Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File: dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier: vOuOyqmxpvlqBrdUMrGWaNuocdIN8YmP78VxE9WhJAU=
Subject key identifier: 76:EF:7F:D6:66:6D:91:9E:BB:C7:D6:67:50:B3:EF:3C:50:94:76:9B
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial: 0194BBCDAFCDDA2B614070152F647CAAC1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: oI0xEhH6KSepfLnxJqhpNCsITG/qvhdSbWYvRnNfmHQ=)
2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:cd:da:2b:61:40:70:15:2f:64:7c:aa:c1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=76ef7fd6666d919ebbc7d66750b3ef3c5094769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:09:dc:b9:3c:64:e9:a0:9c:15:fb:1c:02:
c3:c8:59:85:c2:b4:76:ef:e4:39:d6:2f:38:27:03:
90:f7:08:3e:d9:22:b5:be:82:66:09:0e:92:ab:e6:
c7:95:14:54:6a:cc:9d:fc:93:13:ec:4c:45:95:cd:
86:af:b0:be:d3:7b:8f:8a:68:9d:54:71:ed:75:54:
f0:a4:d9:22:a5:91:22:b3:06:25:eb:2e:be:96:37:
da:c2:11:e2:65:32:85:aa:4c:21:ec:13:25:e5:ef:
c3:97:1b:39:95:29:81:7f:ad:cb:9d:bf:f8:e3:91:
24:28:8b:29:91:97:36:77:bf:dc:e8:ac:bc:eb:07:
2b:f3:5c:94:d3:7b:93:02:9c:33:9c:be:cb:b3:e6:
8c:29:d8:0c:73:c7:44:96:36:40:98:f4:f9:62:bf:
5f:08:8b:78:51:fa:c2:ac:94:14:d2:09:33:bc:7d:
24:01:7e:c5:11:68:0a:2b:ff:b6:39:bf:a7:19:6f:
4a:21:8d:4b:76:b3:86:11:37:03:44:20:03:91:8c:
d2:b4:d7:fa:67:28:84:6f:8e:e2:8e:95:d0:b7:d1:
77:37:2c:d8:c7:3c:f1:59:20:d3:49:03:5a:30:db:
2e:d2:72:6c:32:af:eb:2a:86:4c:7a:bc:bf:c7:2b:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:7F:D6:66:6D:91:9E:BB:C7:D6:67:50:B3:EF:3C:50:94:76:9B
X509v3 Authority Key Identifier:
keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2d:05:83:9e:d1:04:d2:b7:b7:a3:0d:15:35:f6:9e:a4:c1:
98:6f:df:ae:cd:aa:0d:57:cc:de:f0:ca:df:11:c4:b0:3c:ca:
48:3a:42:b2:fc:45:e7:ce:83:77:f8:01:a0:cf:38:79:1a:cf:
02:89:a3:8f:80:91:45:bf:a8:70:6b:fc:f8:85:a1:36:25:b7:
e7:a5:e5:bb:ea:1c:58:a1:8e:52:4c:57:0a:be:23:ff:e9:61:
3f:a4:77:be:4e:3a:16:39:ae:91:4f:4d:59:29:71:9d:45:50:
bb:d4:ed:7d:d4:22:19:71:78:3c:08:a3:dd:87:ad:e7:8b:1b:
7f:42:7f:bb:b7:e1:66:da:cf:73:2a:8c:67:6a:5a:90:a1:74:
44:15:ec:80:b6:d3:97:31:22:65:81:f3:cd:35:ab:2e:d3:ef:
e8:aa:cf:00:24:fa:15:f8:92:f9:f5:c8:da:ef:c5:08:de:1c:
42:5c:16:4f:f0:3c:06:b7:43:3b:e0:a9:91:1c:d1:42:df:c5:
62:fb:cc:cf:b0:3b:d0:9f:1a:7f:25:8b:a2:70:96:ff:6a:7f:
04:bd:02:43:4c:e2:54:82:fb:be:ba:63:a8:7b:fd:ce:19:7c:
3a:63:41:ed:93:ff:29:cf:a8:6e:6e:9a:b9:df:a0:d6:ca:c6:
cf:c7:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:29 2025 by rpki-client