Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/28rEj9yVQ8QHBBZa6FlJQx7DtuM.mft
File: 28rEj9yVQ8QHBBZa6FlJQx7DtuM.mft (raw, json)
Hash identifier: xDS7rCuTzmMfd/1mHXoKCsZmKzpPxJv1MHuNkiHE1iA=
Subject key identifier: 28:F3:CE:58:48:BE:CC:5A:F8:37:B3:60:08:E0:59:3D:66:2A:53:1A
Authority key identifier: DB:CA:C4:8F:DC:95:43:C4:07:04:16:5A:E8:59:49:43:1E:C3:B6:E3
Certificate issuer: /CN=dbcac48fdc9543c40704165ae85949431ec3b6e3
Certificate serial: 018A49F6A0B182B96229D4FB387F51F01F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rEj9yVQ8QHBBZa6FlJQx7DtuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/28rEj9yVQ8QHBBZa6FlJQx7DtuM.mft
Manifest number: 09EA
Signing time: Thu 31 Aug 2023 05:00:14 +0000
Manifest this update: Thu 31 Aug 2023 05:00:14 +0000
Manifest next update: Fri 01 Sep 2023 05:00:14 +0000
Files and hashes: 1: 28rEj9yVQ8QHBBZa6FlJQx7DtuM.crl (hash: eu7PbZrfw5br32C6uXC26a9k47f7yvtEFjqhkC0yq6I=)
2: Tjx1f0G85qqdoQFdgBYngBwveKM.roa (hash: Cr+0sea0yDFQVWdlSg9oECeood0k+/iCNc3xBIgbEYo=)
3: ssuX57_YWSzTXZDU-bxhIWr8-_A.roa (hash: Xf1Lcw7Cz5hGMJIYEI2hdqOLrYNjZT3KCI5SVJMmmec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:49:f6:a0:b1:82:b9:62:29:d4:fb:38:7f:51:f0:1f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcac48fdc9543c40704165ae85949431ec3b6e3
Validity
Not Before: Aug 31 05:00:14 2023 GMT
Not After : Sep 1 05:00:14 2023 GMT
Subject: CN=28f3ce5848becc5af837b36008e0593d662a531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:2c:51:29:17:55:70:88:da:cd:a3:3b:8e:
20:d3:6e:bd:36:d0:e4:99:f0:59:6b:00:33:96:90:
69:81:e8:25:5a:36:d2:69:6e:f8:84:9e:1e:1a:19:
18:f7:49:dc:94:cf:1e:bb:39:4b:30:f9:7a:5a:65:
bf:07:a8:80:1f:14:65:22:e6:3f:f3:87:d4:df:18:
63:b7:3f:f6:bc:70:07:0e:12:df:39:b3:46:f0:a0:
28:46:fb:fb:b0:2b:29:52:65:c7:6d:df:79:5b:5c:
17:0b:1e:69:73:cb:8f:47:c9:9c:5c:74:d7:80:ee:
7d:d8:e4:72:aa:dd:a6:15:c3:f5:9e:b3:f4:fb:12:
1f:d3:36:3c:20:11:67:d3:b1:8d:3e:3a:b6:d4:1a:
a5:46:3f:c5:4e:4a:60:84:a8:4c:04:ac:78:ca:32:
77:2a:cb:37:bf:2f:ca:73:53:82:47:fa:11:81:17:
c3:f6:f1:39:3e:3d:ba:9d:ee:6b:85:02:26:49:39:
ca:42:4f:53:eb:27:17:4d:86:bf:e0:f2:e2:87:df:
8c:63:1f:33:52:ac:4a:05:e3:a4:65:6a:cb:b7:56:
05:66:6c:51:1d:68:c6:27:2c:ff:32:b5:c6:d7:ab:
59:60:6d:fc:c3:32:f9:91:1d:a4:58:3d:dc:29:d0:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F3:CE:58:48:BE:CC:5A:F8:37:B3:60:08:E0:59:3D:66:2A:53:1A
X509v3 Authority Key Identifier:
keyid:DB:CA:C4:8F:DC:95:43:C4:07:04:16:5A:E8:59:49:43:1E:C3:B6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rEj9yVQ8QHBBZa6FlJQx7DtuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/28rEj9yVQ8QHBBZa6FlJQx7DtuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f602f2-d4aa-4cbb-99f3-22a54d1fe069/1/28rEj9yVQ8QHBBZa6FlJQx7DtuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1a:f6:52:ff:61:a4:41:96:d5:43:63:89:67:5b:ea:35:15:
fa:4a:97:80:c7:0e:2f:1a:43:ad:0a:19:8a:e2:4c:31:c8:a1:
78:06:4b:27:f3:8d:05:d3:59:d3:2d:93:56:7c:57:91:7c:43:
6d:36:17:cf:c9:ec:8f:5e:4f:d3:25:7f:5c:aa:40:eb:ac:3a:
94:6b:a8:a7:1b:af:48:88:26:9b:c1:cd:03:22:8e:f9:8b:45:
95:fc:29:ee:af:3c:4a:51:9a:6b:a4:b8:0d:f5:6a:27:a2:8a:
ec:e9:5e:e7:5a:d2:fe:86:e5:77:14:9d:f7:9a:2d:d6:98:f7:
94:6e:aa:a6:b3:e1:a0:a9:e4:b1:3c:90:12:12:ac:21:fa:24:
86:a9:49:1f:ac:6b:74:2b:79:f7:db:01:3e:35:75:08:c1:a3:
78:6f:a5:b8:78:64:17:db:67:c7:11:b3:92:bb:10:16:d0:c8:
cb:dc:62:30:35:4e:d2:a7:d1:12:80:1b:7b:f4:75:f0:61:63:
6d:7a:2f:d1:1d:3f:62:39:05:8f:ae:32:54:2c:0c:70:1a:fe:
f6:35:93:9f:af:d6:fe:1b:99:cf:9b:72:a9:74:2c:7c:1b:b9:
31:af:08:6d:28:99:86:8c:7a:b0:e0:68:ae:7a:4e:aa:f8:97:
0b:bb:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:39 2025 by rpki-client