Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: RdVRgcXCyMNXBVBIO/xPyi76B/Ttl1jbYbFbFXdLWf8=
Subject key identifier: 0A:EE:4B:86:2F:7B:12:F1:8D:B9:F1:87:C1:1F:16:65:92:D8:DE:0A
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 0194BD8589C62407B9F19383EF9E7CCA5F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0734
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: qaLsFKISClfX/3g5mxmLpxMMxAO5KGUQHmxV2ofrueQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:c6:24:07:b9:f1:93:83:ef:9e:7c:ca:5f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=0aee4b862f7b12f18db9f187c11f166592d8de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:9a:38:1a:2b:ca:dd:95:9e:74:d7:0d:46:
b2:c5:92:d3:fe:81:d2:19:1e:47:83:30:61:cc:6b:
76:7f:60:5b:94:94:c2:64:dc:66:07:97:6e:a3:d5:
ea:41:54:c1:08:7e:98:ab:fd:3b:37:05:9e:d5:b3:
2e:9c:1f:f4:77:cb:bf:b7:cc:71:01:b3:ae:2d:56:
7c:be:94:64:34:38:4b:b9:24:d3:df:ac:36:35:ea:
1f:03:1c:b9:f4:db:0d:42:70:c2:9f:08:cf:fa:f9:
da:57:1d:8e:a3:10:aa:fa:4a:61:b1:73:14:0f:10:
5d:d8:ed:ad:a2:e0:b8:74:f0:a2:05:59:76:e1:de:
65:b3:e3:d5:1c:f9:18:c8:8c:c6:69:f1:94:c1:67:
33:69:1c:8d:e2:25:75:a6:0f:9a:70:c3:cb:04:71:
cc:c9:c4:39:f4:f1:0f:67:60:a6:b2:b8:ef:7a:73:
12:17:cd:87:94:eb:14:14:78:61:b2:88:49:fb:f9:
ba:ed:5c:17:d6:02:a1:ca:93:5b:95:95:e6:18:32:
67:65:0a:ae:44:b6:ba:a5:9f:1f:fe:5c:13:3b:b4:
d8:bd:2a:58:5b:a8:c3:fb:9c:9b:3e:2c:ef:f9:70:
55:aa:b1:44:e0:ce:2a:f0:bb:a1:cd:5c:82:e6:0d:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:4B:86:2F:7B:12:F1:8D:B9:F1:87:C1:1F:16:65:92:D8:DE:0A
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4d:14:d2:12:4c:08:81:69:9c:f3:72:a0:b2:8c:ca:f7:bf:
27:6b:fa:24:9f:27:ed:c0:70:4b:6d:fa:9d:7b:bf:c0:4a:61:
59:90:2f:4a:12:b3:4c:3e:d2:7f:02:91:c4:f1:65:2a:1b:62:
48:68:6f:3d:fe:a8:36:52:e4:af:82:63:ee:8b:dc:91:fb:4c:
12:0f:5c:d9:72:8f:04:d7:86:a5:66:52:dd:02:4d:fc:08:e0:
f5:ef:37:1f:c9:f4:bf:9e:3c:80:13:06:f2:c6:29:a5:61:8e:
1f:6b:89:38:23:c2:be:8a:60:98:36:5d:9c:7c:1c:1d:c8:a1:
53:83:57:22:8b:3f:f3:de:e6:b5:e8:43:7f:cb:ef:4e:2a:8e:
3b:ea:16:ad:9f:4b:61:c2:e8:5f:da:e7:c6:cc:e9:92:2a:ad:
dd:f7:c0:6d:e6:d8:66:46:37:28:19:9d:83:27:2e:08:dc:f8:
6f:80:38:b0:14:59:68:6b:21:41:88:dc:81:75:ad:c8:49:bd:
3f:ea:4c:84:78:4b:19:21:a0:8d:32:47:8d:dd:31:9c:31:62:
da:eb:47:0b:43:60:94:86:ee:e1:28:f2:1e:fa:49:99:14:55:
fa:26:2d:55:20:e8:a8:e0:b7:e8:5c:89:f0:71:f0:e7:02:a9:
69:a6:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:32 2025 by rpki-client