Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json)
Hash identifier: e+jMzwA+1fuPvKgZlXvuMmXsr/CZDCryGM3+L/o+zPc=
Subject key identifier: 44:10:7C:94:A3:1A:70:C3:F2:1F:01:2B:A2:0F:D1:A1:5E:A9:A4:F7
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 0194BD4EA749FE10E2B766A6EFDD52A50221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
Manifest number: 12FE
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: 2JZWvMxmBHtHPC2CLyo0Ls7PF3MGoV9nuy7j+S/JWxo=)
2: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (hash: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:49:fe:10:e2:b7:66:a6:ef:dd:52:a5:02:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=44107c94a31a70c3f21f012ba20fd1a15ea9a4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:dd:24:58:c7:4d:23:c8:46:98:4b:2f:35:
1a:48:ad:b6:8b:c0:4f:bb:f5:eb:b0:88:76:f6:61:
ae:66:d1:a9:c7:32:13:34:be:88:a7:58:68:c3:5f:
d8:54:58:9b:99:3c:c7:73:dc:84:5f:82:89:41:7d:
1e:2c:e7:f4:b9:f1:ae:f8:61:61:75:11:07:ee:41:
1a:31:23:87:76:1e:45:da:57:0e:c4:8c:ea:42:fd:
10:d9:73:33:ba:10:79:9f:10:e2:3b:a9:66:d2:57:
5c:d6:c3:3c:c5:02:08:7f:67:c2:87:ec:c7:b8:39:
bc:45:1d:70:5a:f6:a9:fa:54:ad:1e:a9:50:26:ec:
e2:bb:30:e6:46:0d:0d:af:e1:c8:43:0d:e6:11:62:
91:4d:3c:cd:6c:d0:14:05:62:2a:f6:d8:b7:97:cc:
2e:3a:0f:6f:9b:51:9f:f3:c5:ec:55:5f:76:db:62:
66:d3:87:61:dc:89:02:2e:9a:bd:3e:0f:44:8a:c7:
1f:95:98:d2:13:c7:2e:03:01:8e:dd:cd:95:bb:54:
f7:1b:f5:a3:bc:72:f7:28:38:b1:e9:23:c3:6d:a0:
f8:f1:56:f1:46:f8:ad:af:2c:bd:ff:c2:4e:47:73:
c4:4c:0b:68:98:b5:62:d5:2c:79:47:40:a8:b9:01:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:7C:94:A3:1A:70:C3:F2:1F:01:2B:A2:0F:D1:A1:5E:A9:A4:F7
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0f:5f:29:e7:ad:96:d0:92:29:dd:9f:ba:a9:0b:a0:19:60:
c1:9c:49:42:9b:fc:fc:ef:3d:b5:8f:5d:83:88:ee:80:2f:12:
bf:6c:b8:18:9e:37:9c:34:0a:0d:81:c5:92:ad:86:3b:ac:0f:
3c:54:f0:c5:97:4b:15:9c:39:2d:56:89:a6:24:9d:47:2e:45:
b0:2d:4c:58:7a:eb:27:4e:23:c7:05:7e:2d:c5:c0:64:b7:90:
0c:a0:6c:4d:44:fd:4a:4d:39:ea:da:85:c7:00:50:b9:51:f2:
25:35:d7:c1:98:95:aa:3d:43:4a:85:7e:96:17:fe:a7:4a:74:
92:a9:99:48:b9:d1:ae:b3:84:96:8d:99:17:df:0f:ff:ac:1f:
ca:88:7d:aa:cc:83:05:8f:d5:c9:66:ff:02:87:3e:f7:41:3b:
5d:aa:e6:37:c4:55:b5:12:ae:46:65:9c:4e:f6:86:78:63:72:
af:55:55:db:37:c4:b8:11:33:22:be:7d:56:9d:21:46:13:09:
05:7b:a4:93:29:4d:47:a1:77:a6:91:73:4a:7c:85:60:ff:d1:
36:08:89:a1:38:aa:6f:f3:9e:c8:2b:fa:75:ed:31:19:b3:e4:
a2:b5:41:e1:26:29:9a:4f:21:31:80:27:57:f8:29:55:68:ee:
fc:50:63:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqdJ/hDit2am791SpQIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk
NmNkMGUwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
Eyg0NDEwN2M5NGEzMWE3MGMzZjIxZjAxMmJhMjBmZDFhMTVlYTlhNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpndJFjHTSPIRphLLzUaSK22i8BP
u/XrsIh29mGuZtGpxzITNL6Ip1how1/YVFibmTzHc9yEX4KJQX0eLOf0ufGu+GFh
dREH7kEaMSOHdh5F2lcOxIzqQv0Q2XMzuhB5nxDiO6lm0ldc1sM8xQIIf2fCh+zH
uDm8RR1wWvap+lStHqlQJuziuzDmRg0Nr+HIQw3mEWKRTTzNbNAUBWIq9ti3l8wu
Og9vm1Gf88XsVV9222Jm04dh3IkCLpq9Pg9EiscflZjSE8cuAwGO3c2Vu1T3G/Wj
vHL3KDix6SPDbaD48VbxRvitryy9/8JOR3PETAtomLVi1Sx5R0CouQEhtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQQfJSjGnDD8h8BK6IP0aFeqaT3MB8GA1UdIwQY
MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt
OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi
LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ9fKeet
ltCSKd2fuqkLoBlgwZxJQpv8/O89tY9dg4jugC8Sv2y4GJ43nDQKDYHFkq2GO6wP
PFTwxZdLFZw5LVaJpiSdRy5FsC1MWHrrJ04jxwV+LcXAZLeQDKBsTUT9Sk056tqF
xwBQuVHyJTXXwZiVqj1DSoV+lhf+p0p0kqmZSLnRrrOElo2ZF98P/6wfyoh9qsyD
BY/VyWb/Aoc+90E7XarmN8RVtRKuRmWcTvaGeGNyr1VV2zfEuBEzIr59Vp0hRhMJ
BXukkylNR6F3ppFzSnyFYP/RNgiJoTiqb/OeyCv6de0xGbPkorVB4SYpmk8hMYAn
V/gpVWju/FBjBA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:52 2025 by rpki-client