Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: aXo6KD8lit1+G49Zk6+ajjyQj9waOr/W5ujjLDvrq8Q=
Subject key identifier: E0:23:3A:36:FC:23:6D:A6:D1:B0:B1:A7:26:62:54:D7:A1:F6:34:8E
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 0194BC05107A905824B7F61CA8471DD64BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 0F04
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: YnihOiiuRIE6XAxUZk4zXpZ1I2yU/XR6JAzcMMluaGs=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:7a:90:58:24:b7:f6:1c:a8:47:1d:d6:4b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=e0233a36fc236da6d1b0b1a7266254d7a1f6348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:a1:0b:1d:4f:50:ac:7f:71:48:f8:7b:ba:
ee:f6:24:5f:75:1d:09:20:d4:18:49:69:4c:d4:50:
68:03:6d:88:ae:81:2f:7d:92:c4:42:c3:02:e9:1a:
82:72:aa:10:21:6e:21:e4:e7:4d:48:62:97:15:74:
25:3f:5a:b5:8a:f6:76:41:ef:ab:d7:03:9c:fe:ba:
2e:77:b6:d9:9c:2a:f2:d1:7b:43:06:6b:c6:24:3f:
6f:1f:e9:b1:34:bb:da:d3:eb:82:45:67:11:19:d3:
96:2f:7b:09:56:9e:3e:5e:fd:81:30:c1:da:33:0a:
a2:d9:e1:75:dc:0c:9b:c7:87:7f:be:4c:38:4e:c8:
af:b7:2f:84:d1:08:c9:73:21:03:1a:6a:b2:81:2d:
09:2f:d1:78:fd:af:45:df:7d:f5:bb:fe:80:bf:d1:
3d:c5:9d:bd:06:9e:e2:07:bc:a7:14:75:f1:f6:78:
1e:73:63:51:8d:cd:78:c7:d1:34:5b:42:e2:14:1e:
c5:9c:e3:d0:97:00:13:21:bd:27:c1:d2:da:ec:a5:
53:c1:d3:ca:13:43:fb:a7:99:86:9b:f2:df:67:df:
b2:84:35:63:b9:9b:43:0a:8f:43:d0:84:f2:f3:0c:
61:16:cf:b0:57:02:dd:85:0d:70:dd:70:d9:c8:33:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:3A:36:FC:23:6D:A6:D1:B0:B1:A7:26:62:54:D7:A1:F6:34:8E
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:25:da:09:a6:64:98:67:d4:be:f1:87:91:0b:d4:0d:57:e2:
27:2b:3c:4b:c6:40:76:6e:d1:e1:78:17:4a:2a:be:77:24:8a:
7c:c0:fd:eb:0b:38:56:21:02:e9:0f:90:1a:9b:0e:8f:39:27:
69:a1:97:9f:78:a4:63:ae:ae:ae:4e:9d:c3:6e:5a:12:25:f0:
b1:0e:eb:d6:32:fd:3c:9c:58:73:6a:2a:0c:ee:f1:14:6c:15:
09:62:0d:3b:31:cf:d7:3e:b3:b8:7d:05:ec:13:a3:b5:06:ee:
0f:0a:c8:19:76:84:8a:24:94:cd:61:24:15:dc:66:37:2c:9c:
ac:65:c2:93:9c:b4:42:14:c5:6a:d4:58:f8:b2:09:76:31:bc:
2c:8b:df:7d:44:2f:bc:c5:9f:85:36:b5:97:e9:47:bf:f2:e3:
60:7c:c8:81:5b:c9:3d:6e:e5:01:66:04:8e:aa:61:40:0d:07:
4e:8a:25:9a:ec:1b:82:ad:7a:d3:49:fa:e5:ba:77:a6:ff:b8:
b2:92:d2:41:75:70:57:8d:f0:fc:f8:0f:5f:44:42:27:22:ea:
c1:34:1c:4c:05:85:38:41:37:22:33:8b:ac:04:96:6b:14:7e:
5d:fc:a5:8e:99:aa:ad:71:78:31:32:76:df:a7:58:ee:c0:09:
bc:22:7c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRB6kFgkt/YcqEcd1kuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EyhlMDIzM2EzNmZjMjM2ZGE2ZDFiMGIxYTcyNjYyNTRkN2ExZjYzNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8uhCx1PUKx/cUj4e7ru9iRfdR0J
INQYSWlM1FBoA22IroEvfZLEQsMC6RqCcqoQIW4h5OdNSGKXFXQlP1q1ivZ2Qe+r
1wOc/roud7bZnCry0XtDBmvGJD9vH+mxNLva0+uCRWcRGdOWL3sJVp4+Xv2BMMHa
Mwqi2eF13Aybx4d/vkw4Tsivty+E0QjJcyEDGmqygS0JL9F4/a9F3331u/6Av9E9
xZ29Bp7iB7ynFHXx9ngec2NRjc14x9E0W0LiFB7FnOPQlwATIb0nwdLa7KVTwdPK
E0P7p5mGm/LfZ9+yhDVjuZtDCo9D0ITy8wxhFs+wVwLdhQ1w3XDZyDP4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAjOjb8I22m0bCxpyZiVNeh9jSOMB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCXaCaZk
mGfUvvGHkQvUDVfiJys8S8ZAdm7R4XgXSiq+dySKfMD96ws4ViEC6Q+QGpsOjzkn
aaGXn3ikY66urk6dw25aEiXwsQ7r1jL9PJxYc2oqDO7xFGwVCWINOzHP1z6zuH0F
7BOjtQbuDwrIGXaEiiSUzWEkFdxmNyycrGXCk5y0QhTFatRY+LIJdjG8LIvffUQv
vMWfhTa1l+lHv/LjYHzIgVvJPW7lAWYEjqphQA0HToolmuwbgq1600n65bp3pv+4
spLSQXVwV43w/PgPX0RCJyLqwTQcTAWFOEE3IjOLrASWaxR+XfyljpmqrXF4MTJ2
36dY7sAJvCJ8zg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:17 2025 by rpki-client