Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: 4wXph1fgqxUkR9dZwUCNMbW687Ie/HeDSfOpATiCphI=
Subject key identifier: 85:F0:7B:33:C4:FF:86:C0:15:94:D9:C8:E1:70:1D:40:D9:33:02:F4
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 0194BCAA2CF9DB59CCE10B5D43E59C3970E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 0F2E
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: HHYgfEUFWGccCuQCxiPfoWpicA8+NX+ecZxVMlf1frk=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:f9:db:59:cc:e1:0b:5d:43:e5:9c:39:70:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=85f07b33c4ff86c01594d9c8e1701d40d93302f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:c5:3f:34:c7:c8:fb:2c:ca:f4:03:0e:8c:
1b:af:eb:8c:64:d3:b8:be:2f:d7:d6:d6:7e:8b:7a:
a1:c5:b9:12:f5:7b:bb:40:71:43:40:a9:b9:dc:03:
dc:99:f1:fc:7f:c0:69:6e:09:53:33:1c:e3:a0:04:
29:a6:8b:fd:62:52:53:af:49:9b:90:09:e3:d2:5e:
b2:e0:49:1d:00:dc:1b:c0:10:b3:d6:92:76:13:12:
b9:60:96:3c:15:8f:36:35:35:b8:a2:d2:84:77:49:
06:51:32:2f:8c:a9:44:40:59:bc:b8:8e:3f:05:64:
57:99:f7:d7:75:6f:b7:91:a9:dc:4e:cc:d4:88:23:
83:59:2a:22:0c:62:f2:c0:ff:12:88:bf:c4:84:f2:
b8:e8:36:f1:4f:27:dc:ce:d8:92:8a:d9:57:5e:e6:
f6:a3:43:25:bb:ec:6a:ed:10:9f:2f:5c:32:dc:a6:
e7:4a:03:46:ee:5d:bc:cf:f8:24:96:00:a6:f0:d6:
45:8a:73:f7:f2:75:0d:a3:6a:ad:30:a1:7a:72:95:
27:35:f7:48:0f:b7:22:27:9a:ce:6d:bf:d7:4e:ee:
30:42:5e:5d:d2:c1:01:9e:eb:9f:b9:fc:f8:3a:23:
30:8e:79:e8:6c:4c:a1:f5:24:fd:9f:5c:c3:76:9a:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:7B:33:C4:FF:86:C0:15:94:D9:C8:E1:70:1D:40:D9:33:02:F4
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:88:a0:de:b5:d3:89:6f:ed:fd:d7:bc:24:41:a5:7e:0f:60:
d1:02:32:36:81:b1:35:69:0a:e9:7c:dc:75:86:18:b9:84:9f:
0a:6d:d1:e0:fd:63:e9:9c:07:01:d8:63:09:69:fb:0a:c4:1e:
c9:11:2b:4f:63:65:8d:48:2b:95:86:72:2b:9a:f2:20:b0:6c:
c2:7f:f3:90:2a:2e:72:95:d3:98:f8:a6:53:cd:49:f0:e2:d9:
5c:1c:10:fd:b0:91:51:1b:f3:c7:05:5b:cf:0d:de:0a:b0:5d:
2f:3c:e0:d1:d8:36:32:c4:06:3f:42:b0:da:2b:54:36:9e:79:
57:37:e3:ef:9e:50:10:39:25:49:ef:c2:20:49:ae:ec:6d:a3:
8d:6b:5d:e2:c6:1c:63:20:44:1c:19:96:a9:23:cc:5d:a7:f1:
d3:b2:a3:7e:fb:f7:5c:90:56:12:71:88:e8:05:43:0d:33:71:
14:5b:4e:06:75:3d:7c:06:0c:d6:e4:be:5d:2e:c3:6e:8f:99:
ec:95:ec:a0:7e:c6:fb:47:ff:9e:b0:c4:36:46:e5:46:84:4b:
1e:b0:13:4b:d5:c6:ba:36:0b:2a:c1:b8:9d:3a:f9:bf:ca:fd:
58:9e:ef:c4:aa:a4:b9:3e:63:1c:26:de:c7:0c:2f:3c:1e:ae:
5a:07:4c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiz521nM4QtdQ+WcOXDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
Eyg4NWYwN2IzM2M0ZmY4NmMwMTU5NGQ5YzhlMTcwMWQ0MGQ5MzMwMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVnFPzTHyPssyvQDDowbr+uMZNO4
vi/X1tZ+i3qhxbkS9Xu7QHFDQKm53APcmfH8f8BpbglTMxzjoAQppov9YlJTr0mb
kAnj0l6y4EkdANwbwBCz1pJ2ExK5YJY8FY82NTW4otKEd0kGUTIvjKlEQFm8uI4/
BWRXmffXdW+3kancTszUiCODWSoiDGLywP8SiL/EhPK46DbxTyfcztiSitlXXub2
o0Mlu+xq7RCfL1wy3KbnSgNG7l28z/gklgCm8NZFinP38nUNo2qtMKF6cpUnNfdI
D7ciJ5rObb/XTu4wQl5d0sEBnuufufz4OiMwjnnobEyh9ST9n1zDdppfvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXwezPE/4bAFZTZyOFwHUDZMwL0MB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoig3rXT
iW/t/de8JEGlfg9g0QIyNoGxNWkK6XzcdYYYuYSfCm3R4P1j6ZwHAdhjCWn7CsQe
yRErT2NljUgrlYZyK5ryILBswn/zkCoucpXTmPimU81J8OLZXBwQ/bCRURvzxwVb
zw3eCrBdLzzg0dg2MsQGP0Kw2itUNp55Vzfj755QEDklSe/CIEmu7G2jjWtd4sYc
YyBEHBmWqSPMXafx07Kjfvv3XJBWEnGI6AVDDTNxFFtOBnU9fAYM1uS+XS7Dbo+Z
7JXsoH7G+0f/nrDENkblRoRLHrATS9XGujYLKsG4nTr5v8r9WJ7vxKqkuT5jHCbe
xwwvPB6uWgdMOg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:49 2025 by rpki-client