Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier: GeI4nioSiG8qitEMcU1Ycs4HffBy87TMVtDxGtitnzc=
Subject key identifier: 05:60:7D:91:68:95:15:6D:2C:38:D3:22:CD:D7:59:48:C1:0D:AC:ED
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial: 0194BBCDE29CEDC52C504A542B12FCDC0DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number: 0F27
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 3Uvg-SGM_zlK_SKX6X83CL5pES4.roa (hash: txSz1BVeFo/z2vKlSjUFGN00mKoCcahrUY9+MYjGUZA=)
2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: Ok6NW9kj2rMWVpI8p8KDEYfx8k7uq7Slee55udHcpiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:9c:ed:c5:2c:50:4a:54:2b:12:fc:dc:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=05607d916895156d2c38d322cdd75948c10daced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:2f:ba:5e:d8:30:af:c4:76:f9:c5:61:d7:
c3:c3:06:27:83:91:bc:e7:a7:b2:97:3b:ad:75:c8:
4d:fe:d2:96:98:9e:0e:70:42:48:9b:d6:7a:84:42:
f6:54:e5:24:cd:10:b7:98:37:55:a0:d8:51:67:4d:
1a:cc:ec:50:66:37:17:4f:e6:27:cb:95:9f:6d:50:
dc:37:e6:39:8b:cc:ee:03:4d:b5:a0:0f:54:cb:66:
14:ae:94:2f:b1:67:63:22:96:3c:2b:65:b2:c0:d0:
eb:7a:d7:74:6c:e7:c0:97:c8:ee:aa:a5:7e:7a:73:
1f:90:df:9d:c5:d8:45:a3:02:4a:ba:65:83:a7:88:
b3:56:fe:0c:05:b3:af:d7:80:51:fa:c5:f1:c9:95:
64:a2:30:23:af:e8:c4:b4:b0:d6:d6:4b:34:91:f0:
bb:5c:eb:50:1a:9f:7f:ea:02:84:29:07:54:f7:60:
56:78:48:ce:8b:4b:6d:53:34:ee:7f:a1:ef:f3:cc:
79:6f:d7:35:f0:a1:52:cc:db:44:4c:c2:d3:9e:36:
0b:2b:62:09:43:df:a7:8a:e4:3a:8c:b0:12:f0:42:
d9:1a:da:1f:2e:3e:ee:d2:64:f2:e1:b6:e7:40:17:
51:ad:f3:3b:20:90:80:25:7a:7e:53:6f:f8:d8:06:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:7D:91:68:95:15:6D:2C:38:D3:22:CD:D7:59:48:C1:0D:AC:ED
X509v3 Authority Key Identifier:
keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f2:7d:24:16:e7:86:62:9a:80:f3:f6:7d:9e:22:bf:36:8e:
dc:c9:57:f4:b1:be:36:14:09:d3:52:fd:06:22:69:18:53:61:
78:67:f4:4c:48:ca:af:dc:97:b8:e7:de:d5:d9:87:5f:eb:8c:
44:e9:0f:fd:8b:15:d1:40:d2:af:1a:94:2f:eb:46:7d:07:32:
24:c3:1d:84:73:cf:35:b1:86:8d:73:b6:13:a1:e2:e1:22:4e:
88:e0:e9:1e:90:90:0a:df:35:e0:22:18:a9:46:8c:eb:1e:4b:
b1:8f:df:84:87:a8:a8:85:1d:c0:ae:9b:3d:c5:cc:79:26:b3:
b2:56:e5:24:aa:40:5a:fd:ba:b7:fc:71:33:d5:90:33:a9:c1:
0b:98:d8:2e:0c:d2:03:c7:1d:e0:67:9c:11:af:a5:ee:11:ee:
5a:89:ed:67:7e:9b:49:aa:a1:b2:59:9f:b2:91:dc:bf:64:5c:
5b:e7:f6:fc:47:2c:f8:6f:36:53:39:21:05:5f:17:90:e9:d1:
c6:4b:3a:87:6c:44:2e:12:74:3e:44:cb:9a:e7:bc:f5:40:bc:
1e:b7:66:c5:a6:14:ed:67:9b:a6:31:dc:52:dc:90:10:06:ac:
de:6d:b9:7f:dc:ba:2f:a8:d0:25:bf:ec:a9:41:6d:c4:f3:3a:
9c:db:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:26 2025 by rpki-client