Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File: SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier: pWJVm0ooXuU0U0ZvFCZ1es67txglGBPYuV7GCW1tTt8=
Subject key identifier: 2B:F0:37:03:3D:0B:62:2C:96:51:D9:6E:2C:79:C2:58:85:6D:A3:09
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer: /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial: 0194BBCEE339DB4ED8EA040329AB73DA3CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: T0ue5VxLrEka/lqD55JdclspkkVhg+zAEtgfwt9ioXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e3:39:db:4e:d8:ea:04:03:29:ab:73:da:3c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=2bf037033d0b622c9651d96e2c79c258856da309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:a3:0e:85:9b:1d:e7:9a:39:c3:26:b6:e2:
96:ff:96:80:67:21:a5:2a:27:d4:57:12:a1:51:d3:
b9:f8:bf:6f:b1:29:ff:89:66:ca:a3:b5:55:13:15:
3f:4e:3a:77:b4:d4:75:b5:55:a8:e0:70:1a:a0:e9:
8d:28:fb:0d:d6:88:74:19:31:7f:55:d0:0e:67:c1:
86:2f:fd:4c:ee:2a:14:d6:0e:42:78:2f:5c:aa:2f:
d1:f3:c8:fa:19:33:89:73:c5:81:1a:24:34:90:42:
38:d9:c8:d1:75:9b:8e:ba:19:ee:a7:cd:46:1b:cd:
f9:d1:e5:d5:2f:dc:07:72:1e:86:57:26:b2:35:21:
14:68:1f:cf:b5:65:a6:2f:2b:bd:0d:cc:fb:62:5d:
15:3d:8f:e7:1e:10:4e:4d:f7:7a:61:35:24:d6:49:
63:2c:f2:93:f1:5e:e6:74:ff:2b:4e:33:46:b5:1b:
6f:cf:5d:8b:ba:b3:58:7d:cf:11:94:7c:25:ed:57:
87:00:f1:f1:26:d8:56:03:9d:80:95:13:da:62:1c:
07:e6:d9:f5:9e:42:5c:05:6c:4f:b5:f8:97:54:4c:
85:26:67:8d:fa:4f:93:d2:81:88:fa:8d:5e:08:49:
db:2b:18:0d:21:2d:4f:cf:3f:35:65:24:ea:ba:e3:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:37:03:3D:0B:62:2C:96:51:D9:6E:2C:79:C2:58:85:6D:A3:09
X509v3 Authority Key Identifier:
keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:39:e5:94:98:86:b8:ce:5d:de:99:cd:db:89:a8:c7:87:67:
be:f7:ba:30:5d:35:ce:11:3d:43:48:94:61:1e:ed:4b:8c:bc:
69:14:cd:14:de:bc:c0:9e:b7:e9:fd:59:62:68:7a:0e:49:d8:
8f:58:6f:05:2a:ef:df:0b:4d:de:d0:cd:ec:2a:38:4f:4e:d0:
c9:bf:ca:f5:74:66:21:7a:55:55:69:10:44:9b:fc:fa:98:7b:
29:31:e6:9e:9d:bd:06:bf:bb:95:b9:72:e3:d6:8d:8d:0b:f7:
1f:0d:5e:7f:d0:8e:79:ef:9d:67:e1:8a:dd:20:24:3f:0c:a7:
5d:51:53:73:30:51:85:89:b3:72:92:96:0f:f8:b3:73:56:36:
02:f8:c5:27:07:a9:93:6f:a1:80:d2:37:3b:1e:69:1a:07:f0:
d2:00:25:c3:28:f6:92:db:0e:36:e4:f9:75:83:8d:5d:f5:2a:
c7:c0:62:f7:18:5c:ec:f3:5b:a0:38:74:6b:30:a9:9b:05:86:
b9:08:f1:7b:f9:19:e3:4e:83:48:78:4a:89:84:15:d5:59:23:
8d:fb:3b:38:18:92:55:82:45:14:55:74:1c:59:7e:3d:da:db:
63:b4:03:68:d3:57:85:e7:26:12:10:78:e8:b6:6e:71:99:85:
83:8c:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:33 2025 by rpki-client