Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier: NkSmlD0mvz1o/uBP1slJDaKAp30bO2IkLa9JGOK7k5E=
Subject key identifier: 94:9C:61:5F:BF:D6:66:BD:52:56:01:3F:E3:DC:6F:A2:9F:85:05:C7
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial: 0194BBCE1178D4DBE488A4D0228BD01BB724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number: 0C1D
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: rUEgmPiCL2TcVZmN+zc5rXaPd50fxPrC+PLeqaVcubM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:11:78:d4:db:e4:88:a4:d0:22:8b:d0:1b:b7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=949c615fbfd666bd5256013fe3dc6fa29f8505c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:d7:1b:9b:b1:e2:ef:06:40:4b:a8:7e:c5:
15:97:95:c5:09:65:f5:31:21:ff:dc:95:ff:45:09:
e8:4f:34:54:65:56:4d:c2:34:d8:62:5e:05:bb:26:
d6:86:1d:0b:67:19:88:52:68:32:96:36:66:45:4f:
3c:ca:0b:d4:3a:75:f1:c2:9a:97:2b:9e:7a:91:b7:
45:be:f2:4a:4b:7a:5a:6f:ca:77:d4:c2:1d:aa:b9:
50:06:c5:a0:5d:6b:d6:b7:9f:05:cc:96:5b:a2:a8:
36:2d:93:50:8d:5a:a5:60:1a:18:ab:61:fa:83:a6:
9f:e6:96:c6:93:b1:fc:b0:6f:10:18:c9:d7:40:c5:
d1:e5:92:7e:43:18:30:42:ce:bd:43:73:c0:83:d4:
a1:14:14:e4:37:02:40:90:ef:68:88:1d:23:4d:25:
a7:6c:5b:05:0a:0e:a8:9f:19:c7:d4:42:2b:3b:5a:
03:2f:c6:cb:e8:07:b6:6b:8b:2c:28:94:7b:b3:7d:
b8:40:9d:0d:c7:5c:ff:1b:cb:3a:50:23:bf:ee:32:
1b:f8:71:d0:8c:4a:e9:ed:f6:70:4b:ca:87:ff:8c:
6b:0c:62:ab:e1:0b:82:f0:b9:83:88:2e:28:db:7d:
a7:cd:82:05:1b:93:c0:b8:0a:21:f0:3b:7c:15:65:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9C:61:5F:BF:D6:66:BD:52:56:01:3F:E3:DC:6F:A2:9F:85:05:C7
X509v3 Authority Key Identifier:
keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e8:bd:97:35:17:67:4a:be:17:55:2a:ce:46:dd:c9:04:78:
6b:ef:70:7a:17:23:9e:b5:30:2a:4b:59:41:da:11:7f:4f:bf:
ee:03:46:fd:73:57:6d:e9:60:82:65:6a:61:6f:36:ad:7b:6e:
eb:86:ac:96:f5:ec:a5:93:d3:eb:c6:33:73:c6:54:2a:59:63:
5d:b4:63:d1:9f:76:c0:2f:96:17:c9:8d:10:3f:54:c3:bf:5b:
a3:9f:a0:21:72:ae:60:1c:5b:0f:15:54:1e:2f:4b:3b:41:b1:
b6:dc:4d:c9:ce:dc:3a:c6:7a:73:f9:a6:22:46:4e:7b:eb:3f:
60:6b:5c:53:d8:14:02:fe:76:e1:11:a8:5e:47:d0:7e:3a:59:
e2:ad:6f:33:8b:48:19:84:23:1e:70:df:d7:e1:f9:9c:e5:ac:
e7:0e:ff:27:c9:6e:9d:cd:48:19:85:07:e0:2c:b7:76:22:20:
5d:0f:47:0e:08:b6:6d:5c:50:88:b1:66:47:4a:1e:6f:ee:60:
88:57:9e:74:09:17:ac:e9:24:b4:97:1a:e8:93:9b:69:71:fe:
fc:78:38:cf:d2:48:eb:9e:36:c6:4c:9a:e7:7f:3c:14:be:da:
48:b0:b2:7d:43:ca:24:60:e7:8a:f2:8b:9b:51:d7:a3:a6:19:
48:9b:dd:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhF41NvkiKTQIovQG7ckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjBmMzhjZjM2ZmNjOWJjNTEzMjkzNTEyYjQ2YjkxMWVk
ZjVhYzUwHhcNMjUwMTMxMTAwMDMxWhcNMjUwMjAxMTAwMDMxWjAzMTEwLwYDVQQD
Eyg5NDljNjE1ZmJmZDY2NmJkNTI1NjAxM2ZlM2RjNmZhMjlmODUwNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjHXG5ux4u8GQEuofsUVl5XFCWX1
MSH/3JX/RQnoTzRUZVZNwjTYYl4FuybWhh0LZxmIUmgyljZmRU88ygvUOnXxwpqX
K556kbdFvvJKS3pab8p31MIdqrlQBsWgXWvWt58FzJZboqg2LZNQjVqlYBoYq2H6
g6af5pbGk7H8sG8QGMnXQMXR5ZJ+QxgwQs69Q3PAg9ShFBTkNwJAkO9oiB0jTSWn
bFsFCg6onxnH1EIrO1oDL8bL6Ae2a4ssKJR7s324QJ0Nx1z/G8s6UCO/7jIb+HHQ
jErp7fZwS8qH/4xrDGKr4QuC8LmDiC4o232nzYIFG5PAuAoh8Dt8FWVMdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJScYV+/1ma9UlYBP+Pcb6KfhQXHMB8GA1UdIwQY
MBaAFEpg84zzb8ybxRMpNRK0a5Ee31rFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2It
ZWEyOWMxYTI4YzVkLzEvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wZWY2MjItOWMyNy00NjczLTliM2ItZWEyOWMxYTI4YzVk
LzEvU21EempQTnZ6SnZGRXlrMUVyUnJrUjdmV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOei9lzUX
Z0q+F1UqzkbdyQR4a+9wehcjnrUwKktZQdoRf0+/7gNG/XNXbelggmVqYW82rXtu
64aslvXspZPT68Yzc8ZUKlljXbRj0Z92wC+WF8mNED9Uw79bo5+gIXKuYBxbDxVU
Hi9LO0GxttxNyc7cOsZ6c/mmIkZOe+s/YGtcU9gUAv524RGoXkfQfjpZ4q1vM4tI
GYQjHnDf1+H5nOWs5w7/J8lunc1IGYUH4Cy3diIgXQ9HDgi2bVxQiLFmR0oeb+5g
iFeedAkXrOkktJca6JObaXH+/Hg4z9JI6542xkya5388FL7aSLCyfUPKJGDnivKL
m1HXo6YZSJvdOg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:58 2025 by rpki-client