Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier: bXEvjP9YaQc21G71XOD8ZObibywpU+vX6pN28a0z3FY=
Subject key identifier: 25:C1:15:E0:A7:33:53:CB:0E:2B:3C:8C:1C:28:8C:85:70:AD:95:74
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 0194BD17F171136C04661360AF5368E0DE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number: 1087
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: bLdeAvvCBuMWdw9lkSaNnwlU2ckgq5tHrueH2pjgGM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:71:13:6c:04:66:13:60:af:53:68:e0:de:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=25c115e0a73353cb0e2b3c8c1c288c8570ad9574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:04:d5:15:e6:ac:08:81:d9:e5:84:0a:80:
bd:28:24:0f:eb:a0:bd:d2:7b:67:30:05:d3:29:5b:
7e:10:b7:3b:12:89:de:27:32:97:cb:ce:37:3c:54:
8d:b2:13:54:ce:67:8c:3d:11:77:6f:df:5c:6e:05:
46:19:f7:65:7c:55:2b:33:fb:7d:85:97:22:32:c7:
a3:07:da:5a:e8:74:bf:5d:9a:3a:59:50:1c:a3:5f:
43:77:aa:08:d7:44:00:3c:28:b5:a7:8f:8a:4b:d6:
c5:31:75:61:f9:75:8d:ad:ab:b8:20:40:ee:8e:b5:
14:29:7c:5a:33:fa:99:f1:4f:01:0e:68:1d:29:45:
fb:43:15:8e:52:b8:a2:84:bc:0b:1f:b8:af:d2:53:
26:73:43:57:c5:78:04:d4:25:21:19:0d:98:4f:e6:
2b:ff:5f:b2:e9:15:37:2d:8c:80:1d:48:de:44:e4:
dc:70:34:01:51:28:94:47:6f:a0:21:eb:d9:2f:d5:
4f:37:00:db:7f:5f:b5:7c:9b:a4:98:ef:42:cc:e0:
51:40:ff:65:a3:08:06:6c:c0:81:26:30:0d:8e:d9:
5e:3c:e7:ff:a8:e7:13:bf:1b:d7:34:0a:89:c3:72:
1a:09:b9:21:91:ef:1a:3f:6d:1e:fe:dc:d9:d0:25:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:15:E0:A7:33:53:CB:0E:2B:3C:8C:1C:28:8C:85:70:AD:95:74
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:72:89:5f:bb:05:d6:d4:1b:4c:40:2b:de:59:cb:73:40:35:
a8:5d:15:f0:8d:4d:71:30:1b:59:60:6e:5c:4c:e7:8c:25:5c:
47:c1:0c:14:f8:de:58:06:28:f7:7b:86:51:db:c1:69:e2:32:
d2:a0:af:87:e0:f8:01:28:e2:53:48:b1:b7:92:0a:06:9c:fc:
0f:91:fd:a1:89:94:44:bf:54:cc:d3:4a:29:04:ec:d0:aa:a6:
41:a4:b1:7a:b6:98:ab:0d:fb:ce:a2:13:05:7f:d6:91:6b:bd:
a1:0a:5f:bd:ee:f3:84:5b:70:9d:f8:05:84:d5:71:44:db:e9:
88:9e:85:96:6e:ce:c5:82:96:cd:0b:13:45:12:a2:1b:21:cf:
13:7f:05:71:dc:e5:2d:c4:bb:c1:7f:f6:c3:9a:48:e0:d1:e1:
6f:a7:21:ab:7e:b9:7a:86:9f:a9:3f:f9:18:44:fe:7c:68:4b:
97:7b:a3:f4:da:93:3b:1d:e5:07:52:4d:0a:da:84:69:cc:4d:
b1:5c:78:89:82:11:f9:eb:d7:67:e8:62:5e:d1:5f:ff:47:79:
e1:8a:61:12:2a:e9:6d:bc:46:ec:9e:04:18:8f:00:6e:43:ee:
c7:16:de:e2:88:a7:83:22:a4:33:82:02:68:11:bc:15:ae:98:
5b:d5:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:07 2025 by rpki-client