Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier: rRmjSKwXJovn/F0qv2Cq1BNJ4OQmV2DmHmX9pKQoloE=
Subject key identifier: 8C:A8:07:51:29:99:C9:56:E8:B5:05:0D:8C:71:0C:6A:80:A8:DD:80
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 0194BCA9AF7A3B20A2E3CF33ACAB626F7E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: L13FAAoGOfTptrGAiezT5TZ0sujv317nlLP3cC8Yqa4=)
2: ZNhnjqldcw87nCml3io59xsOVUM.roa (hash: 0msjn5hZBlC+2WfO0lF8oeX6XpNIJpBSDgBeVQssg6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:7a:3b:20:a2:e3:cf:33:ac:ab:62:6f:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=8ca807512999c956e8b5050d8c710c6a80a8dd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:db:0c:a4:64:9d:25:4c:43:f1:58:9f:53:
2d:d0:a1:47:91:28:78:7e:7d:fd:5a:9b:fa:05:fa:
8c:b8:6e:a2:e8:f9:0e:f6:f9:f0:81:6e:0f:66:71:
d0:ed:17:eb:ac:b7:0a:9a:d9:25:e2:6e:0d:76:61:
ff:d9:1c:03:87:c0:ab:c0:01:8a:da:8c:a6:df:fa:
50:b7:21:93:36:d0:68:b2:9f:92:3a:3f:fe:88:b5:
1e:3f:63:6c:8d:91:83:3b:e2:eb:6c:3a:97:71:92:
d8:f6:95:52:46:34:c9:9c:41:8c:40:90:b3:4b:52:
03:7f:da:ee:09:04:00:fe:ca:da:48:89:67:f6:c4:
19:b6:b5:a7:4b:50:73:d1:ad:da:4c:34:20:5f:3b:
a2:41:14:d8:56:ab:17:60:86:93:ff:55:6f:50:3a:
58:51:94:1c:86:6b:5a:0f:70:9b:03:96:58:60:61:
b6:ad:db:fe:09:71:63:f5:20:4b:e6:d8:4d:54:69:
0b:1a:62:0c:0a:2d:06:45:13:07:68:71:7b:10:fb:
ba:be:a0:2d:a5:fe:42:ba:38:27:df:73:cd:89:89:
94:e5:d3:5b:db:65:20:94:1b:10:0b:9a:a4:7a:db:
ff:3b:6d:f8:5c:6b:78:40:5a:1c:d0:07:6f:1a:d0:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:07:51:29:99:C9:56:E8:B5:05:0D:8C:71:0C:6A:80:A8:DD:80
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bc:14:0c:19:0c:0d:44:b2:fe:bd:d8:d3:67:8d:14:b8:39:
74:0d:b4:80:1d:41:02:d8:53:f3:67:97:92:cf:a1:f6:0d:6d:
0f:6e:7a:bb:5f:64:f2:7d:09:cc:6a:7d:a3:2c:4e:e2:59:2d:
6b:7a:8b:12:cc:ee:27:fe:15:23:5f:c7:91:15:64:e8:e8:3c:
cb:b6:5c:d2:6b:df:28:ae:28:af:71:75:3b:74:e0:a2:6b:77:
d1:f1:37:6e:71:7c:69:04:4a:32:b6:aa:d9:e3:25:9a:ae:f7:
1b:c8:fa:14:7c:41:cd:6c:37:c9:2f:6f:2d:f2:f3:d3:73:00:
a6:ae:e2:03:57:7e:38:96:61:f6:d9:31:95:c9:21:49:be:5f:
d5:64:b8:fe:e5:52:af:e5:89:41:e4:82:77:15:85:b1:78:72:
56:18:a3:cc:63:6d:59:b9:2b:0f:85:b6:93:1a:48:a9:51:4c:
71:c3:b8:62:3f:02:c0:8f:4d:ab:68:c3:39:33:33:ad:55:86:
9f:f1:73:fc:02:9f:6b:4f:d4:ef:d6:8e:b2:1d:be:29:99:04:
61:b4:65:48:ad:6a:c1:c3:15:b7:e0:ba:3e:28:da:86:58:05:
b2:cf:38:9d:d5:ad:a2:89:b3:9a:2c:89:c0:77:79:9a:a8:3c:
ec:24:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:44 2025 by rpki-client