Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: UOWYyjfSohGO28SIm/1o4rjxxJz4R7x9qK8K5G3x4kU=
Subject key identifier: 32:F0:04:97:BA:8E:A6:EB:E5:D4:70:BD:95:70:0D:3E:2E:49:27:0F
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 0194BBCE170147D381BE75E974E5D2DC25A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0751
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: 4qtgBK0OfdUnxhfk3zBrJaOEP07WYJk7oHASzBrPByg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:17:01:47:d3:81:be:75:e9:74:e5:d2:dc:25:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=32f00497ba8ea6ebe5d470bd95700d3e2e49270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:6a:12:46:46:63:db:6b:9e:2c:72:6c:95:
7d:b1:0b:81:c8:08:85:20:c2:fb:8b:3d:6d:11:33:
ff:48:65:89:cb:19:e3:5b:f8:39:51:5f:c4:95:99:
27:86:82:cd:30:b8:ee:80:c0:59:14:70:93:cb:cc:
37:45:9a:cb:bb:58:44:35:a1:14:2a:1c:58:0d:a9:
0d:8f:62:73:fa:88:83:b5:57:e8:f8:cc:75:10:84:
bb:e4:df:10:79:06:31:cb:22:11:ff:54:96:7e:4d:
c8:2d:c0:b5:16:cb:52:ec:a0:37:a6:f6:f6:53:a6:
34:71:cc:65:9b:e2:55:3a:be:1c:9b:7a:7b:97:8a:
26:62:21:7b:4a:cb:ac:c1:6c:14:3c:95:97:f7:3c:
24:62:8a:0d:8a:4d:b3:7b:0b:ed:85:bb:23:a1:67:
ce:28:c2:c8:40:8f:f4:5e:23:ec:44:42:c3:2e:40:
e8:0f:31:e4:eb:45:a6:bf:e6:66:53:62:46:2f:d6:
0a:4b:2f:cb:f0:11:d1:ac:3d:e9:8a:59:e5:51:bb:
e1:11:ff:2b:30:a0:15:8f:47:71:54:7c:4e:bc:ca:
0f:08:7d:23:52:e9:58:fd:8d:5c:ae:d4:f0:ab:f5:
7f:74:0a:3e:a4:20:26:32:e8:87:75:22:68:0e:0e:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:04:97:BA:8E:A6:EB:E5:D4:70:BD:95:70:0D:3E:2E:49:27:0F
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:14:44:9b:af:7a:c9:1a:b0:0f:89:af:91:02:9f:90:a1:e8:
d3:21:52:06:53:51:55:e3:02:e4:0c:24:9d:1e:7e:28:a1:53:
76:5f:3d:c2:79:ab:7a:fa:27:7b:4f:19:8f:bf:ac:80:94:52:
91:5f:a6:53:ba:3b:51:ab:d6:07:ef:5a:e7:4e:7e:51:b6:90:
57:8d:de:83:98:40:71:57:ff:32:7d:6c:57:dc:5c:e1:d8:54:
04:1a:42:2c:79:8f:89:8d:39:d6:de:26:9a:82:eb:74:6f:91:
e3:42:81:20:00:43:af:68:7e:08:0f:6e:0c:fc:5e:b0:3a:7a:
92:80:f5:f9:f7:52:6c:dc:cc:d5:34:89:f7:16:bd:d7:fc:b7:
75:f1:a2:d4:b1:e2:41:48:18:0a:23:aa:fb:d8:1d:ef:80:07:
80:a0:04:35:31:bf:ed:7c:a8:6b:b2:87:58:3c:03:46:25:28:
a7:77:a8:3c:4b:75:2a:49:55:90:12:f9:cb:dc:a6:bd:e6:0e:
65:fd:aa:ac:46:69:1a:6d:03:05:24:51:f1:fe:b5:31:e9:78:
30:94:f3:50:3d:ea:0f:06:62:f3:ef:61:5b:b8:60:fd:73:79:
7f:81:b4:5f:55:b1:60:9e:a5:b7:40:aa:3b:98:b0:90:07:11:
dd:c4:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:48 2025 by rpki-client