mJeqgyti9GFoUzpOhm1lULD/Fdg
TZpSFYzZa480YXlOK4nPYZG+1+bRKSaLBG+BFJ5xDfoA8vLxe6JtbwOVvqodCwG1
+eBW8Ry/PZZf0h4CL9LqQmhMFiLPOPM5QqhgMDX5GbKqKUyQuuacpga8tjsrZ7SZ
JzfFHHdKJIymPbJbiOtkj3vBkrHQ6qKcEzZC6jg9bTnhCZwSX5NklBPE6+vm8yT3
tH0IEs72+FaW3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:39 2025 by rpki-client