Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier: RkNoXTeOI2x6dHhOkiXwyixPPjXMSkum9IDThhAo7fg=
Subject key identifier: BA:16:6D:6C:29:FA:4A:27:0A:BA:D3:43:0F:0D:AB:A6:24:CB:3D:DF
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 0195DFD8D6301DFEBFB4FB1B73F0E29F657A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number: 14AC
Signing time: Sat 29 Mar 2025 03:01:24 +0000
Manifest this update: Sat 29 Mar 2025 03:01:24 +0000
Manifest next update: Sun 30 Mar 2025 03:01:24 +0000
Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: ubfGrnH7AVWq2OUM6vsxJRpgT0YhnZl22e5+5cK5AyU=)
2: GYQEfAUHW7dZgctfSOEiK9IcuBg.roa (hash: Km85w7FHDGWwEv7yzqhkKLXi+TpyoQCcyxITiEoHCDY=)
3: VK2lkpPJSWNvcFm_VI7rxrLDgwg.roa (hash: OVrxxsaCYNK3a6LSw5LlCrrYQ6BsGkALeDXQ/cBmiLI=)
4: neolYGdLKpBXHmNej6CjSGJo33s.roa (hash: rdeL6tzNKDLvJGPaZiOq6jxc0q10y5ECjhYex4TDkLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:d6:30:1d:fe:bf:b4:fb:1b:73:f0:e2:9f:65:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Mar 29 03:01:24 2025 GMT
Not After : Mar 30 03:01:24 2025 GMT
Subject: CN=ba166d6c29fa4a270abad3430f0daba624cb3ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:56:82:b6:66:96:57:0a:ba:eb:72:0b:ce:
f0:35:fc:53:9d:e8:2b:14:83:a0:14:73:68:7c:05:
4f:d2:20:d0:ff:6e:61:26:2b:46:99:12:47:fb:88:
ab:a7:49:c1:97:ad:c8:44:cd:a6:3a:64:4b:11:71:
5a:c4:8d:4e:ad:b6:4c:4d:d6:99:02:ac:4d:ee:e0:
dc:8c:ed:b7:2c:c4:f9:c7:ae:a7:b5:d2:ea:a2:b6:
92:6e:a1:64:85:7d:8a:5a:e0:b9:d1:6a:98:9f:b9:
cf:de:47:bf:e5:1f:19:b3:56:74:08:27:40:4e:22:
f3:4b:13:75:67:b5:b1:28:6a:49:d2:b8:94:37:b0:
5b:a7:4a:92:f1:9e:eb:c4:32:83:c2:07:9e:35:54:
d1:f5:b5:6f:12:c1:65:10:92:44:8f:fa:30:05:5c:
1b:fd:bc:31:be:2c:a0:a4:4e:49:31:df:63:9b:37:
f5:bf:0e:83:24:b2:87:49:cf:fb:7f:74:83:9a:e1:
bf:fa:2e:61:e3:08:ff:fa:3d:c9:8c:64:51:f7:80:
42:65:21:f5:74:0b:e2:a8:ee:9c:f0:e8:2d:d5:91:
0d:9f:3e:43:fb:47:9f:91:35:a2:b1:e8:46:27:67:
55:7d:5e:21:2c:8a:78:0f:13:63:55:07:48:c0:bd:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:6D:6C:29:FA:4A:27:0A:BA:D3:43:0F:0D:AB:A6:24:CB:3D:DF
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:03:1c:d6:3b:74:4c:88:e0:8c:31:aa:b2:cb:07:ef:2d:74:
1b:3e:07:dc:94:15:09:11:b2:54:9d:df:02:fd:8d:e8:77:4b:
35:6d:ee:c8:9c:1c:08:f9:d0:3a:d9:88:ed:b7:ab:3a:dc:08:
c5:50:57:17:2f:fd:25:cb:2c:7b:a4:f9:7b:08:63:eb:86:9b:
2a:7e:bf:ca:a6:da:48:41:e8:b8:04:92:48:73:28:e7:32:96:
0b:28:e1:5f:a7:5b:ba:9c:08:ec:c2:b6:6e:15:ef:7b:60:ff:
df:e8:f3:ee:1c:c3:cb:47:b5:31:09:28:b6:32:35:ab:85:f8:
d5:80:68:c6:d0:e0:2a:11:22:8d:cd:49:09:d0:55:d4:93:af:
9b:17:18:4c:ef:7b:d2:05:08:cf:6c:69:91:29:af:71:9a:dc:
3b:6c:54:e6:e6:7a:62:08:d0:19:be:95:57:c0:4b:3f:c4:7f:
a7:b2:9c:e0:07:05:bf:76:b9:41:55:8f:47:3e:80:f5:ef:fd:
aa:bb:da:99:e5:1c:51:b2:a6:e9:e2:9c:f2:0a:0f:10:0e:84:
8d:a9:4e:3c:ca:73:47:64:8b:d4:47:e2:48:e7:25:1f:24:e0:
58:53:0c:17:85:75:1a:e4:7d:9f:ec:45:7d:8c:2b:d7:d6:38:
2c:2e:14:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2NYwHf6/tPsbc/Din2V6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2
NDEzMzMwHhcNMjUwMzI5MDMwMTI0WhcNMjUwMzMwMDMwMTI0WjAzMTEwLwYDVQQD
EyhiYTE2NmQ2YzI5ZmE0YTI3MGFiYWQzNDMwZjBkYWJhNjI0Y2IzZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG5WgrZmllcKuutyC87wNfxTnegr
FIOgFHNofAVP0iDQ/25hJitGmRJH+4irp0nBl63IRM2mOmRLEXFaxI1OrbZMTdaZ
AqxN7uDcjO23LMT5x66ntdLqoraSbqFkhX2KWuC50WqYn7nP3ke/5R8Zs1Z0CCdA
TiLzSxN1Z7WxKGpJ0riUN7Bbp0qS8Z7rxDKDwgeeNVTR9bVvEsFlEJJEj/owBVwb
/bwxviygpE5JMd9jmzf1vw6DJLKHSc/7f3SDmuG/+i5h4wj/+j3JjGRR94BCZSH1
dAviqO6c8Ogt1ZENnz5D+0efkTWisehGJ2dVfV4hLIp4DxNjVQdIwL08CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoWbWwp+konCrrTQw8Nq6Ykyz3fMB8GA1UdIwQY
MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt
NDg5NGY4OGJlZGRjLzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj
LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQMc1jt0
TIjgjDGqsssH7y10Gz4H3JQVCRGyVJ3fAv2N6HdLNW3uyJwcCPnQOtmI7berOtwI
xVBXFy/9Jcsse6T5ewhj64abKn6/yqbaSEHouASSSHMo5zKWCyjhX6dbupwI7MK2
bhXve2D/3+jz7hzDy0e1MQkotjI1q4X41YBoxtDgKhEijc1JCdBV1JOvmxcYTO97
0gUIz2xpkSmvcZrcO2xU5uZ6YgjQGb6VV8BLP8R/p7Kc4AcFv3a5QVWPRz6A9e/9
qrvameUcUbKm6eKc8goPEA6EjalOPMpzR2SL1EfiSOclHyTgWFMMF4V1GuR9n+xF
fYwr19Y4LC4UGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:04:34 2025 by rpki-client