Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json)
Hash identifier: PMjwTy4wXNP1759vUuj4axxeGPQp5ciS3N+Zz6iIFO4=
Subject key identifier: 74:04:02:1F:93:DA:A6:8E:18:DC:61:59:5C:66:AB:DA:4D:91:05:EA
Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Certificate issuer: /CN=dbc950098436281cee542a1e74546551e1e55283
Certificate serial: 0194BBCDCE6C5974110764BEDCC1F16EBD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: 0PRzAvkY7t9L2JYPHAN3dCwGNHSSTcTdFILAe/sO1h4=)
2: 5OG6iGTbUMv4yreuCzltBDVdDTU.roa (hash: B8Cg7jxvmm1JBGJPeKqbsREjncwII7bdGdlW3Ml3/PA=)
3: AJpGZf7C_I95XvnEwSe9K3FDGt0.roa (hash: T5OJTQQkO73ctxzV2JbKKhv+8POHWZi8kiMMxjjvYx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ce:6c:59:74:11:07:64:be:dc:c1:f1:6e:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc950098436281cee542a1e74546551e1e55283
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=7404021f93daa68e18dc61595c66abda4d9105ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:c5:d2:71:48:9f:08:43:ec:4f:b3:48:a0:
14:0d:8b:60:b8:75:42:92:5c:a1:da:9d:1c:de:e4:
d6:aa:3c:83:13:64:01:89:7d:63:59:30:2d:b4:e8:
43:ca:c0:40:0c:ef:b6:47:40:0c:ad:fb:a7:36:ff:
b0:ca:0a:65:73:e2:62:7f:5f:96:2e:da:01:af:5e:
df:e0:06:de:b7:c7:69:74:59:c9:43:af:d1:5a:68:
ee:ee:80:14:b4:74:75:76:61:f3:25:68:5a:d0:e6:
68:19:c4:7a:c6:5b:ed:07:b3:33:e8:e6:c8:ee:87:
c0:83:ed:46:06:c9:f4:67:8b:0e:2e:f1:c6:27:76:
3d:ec:f4:5e:2b:16:7e:14:2d:05:c2:76:c3:cf:d7:
3c:ec:f6:37:1f:2f:be:b2:e3:25:7f:f1:f8:5b:38:
d5:5e:04:4e:a5:20:9e:50:69:2b:3e:4e:23:c5:39:
e8:40:bc:e3:9d:6c:40:c0:1d:46:5f:46:2c:94:29:
6c:b9:c5:6d:0c:22:e7:1c:57:89:de:50:69:d3:01:
93:2f:9b:ec:37:4d:74:15:b5:61:0c:ee:56:4d:f5:
94:d5:1b:cb:95:24:19:d6:be:b9:3d:c8:d4:f1:23:
bf:73:7c:af:74:02:9a:03:e0:0c:3f:04:0b:86:46:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:02:1F:93:DA:A6:8E:18:DC:61:59:5C:66:AB:DA:4D:91:05:EA
X509v3 Authority Key Identifier:
keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c5:de:d0:0e:d7:c3:09:5b:d8:1b:d4:b2:7f:e1:a3:2f:bb:
35:18:f8:c0:51:70:68:62:b1:9d:2f:0d:7b:6c:09:8f:4d:ea:
fd:98:11:1a:01:99:b4:e7:b0:21:97:33:4c:7a:a8:c2:43:12:
ec:f0:5f:b6:12:e4:98:59:c0:23:22:69:26:70:9f:c0:88:ed:
34:ad:9b:7a:8c:62:30:e5:b7:7b:c9:f4:44:66:bd:5a:32:8b:
75:a4:dd:ce:2c:fd:8e:8e:3d:87:49:af:59:e3:64:7a:89:5a:
ad:96:22:60:66:c0:9a:2b:25:e2:aa:24:13:36:d5:26:6a:a3:
58:5b:60:7f:bc:6c:6a:f5:06:3d:62:dd:af:0f:62:f3:c3:c4:
e9:f7:52:34:16:0a:d4:94:4e:2b:ea:af:15:10:24:7e:b4:64:
1c:d4:8b:f1:3e:91:ff:c7:03:3d:3a:31:b1:1d:e3:bd:a7:8d:
bb:19:f6:66:d8:a8:88:bc:6f:4f:49:fd:2d:bc:d9:cd:e0:65:
4e:e3:27:78:fb:d9:38:62:20:4e:c6:7f:cd:51:40:b7:69:7e:
71:9b:f7:2a:bc:c8:ee:20:13:23:88:26:5e:ea:36:3f:bc:05:
6d:8f:d7:6f:b0:0a:1a:ff:a6:77:8b:8f:82:9d:73:a5:c9:d6:
d2:09:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:39 2025 by rpki-client