Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: x27uj1EASJuiNk1jdUqKk540zJEd3tzmAVECr7GFnOM=
Subject key identifier: 1A:95:5C:A5:D4:82:62:0D:3C:CA:06:63:6B:09:D6:F9:88:C3:30:99
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 0194BC3C0B530518268B489C0B098F809A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
2: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
3: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: IkpzE2S7hRwqhv0fz42B3+lpkYs1xyWHBuspv4BEHHc=)
4: xmNy2VtWjZ8YxNFvNh3dVLe3W4M.roa (hash: XDaXMB++0g7/KlAeb9NGEoUOtLNe6wH/V5tDFx0OtBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:53:05:18:26:8b:48:9c:0b:09:8f:80:9a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=1a955ca5d482620d3cca06636b09d6f988c33099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:be:ae:31:20:19:6a:df:72:51:73:dd:1b:
58:86:9d:c8:61:db:68:49:43:cb:aa:29:47:d5:12:
1f:b2:f1:37:71:e2:ee:97:f9:e0:a9:ed:c6:d6:95:
c8:c3:95:4f:83:67:ea:31:60:68:a2:f6:64:04:a3:
d3:1b:52:75:c7:62:68:5e:ab:c8:59:96:dd:65:82:
57:cf:11:23:94:d9:73:38:30:37:b4:18:f7:57:7b:
02:1c:97:30:1e:cf:df:7b:c0:3a:b4:2a:87:4a:9a:
e9:2f:5e:52:95:d7:fd:04:cc:90:4e:1b:20:25:74:
ea:36:91:45:52:54:8f:ec:13:fe:ed:0d:f3:91:f6:
55:6c:c5:a6:88:34:d1:bc:ef:ce:c0:0c:ff:99:c1:
1f:fd:14:fd:4e:36:c1:2f:5d:ca:cb:96:55:86:c9:
64:df:62:32:5a:a5:cf:e0:48:71:5b:dc:17:11:38:
8e:b6:ca:5d:93:ac:b6:92:90:e8:0e:e2:f4:7f:b4:
32:23:ab:b2:53:37:ff:1e:ff:24:5b:70:20:5d:ff:
1b:ee:e2:a2:3a:ab:58:8e:18:1e:59:e8:2d:56:01:
02:28:19:51:d3:d5:25:bc:ff:c6:c8:38:19:bd:d1:
cb:aa:66:55:7f:6f:00:a9:b3:9a:ba:17:a5:6a:54:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:5C:A5:D4:82:62:0D:3C:CA:06:63:6B:09:D6:F9:88:C3:30:99
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e2:8c:66:82:21:08:c1:25:48:a3:d1:4b:75:b3:49:4a:53:
15:2b:c5:8a:65:c1:08:b4:26:65:5e:37:f9:37:6f:72:44:ef:
4e:2f:0a:c8:36:e9:7b:59:b1:de:f3:42:da:81:6c:56:2d:54:
60:fe:8a:cd:ab:c5:68:46:c3:a0:71:b2:43:ad:0e:e2:76:92:
e8:19:1b:8a:87:a7:80:3b:ec:fb:9e:35:8c:9c:23:08:76:68:
50:6b:3f:2e:8a:ea:98:8b:33:fa:fd:2d:7e:c6:67:0a:dd:f1:
b5:e4:e0:03:c7:dc:e7:b1:5b:aa:e2:af:69:3e:e6:ca:fa:45:
da:d8:0c:9c:9f:00:82:98:5f:9d:09:3f:06:7f:6d:85:0b:4c:
83:46:0d:46:5b:2f:34:e7:4c:7b:eb:67:11:93:14:69:fc:af:
a9:7c:22:71:38:0e:e6:c5:1a:b7:2b:0f:43:00:34:48:72:8d:
a6:0e:8b:54:8a:6d:a7:7b:5a:58:5c:0d:86:9c:dd:2e:02:a5:
98:df:17:85:de:77:dc:98:8e:ce:1d:54:3c:e9:e0:0e:ae:b7:
6c:21:25:4e:d9:01:c4:ed:82:7b:6d:c3:38:11:5e:53:f0:c3:
e6:6c:88:a3:10:76:dd:4b:8b:61:6b:97:f9:79:b3:19:9c:cf:
2e:21:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:20 2025 by rpki-client