Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: TLkPbg9NwAnMdJq71asPNnvJAfDyewJrIIxk7Vp8SbY=
Subject key identifier: 7B:F3:9C:3B:8C:C1:A2:E8:14:4E:75:05:FC:DB:B7:97:10:C7:DD:BD
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 0194BC3C51A43B867D4776756974D0F91BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 10A2
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: vHdP7AV3iVGj+pJmSToDkc1bSTsHAWKEzxjTsW5URq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:a4:3b:86:7d:47:76:75:69:74:d0:f9:1b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=7bf39c3b8cc1a2e8144e7505fcdbb79710c7ddbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:1f:57:ca:0e:42:a0:20:69:10:e1:c5:d3:
8d:c3:a3:80:1f:da:ea:7c:8a:e3:8a:86:c4:5e:23:
17:ea:24:57:e7:f6:a6:42:56:30:f9:bc:a3:23:0e:
5a:78:42:ae:eb:8b:95:a2:62:6f:19:01:8e:0d:fa:
c9:fe:e3:06:b8:19:8a:ec:6e:b1:21:33:f8:ec:26:
de:79:c3:de:b1:16:1e:74:03:8a:7c:86:73:86:dd:
d4:83:a8:19:cf:51:79:ae:7a:ad:71:2d:31:22:7f:
a6:03:79:14:fb:8a:50:08:eb:1d:c2:ad:c3:7a:bf:
3f:05:e9:f9:e3:84:5d:35:0f:40:ff:94:86:38:e3:
ac:27:5f:04:41:f4:ac:27:04:3e:3d:0d:8d:c2:fb:
85:ff:aa:85:5d:0c:82:66:6b:a5:c6:0c:ae:80:85:
d0:8b:b9:76:e5:5c:6e:8c:a6:9e:03:36:39:4f:10:
e2:ab:8c:49:bc:c7:ca:fa:83:b2:e2:60:50:02:2c:
1c:21:c8:9e:e6:d8:46:a2:e9:18:59:45:ae:92:66:
01:5f:46:3e:ce:31:80:51:cf:1d:40:9b:40:72:d3:
c6:56:85:12:2c:70:fb:9c:dc:f0:a5:23:74:7c:4b:
8b:aa:9c:b3:41:e8:f1:5d:08:5f:a7:26:03:cb:3d:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F3:9C:3B:8C:C1:A2:E8:14:4E:75:05:FC:DB:B7:97:10:C7:DD:BD
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:27:d8:51:87:75:91:dc:96:e1:8f:8e:c0:6c:82:68:c0:2a:
a5:0d:ff:ff:c3:68:17:c9:5f:82:08:3f:10:74:e8:0b:7e:b2:
e6:7d:2e:46:d0:54:3f:fe:e2:e8:49:46:72:48:45:60:0a:ef:
0a:8d:ae:d1:2b:ab:26:df:8e:a5:f7:db:aa:ba:7d:5c:14:dc:
d5:3c:99:9d:21:f8:4a:13:02:ff:a9:40:47:76:8b:56:bd:94:
44:3e:f5:95:6b:36:44:77:68:dc:c7:36:dc:eb:6e:2d:63:cb:
09:26:dd:21:47:8a:6f:07:25:96:6d:58:7e:56:15:fe:c2:48:
ad:b8:00:d8:c0:65:f3:b0:a4:e5:58:8f:7e:46:da:70:3f:69:
64:8a:91:55:26:b5:ac:92:6d:73:50:ac:dc:41:7e:3c:ae:d3:
a4:a7:7c:db:4f:93:fc:0a:0f:ca:5c:da:49:89:b0:24:2d:87:
13:27:a2:2d:f6:35:d4:ea:85:b4:60:0d:5a:b0:1f:2e:26:0f:
56:1e:b8:5f:dc:c3:54:4f:4d:31:53:be:1a:10:49:1b:a9:84:
6b:c4:81:df:07:5b:51:08:c8:14:2b:63:7f:04:33:f1:99:17:
91:ec:1a:6b:a3:16:5a:f5:a8:05:95:b9:55:5c:dc:b0:51:93:
74:01:76:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFGkO4Z9R3Z1aXTQ+RvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh
ZjE3ZDUwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
Eyg3YmYzOWMzYjhjYzFhMmU4MTQ0ZTc1MDVmY2RiYjc5NzEwYzdkZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IIfV8oOQqAgaRDhxdONw6OAH9rq
fIrjiobEXiMX6iRX5/amQlYw+byjIw5aeEKu64uVomJvGQGODfrJ/uMGuBmK7G6x
ITP47CbeecPesRYedAOKfIZzht3Ug6gZz1F5rnqtcS0xIn+mA3kU+4pQCOsdwq3D
er8/Ben544RdNQ9A/5SGOOOsJ18EQfSsJwQ+PQ2NwvuF/6qFXQyCZmulxgyugIXQ
i7l25VxujKaeAzY5TxDiq4xJvMfK+oOy4mBQAiwcIcie5thGoukYWUWukmYBX0Y+
zjGAUc8dQJtActPGVoUSLHD7nNzwpSN0fEuLqpyzQejxXQhfpyYDyz3qywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvznDuMwaLoFE51Bfzbt5cQx929MB8GA1UdIwQY
MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt
ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3
LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhifYUYd1
kdyW4Y+OwGyCaMAqpQ3//8NoF8lfggg/EHToC36y5n0uRtBUP/7i6ElGckhFYArv
Co2u0SurJt+Opffbqrp9XBTc1TyZnSH4ShMC/6lAR3aLVr2URD71lWs2RHdo3Mc2
3OtuLWPLCSbdIUeKbwcllm1YflYV/sJIrbgA2MBl87Ck5ViPfkbacD9pZIqRVSa1
rJJtc1Cs3EF+PK7TpKd820+T/AoPylzaSYmwJC2HEyeiLfY11OqFtGANWrAfLiYP
Vh64X9zDVE9NMVO+GhBJG6mEa8SB3wdbUQjIFCtjfwQz8ZkXkewaa6MWWvWoBZW5
VVzcsFGTdAF2DQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:03 2025 by rpki-client