Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: ulJu/WnObDNGKUARHbBPnH7mfZGC/hBSTPVz1oiRjYY=
Subject key identifier: 83:60:AB:47:21:37:58:34:31:57:98:B8:EB:F6:CA:9E:07:C2:96:62
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 0194BBCF044232C1A70408893F3D65C5EB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: TFBBxWLhXuoy4PpZhXWzk0Oxg7dYVHIitAGX0mi9wqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:04:42:32:c1:a7:04:08:89:3f:3d:65:c5:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=8360ab4721375834315798b8ebf6ca9e07c29662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:72:b0:b0:e2:fa:56:ef:b0:50:b3:37:16:
17:0c:e7:e2:e6:90:cd:10:0d:f5:5e:48:c3:ee:e3:
3c:b0:08:9a:24:42:78:3f:f4:83:72:c4:32:e7:f1:
cb:f9:ec:63:cf:50:35:b2:9f:e3:f4:3b:d8:78:46:
97:48:1a:cf:d6:12:d2:fb:74:cf:69:83:5d:42:e8:
75:4c:b4:bd:40:0d:a5:2b:eb:b5:fc:0c:d8:58:15:
c5:85:cd:2c:46:ab:c2:23:d8:02:d6:52:23:40:2d:
5e:5f:c0:86:81:bb:35:44:11:e3:05:6e:87:18:26:
f8:c1:e1:70:6e:66:b4:af:dd:92:6a:6f:84:c6:90:
2f:45:ca:e8:88:b9:53:db:0f:fe:80:3e:da:cf:a9:
6b:0d:49:56:e4:7c:54:01:2f:45:a9:f5:bc:aa:cf:
69:df:fc:50:cf:d5:2b:e0:ed:11:50:2d:9a:2b:03:
1d:14:9d:c0:86:2f:d7:9a:bc:93:ae:9d:3b:29:ad:
68:52:b8:ec:49:2e:9b:27:dc:1e:f4:88:9c:45:21:
a8:c3:a1:6e:34:50:dc:88:41:4d:c8:45:b1:bf:04:
bd:0f:e2:98:9e:3d:c3:9f:c7:8e:fb:ed:c2:e9:89:
a0:e8:39:3d:0e:d5:0f:d2:33:9a:e7:4f:38:1c:a8:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:AB:47:21:37:58:34:31:57:98:B8:EB:F6:CA:9E:07:C2:96:62
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b1:c7:0c:7c:f1:1e:b3:b7:65:27:28:fb:66:59:f8:62:7e:
72:76:99:a0:08:8d:c9:c5:ec:de:38:a8:0f:5f:05:6a:aa:4f:
dc:b5:e7:6f:1e:05:ee:d6:95:55:f3:81:be:29:23:6f:50:a3:
ac:df:83:83:7b:d3:cd:96:66:00:1a:12:c5:e3:6a:7b:7b:42:
c2:12:38:d8:5e:54:ab:87:7f:55:d6:4a:50:6e:a1:1c:4c:53:
3a:ad:45:72:40:90:8a:72:b2:3e:ff:49:e2:6c:c3:9e:8a:04:
fd:f9:d7:00:5f:72:d9:c8:28:25:06:72:11:90:fc:fc:7b:b5:
43:a0:f0:82:21:98:48:88:0c:86:11:4b:72:5f:4c:0c:8b:88:
ee:f6:cf:87:e3:32:f3:7b:a3:03:7f:ce:4c:84:8f:f6:49:83:
01:07:65:75:a9:1f:c6:3d:7e:51:84:00:84:f9:fe:b9:ac:d1:
57:40:e6:2c:41:a7:06:0a:bc:4c:b5:7d:b4:5f:83:22:ff:f2:
2e:94:5e:a3:d2:97:b6:c9:71:f1:70:e6:7f:28:5f:40:2c:27:
31:a2:21:d9:eb:7b:55:ae:1b:22:6b:d2:f7:ef:c5:e9:9e:21:
ee:ce:1a:cb:64:75:ed:f8:21:0c:92:b2:d6:a7:b2:a9:e2:d4:
1d:65:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:34 2025 by rpki-client