Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: GIV+3tory2CzoUIvmLBMHPOjT16I/5AVsPLggUMFaFc=
Subject key identifier: 6D:BE:A6:03:E1:61:5A:A5:31:D8:9E:24:A3:17:55:CD:74:BA:B2:6B
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 0194BC3C2A738EAA4AB9792B34ED8CCAE047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 0EE2
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: SrLg/RRmW8gNz8rXqCzuSYtEd70KpIGV9D8KC9X4qTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:73:8e:aa:4a:b9:79:2b:34:ed:8c:ca:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=6dbea603e1615aa531d89e24a31755cd74bab26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:48:db:1a:00:f3:eb:01:53:e8:39:38:f4:
7d:f5:1d:73:09:e8:a7:cd:2d:96:3e:b1:9c:a0:3a:
94:73:9d:12:b1:2e:43:2d:b9:2f:41:96:e1:05:57:
b9:a5:1e:66:2d:ac:f1:93:32:8a:44:30:2b:e8:8b:
ea:a4:b3:2c:bc:5d:44:49:6a:ee:ad:22:bf:9f:69:
08:bf:79:34:a2:e3:cc:35:2b:e5:e8:db:59:43:17:
42:3a:91:7e:c1:bd:ce:6d:ec:cd:62:ba:92:ce:ad:
6b:6e:56:d4:69:ab:85:c8:34:24:6f:c2:49:a6:e2:
dd:73:5a:8b:38:cf:e4:46:c2:47:c8:f6:e8:8a:10:
7d:88:4d:55:e4:96:ca:ac:4a:36:47:16:04:75:7e:
e1:01:b3:21:ee:20:2b:01:a8:50:37:5b:ac:ba:02:
55:6d:09:fb:f0:25:5c:6b:13:be:dd:cd:a1:91:bb:
d1:9a:f3:5e:33:c8:a9:ab:b2:52:f5:69:fe:45:3a:
90:35:cd:a2:5c:2c:57:6e:e6:61:0f:53:bc:55:69:
60:36:41:ac:ea:f0:f3:ac:f2:69:e9:58:5d:bc:6f:
c5:7f:d7:da:82:cf:56:c4:b2:ce:35:d3:a8:25:23:
af:18:bc:c4:54:7b:1f:cf:6e:7f:72:cd:a3:a7:f0:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BE:A6:03:E1:61:5A:A5:31:D8:9E:24:A3:17:55:CD:74:BA:B2:6B
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:92:f9:59:df:28:dc:0f:60:8e:01:11:73:75:a1:00:a7:ad:
eb:15:4e:6d:e2:cf:2e:04:72:3e:11:0e:07:4a:0a:cc:a3:c3:
4d:c3:5b:3c:44:98:cf:2a:50:97:ec:a3:ef:c4:5d:02:65:41:
cf:b4:4b:c4:72:ef:3e:ee:68:4c:2b:e9:65:a5:a6:39:7d:58:
4e:31:de:10:70:6e:23:1d:8a:49:89:2e:48:d1:01:cc:43:e2:
33:38:6c:6a:b0:b0:6d:6e:25:61:05:1a:bc:d6:5d:9b:90:44:
3e:25:5f:00:9d:2c:ac:0c:7b:b8:9e:f0:23:3d:8d:63:34:e8:
4c:63:c0:e8:e6:49:c2:1d:e2:6b:f8:3f:9d:b1:8f:00:49:ae:
cf:dc:dd:3d:88:c5:8f:81:b3:25:c9:70:95:be:e1:aa:cb:ee:
10:b1:21:29:e3:31:b7:3c:75:23:b5:54:4c:de:a9:79:0a:fc:
a9:43:ec:5c:56:1a:a5:e8:80:36:cf:19:93:98:ae:3c:bd:70:
53:c2:e1:22:46:c4:05:23:c4:aa:39:b6:b9:26:a1:90:15:c6:
91:6f:53:c5:00:53:56:22:ed:70:16:17:8e:99:ff:b0:6e:15:
8b:d8:6d:08:c8:ff:c6:e2:18:d2:4b:16:24:e7:fd:38:b7:ef:
6a:84:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:39 2025 by rpki-client