Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
File: dybr_w8tdL-iFgD_c_4maR_HMak.mft (raw, json)
Hash identifier: QItQRnSAEfqIyUwJB7/Ss1tI+PvIW1+FD567/Xznfyo=
Subject key identifier: 51:CA:72:3E:7A:F8:C8:44:B9:04:91:0B:CA:A6:72:CD:52:F8:F9:2D
Authority key identifier: 77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
Certificate issuer: /CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Certificate serial: 018D5C9AE99138419B430B382B00906F3233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
Manifest number: 08DA
Signing time: Tue 30 Jan 2024 23:01:12 +0000
Manifest this update: Tue 30 Jan 2024 23:01:12 +0000
Manifest next update: Wed 31 Jan 2024 23:01:12 +0000
Files and hashes: 1: W4Sz1s6M7qbBw59z7z3fvq3P2BI.roa (hash: 9d4ZZfi9W0qvKI3DkkPNtQkgyol4pF0O40/L2H+IXbI=)
2: dybr_w8tdL-iFgD_c_4maR_HMak.crl (hash: u7HXe7ehD3d6dgDj6aRGVAWB+0CJLpDo78qak7F6Wc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:9a:e9:91:38:41:9b:43:0b:38:2b:00:90:6f:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Validity
Not Before: Jan 30 23:01:12 2024 GMT
Not After : Jan 31 23:01:12 2024 GMT
Subject: CN=51ca723e7af8c844b904910bcaa672cd52f8f92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:50:8f:90:85:cf:98:21:f6:da:d1:0c:3c:
f3:4b:08:9e:59:de:aa:25:c3:e5:9b:a1:08:ff:52:
70:04:9e:a5:63:61:25:2f:22:06:69:56:be:1c:d2:
e0:b1:70:ea:65:19:13:10:a0:e7:1e:02:db:6f:54:
6a:a5:75:89:6e:18:bf:81:08:da:37:31:a4:35:ad:
22:ee:8e:41:48:df:67:f0:53:2d:ea:c7:97:87:4c:
98:61:f0:25:66:05:b5:71:1e:fb:50:69:16:28:47:
24:f4:5b:70:f7:12:58:08:09:e6:af:07:15:8c:5a:
56:55:d1:b7:38:a5:8f:a8:d5:9f:e6:ee:4a:ed:0a:
b3:f3:58:e3:bb:d8:ab:b9:19:3f:58:35:57:e1:92:
0d:fc:60:21:b6:af:1e:46:1f:6f:40:80:fb:0b:5b:
8a:3b:38:22:b6:e7:df:e3:3d:19:ac:ca:09:84:f1:
25:2b:c5:b1:de:09:39:e3:15:e4:a0:0c:31:b1:13:
f7:ab:3a:08:e5:7d:7b:bd:de:8b:9c:19:05:9d:ce:
3e:c3:e2:5c:fb:01:89:a2:ee:96:37:d7:07:23:98:
f1:24:7e:8f:7b:4f:a5:37:fe:8b:d8:5e:21:0e:5a:
94:26:0a:7d:57:c8:dd:fe:66:7a:cb:9f:5a:e4:48:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:72:3E:7A:F8:C8:44:B9:04:91:0B:CA:A6:72:CD:52:F8:F9:2D
X509v3 Authority Key Identifier:
keyid:77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:00:d9:c5:63:59:6b:00:ef:69:b8:3c:24:ae:e7:b7:f6:bf:
6c:6b:23:04:33:bc:b0:96:56:01:0b:c4:5b:7a:95:89:4d:ed:
f5:92:98:ca:d5:d3:59:94:eb:0b:c1:c3:e3:e5:9a:e6:67:81:
4a:e7:41:7c:d9:74:51:74:7c:d5:65:db:63:59:51:1f:ed:b9:
ad:4a:f3:01:bd:d7:8a:ce:a6:d4:1b:08:de:db:5c:c8:f6:c2:
e6:d0:68:b0:fa:88:e4:d4:d5:e6:4d:01:92:f2:c2:ad:41:e7:
7e:6c:9e:c0:11:99:06:4c:4f:0e:53:a0:4a:e2:b8:3a:3a:8b:
d0:c7:94:6d:ed:04:76:c8:a0:de:5c:53:b2:d3:e4:05:8d:f8:
66:47:67:0f:00:6f:33:62:66:d3:08:9e:a1:35:ac:31:75:94:
b4:d9:0a:12:f4:30:f1:a7:b6:81:6a:fd:6a:37:2c:90:2d:60:
d9:3e:de:8a:76:e4:23:8e:ee:4d:ac:eb:0a:52:e3:7c:ee:7c:
1f:cd:91:10:53:3c:77:f3:d3:4d:79:86:a4:aa:19:23:eb:63:
f5:7b:1a:b1:91:30:c5:4c:3d:53:b0:43:ea:8c:a4:93:5b:2a:
f3:fa:cb:62:83:34:15:56:bc:16:41:34:9b:46:03:df:66:a9:
84:22:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:20 2025 by rpki-client