Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: GZZnU0GgPPhlCAmLNR6lnMfYKvQXqZlhAAcwKDOFOGk=
Subject key identifier: 08:9D:BC:CA:35:88:F6:CA:CD:5B:DF:AC:8D:CD:97:EE:AD:AE:86:C8
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 0194BC730BF5E917B51DA1C47E152C02353A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 0DC0
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: /RCvfRsoVX80cVvZCgVgjHevmLCnZrtM8AaxJweO7nM=)
2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:f5:e9:17:b5:1d:a1:c4:7e:15:2c:02:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=089dbcca3588f6cacd5bdfac8dcd97eeadae86c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:d6:10:78:f1:74:20:ed:75:5d:b6:81:3a:
0f:c7:e8:0f:79:ec:26:b2:1a:07:52:f6:ee:82:f8:
dc:69:ee:ac:f3:29:4c:45:19:7e:db:4b:e0:9f:44:
85:af:f2:81:ec:c7:33:82:32:d9:38:9b:07:33:a6:
ae:3b:83:0a:76:60:49:3f:da:da:f6:0d:f7:22:c4:
3d:5a:69:7d:aa:ba:31:ea:53:60:a7:65:f9:0b:0d:
13:9f:29:37:e2:68:9e:7e:01:bf:63:9f:69:61:48:
b2:22:ac:8c:88:93:d4:a7:ab:fa:bf:31:55:01:e1:
5a:ef:7b:af:69:3b:91:77:d0:53:dc:91:8e:93:59:
6b:5d:8f:6c:30:a2:28:4b:0a:f6:87:05:dc:51:7e:
6b:70:6e:23:21:3e:ad:30:5d:e1:68:fc:08:e8:c2:
8a:ab:fe:ac:9b:e0:2b:bb:bb:90:60:0b:d1:4b:19:
b7:3d:80:0c:33:23:92:29:8b:f8:6f:7c:d1:51:dd:
66:f0:42:41:e2:72:20:be:4c:d5:93:66:9a:d2:ce:
ce:e5:6a:bc:8a:f9:42:18:f8:48:36:a3:e0:90:be:
fd:80:26:fc:60:27:04:d4:62:51:b6:05:4f:8c:2c:
0b:74:6d:03:cf:e7:32:d0:ad:51:ed:b0:ae:ea:b5:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:BC:CA:35:88:F6:CA:CD:5B:DF:AC:8D:CD:97:EE:AD:AE:86:C8
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:aa:f0:ca:f4:dc:a3:43:5c:b4:d4:95:a2:67:f1:41:bb:ba:
41:6d:7e:72:17:26:8f:60:f2:b3:0a:17:ea:c2:0a:ef:88:35:
a8:9a:26:e5:21:9e:ac:17:2c:ab:72:08:25:f5:86:ea:62:3d:
43:b1:d7:4c:1b:2e:66:ca:8c:49:59:5b:75:97:29:b5:e3:17:
ba:5c:26:fc:83:75:b5:cc:df:ef:55:fd:3f:03:3f:b4:61:62:
bb:7e:0a:3d:01:b6:8e:c4:b7:11:66:02:bc:d2:c1:00:c4:9d:
91:0b:ee:b3:7f:69:90:03:93:3c:06:31:7f:21:89:20:c3:2f:
32:7b:55:54:5f:31:6e:81:4f:08:9f:8d:5e:42:ee:e2:8a:86:
ec:b8:44:c4:1e:4a:46:2e:02:7a:ba:eb:be:85:09:64:e0:58:
fe:21:52:dc:21:c2:14:48:0b:7a:a3:27:b0:ab:bb:f4:c5:d4:
79:a0:84:10:ac:aa:03:5a:34:d1:0e:fb:ae:08:e1:bd:6e:7b:
cd:53:5c:8e:6c:3c:0b:0f:06:e3:ed:06:da:48:1c:1e:3d:42:
18:85:8c:f0:32:55:b1:28:ee:5d:75:5e:2b:63:54:b1:90:68:
5d:d6:db:88:0d:84:27:13:66:cd:84:66:89:86:d9:05:74:44:
9f:da:4f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwv16Re1HaHEfhUsAjU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
EygwODlkYmNjYTM1ODhmNmNhY2Q1YmRmYWM4ZGNkOTdlZWFkYWU4NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYnWEHjxdCDtdV22gToPx+gPeewm
shoHUvbugvjcae6s8ylMRRl+20vgn0SFr/KB7MczgjLZOJsHM6auO4MKdmBJP9ra
9g33IsQ9Wml9qrox6lNgp2X5Cw0Tnyk34miefgG/Y59pYUiyIqyMiJPUp6v6vzFV
AeFa73uvaTuRd9BT3JGOk1lrXY9sMKIoSwr2hwXcUX5rcG4jIT6tMF3haPwI6MKK
q/6sm+Aru7uQYAvRSxm3PYAMMyOSKYv4b3zRUd1m8EJB4nIgvkzVk2aa0s7O5Wq8
ivlCGPhINqPgkL79gCb8YCcE1GJRtgVPjCwLdG0Dz+cy0K1R7bCu6rXFBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAidvMo1iPbKzVvfrI3Nl+6trobIMB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqrwyvTc
o0NctNSVomfxQbu6QW1+chcmj2DyswoX6sIK74g1qJom5SGerBcsq3IIJfWG6mI9
Q7HXTBsuZsqMSVlbdZcpteMXulwm/IN1tczf71X9PwM/tGFiu34KPQG2jsS3EWYC
vNLBAMSdkQvus39pkAOTPAYxfyGJIMMvMntVVF8xboFPCJ+NXkLu4oqG7LhExB5K
Ri4CerrrvoUJZOBY/iFS3CHCFEgLeqMnsKu79MXUeaCEEKyqA1o00Q77rgjhvW57
zVNcjmw8Cw8G4+0G2kgcHj1CGIWM8DJVsSjuXXVeK2NUsZBoXdbbiA2EJxNmzYRm
iYbZBXREn9pPgA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:47 2025 by rpki-client