Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: u4Nsbn5m50zcFrdseJ90vnEEj3uCUlMoM4ws/Q4gtSw=
Subject key identifier: 2A:B5:89:B0:1A:28:AD:26:19:65:38:1B:20:D6:DE:D2:14:DC:2E:02
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0194BBCDD8827A0830CA74A2D92653DC2991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: 9fVG8ZmYVE0+EJwO0AMVWotPsuQuUK6lIgD47SiyjH0=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:82:7a:08:30:ca:74:a2:d9:26:53:dc:29:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=2ab589b01a28ad261965381b20d6ded214dc2e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:5f:6f:e9:ec:fc:12:29:7d:91:21:a6:ac:
97:44:7f:c4:1e:5d:c6:48:c9:72:27:71:8c:f7:29:
aa:c3:11:f8:66:0a:3f:53:12:8e:59:e9:e1:71:3b:
04:f3:a8:dd:4b:c4:72:67:74:20:3d:fa:6a:b7:c1:
11:73:29:59:d9:e4:db:8e:d9:90:7e:56:65:92:b7:
f1:66:af:fb:29:9e:44:2c:18:e8:95:ba:dc:40:02:
da:2c:d4:0e:d7:b8:72:a3:dd:6d:b1:e3:08:e6:0c:
2d:45:1d:78:b7:19:65:91:18:da:f1:ff:48:d9:52:
39:ea:7f:98:93:d8:f8:cf:6f:00:96:75:12:9e:67:
4e:0d:ed:2e:89:a8:dd:13:55:79:85:d7:1f:b0:2c:
56:2b:19:d4:93:2a:b5:9d:85:11:c4:b2:2d:b5:10:
70:c5:35:a2:18:ef:65:9c:73:ac:6e:00:3d:92:78:
82:62:50:5e:25:53:81:2e:d2:03:f1:60:fb:45:92:
1b:a0:bf:ab:e4:c0:cc:5f:72:6d:03:ce:75:d1:24:
7e:9a:6c:df:d0:e8:50:59:7c:82:e8:92:b4:54:ad:
dc:b8:d2:cc:f3:68:13:06:28:d4:4f:0c:45:77:25:
43:15:ca:dc:af:eb:76:5e:61:d3:a8:a4:1e:7b:aa:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B5:89:B0:1A:28:AD:26:19:65:38:1B:20:D6:DE:D2:14:DC:2E:02
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0e:5c:9e:f9:56:c6:51:05:8a:4e:eb:34:e5:7b:b4:6d:79:
64:fc:c4:39:4d:03:fa:c6:d2:b7:bc:af:9b:0e:d4:bb:0e:52:
89:fe:5a:14:f0:db:64:8b:01:dd:6f:07:e9:bd:c9:ee:0a:a4:
27:e7:c0:f0:bf:a7:2f:49:18:d2:d3:a4:47:40:72:bf:97:f0:
6d:18:fb:32:20:f3:e4:ff:0d:55:0b:60:8b:13:2d:49:3f:d1:
30:c4:a1:5a:fd:60:4e:11:84:a2:0c:13:07:aa:1c:f7:e2:9e:
82:e3:7e:d5:81:0c:d4:88:86:b9:be:f1:23:e6:8c:53:47:6a:
5b:ed:75:c7:d1:ee:27:b0:0b:00:17:e5:ba:04:03:58:42:5c:
17:a0:dd:12:b5:6a:8c:d2:76:7d:a4:95:7d:0a:4a:a7:7c:2b:
c4:ee:a0:9a:9f:1d:7a:be:aa:13:81:80:9d:d5:55:99:f7:83:
5d:13:86:f9:0d:7e:04:83:26:98:73:89:f1:64:21:77:c9:fa:
c6:4e:04:e0:0e:94:44:12:a9:a2:98:a3:cd:c1:eb:9d:1b:cd:
bf:08:45:64:32:14:37:45:fa:c7:30:b6:75:5c:8f:84:a0:3d:
f6:0c:f1:eb:82:b7:d2:ac:7a:d6:99:47:63:b0:3e:fd:9f:8b:
4f:1c:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:16 2025 by rpki-client