Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json)
Hash identifier: r6qxNJblD/7QNCYlDQrunHXDRUCc5Aav8qXFb8e9syI=
Subject key identifier: DB:EE:3D:B7:28:46:30:FD:C3:BF:F3:07:FC:EA:10:C7:CD:EA:8F:42
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 0194BC72DCBE53A1651E9699741E1D199A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
Manifest number: 1078
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: K3Y/EtnGKWx7lB46poDqkkO2Gh3KIu+iBBRfDZj3oAU=)
2: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (hash: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=)
3: lZ-AOq7_6QtP_M2_NSdFkS5kWDw.roa (hash: QIlc9W3HH3Xuxs2UHApl1aj37iKKZQTLV1xjUXcHjZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:be:53:a1:65:1e:96:99:74:1e:1d:19:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=dbee3db7284630fdc3bff307fcea10c7cdea8f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:ce:4f:4d:bc:c9:d2:ed:eb:46:94:6f:c6:
96:d1:1e:e7:a5:eb:33:6b:9f:63:6e:51:f7:08:3d:
20:f7:96:f2:9e:6b:b1:98:c7:bf:97:9a:b4:1a:f6:
4d:23:0b:ab:4d:9a:ff:3a:72:1d:46:6d:93:8f:b2:
a6:14:e4:0b:a8:83:2c:c7:a4:56:36:2c:f1:3e:f5:
f2:3f:3c:eb:95:b1:81:5d:c5:a4:ab:27:05:3b:25:
d7:79:21:41:75:04:93:d1:c2:40:86:8a:7f:64:61:
f7:09:5b:36:00:d4:71:2f:73:e8:8c:85:f3:0e:eb:
db:cc:09:0d:4c:a1:97:29:8f:2a:c7:de:a0:c9:9d:
9c:39:bf:87:1a:e1:d0:ab:39:1f:81:20:9e:29:4b:
cc:e0:41:b8:49:a8:04:a2:06:56:3b:4f:d2:e1:7a:
09:00:20:c1:8e:50:c6:65:34:d0:fb:4b:8d:20:e2:
6a:69:18:05:8d:fd:8e:e5:e1:34:b6:8d:57:37:0e:
3c:51:49:4a:a0:e5:4e:1d:4d:a6:8d:98:4e:ba:b4:
f3:18:d8:10:f7:85:39:50:f6:29:6b:ab:2d:44:e2:
55:57:16:41:da:91:cd:37:0e:7d:c6:dd:70:9f:3e:
1b:15:0c:79:c6:c9:9a:59:3d:9d:aa:14:16:fa:ba:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EE:3D:B7:28:46:30:FD:C3:BF:F3:07:FC:EA:10:C7:CD:EA:8F:42
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:81:f2:4b:66:e5:ea:de:7a:8a:84:0d:8c:a7:7a:8b:b7:
a8:66:88:b1:0b:75:88:11:fe:9a:ca:5b:98:bb:a9:23:9f:75:
f4:24:78:4c:29:3c:ec:6a:6c:29:61:d9:79:6e:23:ea:bd:f1:
76:ee:5e:61:f6:c2:9b:49:23:c0:d9:d4:b2:94:b7:f8:bf:73:
ad:b5:08:41:d8:bc:aa:aa:f1:c3:26:31:c3:4e:01:c3:38:24:
1d:b2:f9:1f:79:85:0f:73:1a:30:1f:0e:19:4d:8c:6d:f5:a2:
f6:e9:1f:2c:bd:66:13:24:81:77:31:17:c9:41:7d:1f:4d:73:
60:f1:be:2d:69:a7:81:06:57:e0:f4:08:21:7b:4d:b8:70:95:
7b:76:17:6d:ce:fe:4c:8e:0b:40:61:4c:99:2b:ef:3b:f0:22:
12:24:70:7f:9c:69:b3:f0:64:27:78:8d:89:34:34:b4:f9:2d:
b4:16:5e:64:c3:b5:69:bb:97:f5:ec:a4:57:87:75:d2:46:01:
52:27:ff:23:d9:26:07:b8:1a:d7:52:47:ba:44:54:a2:16:9a:
72:89:28:5d:17:1c:9a:09:32:a4:c3:df:19:5e:ae:0a:11:83:
62:01:db:8f:62:98:04:6e:06:7d:25:ac:8b:fd:38:ac:ee:ea:
e2:31:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:22 2025 by rpki-client