Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
File: V-cs5_jElCNaCEgjlluQRwS8gkA.mft (raw, json)
Hash identifier: avmYI68CR38IMW75ow/jHFprzjVmKp11LhTuWvFqTfQ=
Subject key identifier: 9A:85:94:A1:E9:8C:E4:51:10:66:A6:2C:95:C3:64:A4:AA:1D:95:B5
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Certificate issuer: /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial: 0194BC04E29C5FC5CA33018F95DA5B8399B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
Manifest number: 8D
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: V-cs5_jElCNaCEgjlluQRwS8gkA.crl (hash: fwOv3e3yglc60k96ZUuVPTXhmDjR6/H4FvAMhekDGeI=)
2: nosSlJwBAj_YBNjkT9avrBuc-tE.roa (hash: TuuhoWGeRJQwFAhBMUAaCZIEFTM7M38j/+BjxywcK08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e2:9c:5f:c5:ca:33:01:8f:95:da:5b:83:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=9a8594a1e98ce4511066a62c95c364a4aa1d95b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:dd:fd:29:d3:98:8c:0b:36:42:28:9b:9b:
43:09:14:ef:ee:12:a1:19:ba:e7:f2:95:af:62:58:
82:b7:80:ba:44:f6:7b:37:83:2b:33:3d:31:4a:54:
33:b0:9b:41:c7:52:47:4f:1b:c6:a6:9c:06:ba:7a:
39:12:e9:0e:61:5e:4f:dc:95:9a:70:47:3a:a8:b1:
69:d7:08:6e:de:94:9a:f8:b5:02:8e:0a:37:8e:b3:
75:73:21:cd:eb:8d:68:55:0a:4a:df:53:ca:b4:ed:
77:71:f1:4f:2c:e8:0c:75:be:54:4c:d9:6f:1b:c6:
aa:7c:ab:15:d6:c4:a4:10:0b:ef:90:65:a0:a7:63:
a5:83:36:25:f3:e4:1b:a8:0b:fc:12:ff:33:0d:a1:
99:57:81:96:f0:11:33:0a:35:9c:5d:01:f5:86:9e:
b6:73:4f:c3:70:a4:17:aa:a4:96:64:8d:da:16:88:
fd:be:3c:76:e5:a7:d2:f8:75:01:37:30:ab:d5:7f:
d7:0b:16:f1:4a:0b:e3:7b:00:3f:8c:5d:21:a2:ac:
f9:3c:ae:06:3e:f6:ef:f5:1f:fe:8b:92:1e:22:60:
44:af:16:13:a9:69:fc:ef:88:4c:85:9f:e8:73:19:
b0:5d:5c:ba:8e:dc:74:19:dc:3f:6e:20:17:72:32:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:94:A1:E9:8C:E4:51:10:66:A6:2C:95:C3:64:A4:AA:1D:95:B5
X509v3 Authority Key Identifier:
keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:01:ef:75:c7:e7:ec:9f:3b:e1:c3:ec:a2:1c:c3:64:d6:64:
38:c9:8d:37:6a:9b:5c:bb:a9:f6:a7:f9:27:61:01:2d:49:e7:
58:bb:aa:e4:55:08:d7:79:45:71:d5:ae:37:d2:bf:62:c1:41:
c0:07:36:44:02:44:de:f0:27:7a:ae:0a:83:06:42:75:49:95:
26:71:5e:d4:73:b6:2d:1a:da:87:a8:a3:ed:27:59:99:5f:80:
ed:15:b9:82:23:cf:e6:8e:5f:4c:ce:5e:d9:b8:84:6b:a1:ef:
3f:31:5d:11:45:60:25:43:a1:d6:44:bd:e9:ae:65:24:96:17:
b7:d7:f8:3f:82:d1:13:a0:17:0a:6f:ad:7b:1a:50:46:1d:a1:
93:e0:3d:8e:dc:f7:c2:48:83:25:90:88:0d:78:e8:60:33:cf:
8d:ed:05:5c:37:b3:a7:fe:57:8a:e2:b9:8f:60:c0:ec:74:4d:
f0:96:b8:8b:8e:ef:4a:1f:4a:33:f4:77:cf:72:a7:24:03:d9:
9c:a3:ec:64:da:dd:50:e3:5d:5b:84:ea:aa:ec:fb:22:d1:00:
26:d6:a5:b9:e6:10:d5:35:d4:98:e5:68:0f:f2:7d:94:af:c8:
93:bc:a1:3d:e1:3b:d6:b4:ed:26:1b:39:9e:09:b6:0e:31:33:
89:7c:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:10 2025 by rpki-client