
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
File: SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft (raw, json)
Hash identifier: qPzjyWVB3Lm63f7FuECTofEuoVrqLtMDXblZRJTXl5E=
Subject key identifier: D7:DD:14:EB:63:D7:FC:EC:6A:09:64:C8:90:0A:AF:A3:18:A6:B7:93
Authority key identifier: 4A:62:2B:81:9A:BF:35:03:C8:18:EB:FB:6D:87:3C:21:C1:BF:CF:B4
Certificate issuer: /CN=4a622b819abf3503c818ebfb6d873c21c1bfcfb4
Certificate serial: 0193AB8204B9E758D22EA44B9BDCE9D5C9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
Manifest number: 01ED
Signing time: Mon 09 Dec 2024 13:00:44 +0000
Manifest this update: Mon 09 Dec 2024 13:00:44 +0000
Manifest next update: Tue 10 Dec 2024 13:00:44 +0000
Files and hashes: 1: SmIrgZq_NQPIGOv7bYc8IcG_z7Q.crl (hash: b0juEmmP1Qv8HCQonv/TxhZgi4tGyOcMlFBlgI9xjXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:82:04:b9:e7:58:d2:2e:a4:4b:9b:dc:e9:d5:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a622b819abf3503c818ebfb6d873c21c1bfcfb4
Validity
Not Before: Dec 9 13:00:44 2024 GMT
Not After : Dec 10 13:00:44 2024 GMT
Subject: CN=d7dd14eb63d7fcec6a0964c8900aafa318a6b793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:82:46:5d:b7:a4:0c:75:92:9a:af:e1:64:
3a:ce:8e:b9:42:79:9a:be:5a:24:33:d7:a9:cc:d1:
1e:24:07:90:fa:a0:4b:4d:41:01:a0:44:ee:b3:86:
b5:27:ae:b9:72:9a:4a:b2:1f:70:d2:3c:45:d9:b8:
03:4b:55:23:f4:82:7c:ad:19:56:23:1f:70:ed:8b:
a0:ef:9e:00:bd:24:4f:ce:e2:24:de:97:97:31:59:
98:aa:c7:eb:ec:98:40:83:5b:1b:b5:8b:e4:3e:3e:
20:18:07:b9:66:ef:b0:e4:44:ea:1e:57:f7:8b:4d:
3e:57:3f:88:06:ab:e1:fe:7d:34:ce:43:41:e3:c3:
80:a8:db:7f:ca:5f:c0:49:33:f2:73:d8:6b:12:9f:
fe:cd:d6:82:cb:b1:a8:b8:8f:71:5a:2a:e8:c1:c7:
47:74:2d:14:f0:cc:3a:f7:49:4a:40:20:9d:91:14:
3a:89:b5:f0:39:28:45:73:c7:04:ae:40:e9:81:e9:
ca:98:72:70:95:5a:8f:a4:ac:aa:1e:11:15:2b:ad:
7b:f1:0d:6c:fc:32:5e:a1:8e:14:b8:4e:6a:00:ed:
55:cf:53:a5:1c:e0:da:cd:4c:18:a0:d2:4f:c2:05:
d5:64:b5:af:b0:74:b5:e5:c6:55:5d:1b:ab:16:95:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:14:EB:63:D7:FC:EC:6A:09:64:C8:90:0A:AF:A3:18:A6:B7:93
X509v3 Authority Key Identifier:
keyid:4A:62:2B:81:9A:BF:35:03:C8:18:EB:FB:6D:87:3C:21:C1:BF:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:45:13:ad:0b:a7:aa:4c:83:6d:4f:96:fd:28:41:7e:f5:6a:
f5:d4:74:ca:5d:b4:0d:af:4e:37:51:c0:25:4d:a6:52:e8:49:
91:4b:39:8b:5d:28:c2:8f:25:6a:63:fa:05:9a:83:03:2e:e2:
51:3a:7d:c4:6e:03:0e:97:88:e0:25:c4:b4:62:f4:ec:86:52:
0f:04:11:f1:cc:ba:bb:47:86:ca:71:9a:d0:c0:f1:6e:e3:03:
7f:56:b2:26:03:80:f0:c3:f0:e4:22:c6:78:5c:59:63:d7:b2:
4b:b0:89:7c:a0:66:88:80:9f:57:49:5c:c4:d5:d8:8f:96:e6:
1c:2d:04:0e:b3:49:16:16:b5:e8:79:31:3f:69:67:1b:f1:34:
67:64:94:b1:61:f7:cd:c4:6d:ea:20:b7:1f:75:77:f9:9d:49:
cf:d3:7e:1d:44:ae:d2:7e:9a:fa:1b:0d:55:7a:33:4c:cb:47:
3b:b0:d0:29:33:85:42:b0:d7:76:40:ac:28:5b:7c:b6:28:e5:
95:7c:fe:0a:45:fa:13:fb:49:cc:bb:53:9b:ca:36:b9:7d:3e:
f5:61:c3:17:d4:34:61:72:ef:91:ab:d6:c9:c0:9a:44:90:a3:
23:16:bc:d1:e1:ff:79:2e:83:21:66:af:dd:71:a3:ad:d3:11:
bc:c4:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:41:42 2025 by rpki-client