Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: eWucebXgVIkByjLAlUl7ODXwnHwm80rK6tmJBokFx8s=
Subject key identifier: AE:DF:F0:7C:FE:98:E4:44:BE:F4:F0:9B:96:D6:85:A0:64:99:A5:35
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 0195E158E5CAD0250891030BB144E7278AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 07E9
Signing time: Sat 29 Mar 2025 10:00:54 +0000
Manifest this update: Sat 29 Mar 2025 10:00:54 +0000
Manifest next update: Sun 30 Mar 2025 10:00:54 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: fS+YsGNFgEyvwipEe+UlR+pNIqjEdelgeVSsJ0G0pzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:e5:ca:d0:25:08:91:03:0b:b1:44:e7:27:8a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Mar 29 10:00:54 2025 GMT
Not After : Mar 30 10:00:54 2025 GMT
Subject: CN=aedff07cfe98e444bef4f09b96d685a06499a535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:28:2e:27:f1:84:96:54:b3:e4:50:6e:b6:
db:06:a5:52:df:bb:1b:d1:91:1e:30:9e:b0:88:59:
95:ab:c4:77:6f:7b:3d:4d:0a:5f:2e:3d:de:88:4a:
e6:65:27:33:3d:1b:5f:94:50:b9:bf:6d:46:fe:5a:
37:83:36:7c:55:0f:a2:b7:58:6e:a0:3c:08:f7:35:
fe:37:33:e1:ec:6d:3f:fe:67:0b:ca:06:4d:a2:70:
a4:e1:47:de:e6:d1:32:b7:e5:40:56:27:ec:9c:6e:
7b:fd:74:c1:2b:29:ea:94:de:6b:b6:85:31:fb:2f:
e4:5f:6d:79:5a:ef:86:7d:52:8f:dc:42:ef:81:14:
7e:9b:9a:82:9d:0b:62:44:ec:c2:f7:51:e4:7e:10:
8b:68:76:5a:62:71:75:b6:d9:f9:ed:73:5e:97:70:
94:39:31:af:2b:02:f9:cd:d7:6f:7a:9d:61:07:da:
88:9a:a0:6f:72:c4:d6:30:b3:b8:15:0a:7d:ce:f6:
5e:71:b3:69:81:3c:a5:56:ef:b7:20:74:a5:9f:ed:
94:29:a3:5c:71:af:de:39:f2:cc:c5:8d:47:2e:6c:
07:c7:ee:f9:ee:47:cc:a4:9e:a5:e0:97:cf:7e:a2:
56:8e:78:ee:e0:1b:4a:7a:54:df:b4:96:80:dc:31:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DF:F0:7C:FE:98:E4:44:BE:F4:F0:9B:96:D6:85:A0:64:99:A5:35
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8a:40:7f:f7:c5:c8:b6:5d:d8:d9:77:30:ed:53:bd:b0:3c:
b9:80:16:ca:a4:8c:2e:49:fd:7a:f7:a3:8f:38:bc:c1:b7:93:
16:8d:13:74:24:3d:c4:f4:8a:71:6f:02:68:f5:1f:60:fd:3b:
43:73:44:b9:20:25:8e:c1:5b:27:78:c9:2f:fb:fd:7a:f2:e0:
1c:1f:db:69:b6:b6:ab:b8:24:a4:b4:11:17:4f:f2:c2:59:c8:
4e:c5:3f:22:f2:ca:8c:11:e6:36:36:58:e8:58:b5:bf:28:7c:
d7:92:69:1d:13:d7:4c:d5:d1:80:eb:20:03:d7:bc:62:3f:11:
61:d7:04:41:94:0e:eb:ea:14:23:4d:5f:e0:1d:49:7e:2e:38:
c6:4c:93:b6:76:f4:b5:11:29:30:45:3f:e7:52:80:11:41:6b:
ff:1a:db:c7:f4:67:37:43:de:3d:a1:8c:44:da:99:ac:59:93:
70:2a:55:d3:5e:5f:50:16:49:27:8f:09:9e:5b:e5:85:80:38:
b7:48:46:81:a2:59:05:84:be:65:c3:68:db:80:ff:d8:e8:78:
4b:cb:5f:65:ed:c7:70:06:43:88:4d:0d:f6:66:17:0a:90:fc:
03:e0:e6:13:c2:31:d8:3e:e9:7d:33:a0:7a:e9:4b:57:16:a2:
db:30:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:52 2025 by rpki-client