Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/RcFgc4HhyS11Ma9zoH8LnwOMI6I.mft
File: RcFgc4HhyS11Ma9zoH8LnwOMI6I.mft (raw, json)
Hash identifier: 2WOWH343N5BqRL4cKMfENq2hmQf8jsUJLtYll64F3Eg=
Subject key identifier: 78:A7:B8:2C:04:F1:3B:99:F3:4A:05:45:ED:3B:B8:08:72:FE:62:7F
Authority key identifier: 45:C1:60:73:81:E1:C9:2D:75:31:AF:73:A0:7F:0B:9F:03:8C:23:A2
Certificate issuer: /CN=45c1607381e1c92d7531af73a07f0b9f038c23a2
Certificate serial: 018593E15DBA7FC04B508182E6B7D71B223E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcFgc4HhyS11Ma9zoH8LnwOMI6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/RcFgc4HhyS11Ma9zoH8LnwOMI6I.mft
Manifest number: 0975
Signing time: Mon 09 Jan 2023 00:14:58 +0000
Manifest this update: Mon 09 Jan 2023 00:14:58 +0000
Manifest next update: Tue 10 Jan 2023 00:14:58 +0000
Files and hashes: 1: RcFgc4HhyS11Ma9zoH8LnwOMI6I.crl (hash: 6cL+Ljol2J4rFPSWXZSHh3d1N2ChdnI8a4aPPyeWns8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:93:e1:5d:ba:7f:c0:4b:50:81:82:e6:b7:d7:1b:22:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c1607381e1c92d7531af73a07f0b9f038c23a2
Validity
Not Before: Jan 9 00:14:58 2023 GMT
Not After : Jan 10 00:14:58 2023 GMT
Subject: CN=78a7b82c04f13b99f34a0545ed3bb80872fe627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:f3:bc:cb:bc:94:40:bd:c7:1a:8c:51:4b:
22:07:e6:3c:98:8a:de:65:a8:ca:1f:37:69:58:8e:
e1:22:ab:c2:01:0d:70:58:76:83:e9:92:08:c8:55:
9c:98:69:f4:dc:75:94:4f:8e:e4:ac:86:46:8d:a9:
74:b2:89:3c:ec:10:01:33:fe:f8:a9:9a:15:c1:38:
35:25:58:f7:48:35:f3:5d:cf:df:b1:3b:3f:c7:b1:
b6:28:a2:de:cf:43:33:0e:ee:a6:a0:84:0a:ea:f3:
0f:56:d0:52:fb:76:f8:f3:fd:b6:23:b8:9a:db:c2:
dd:51:9f:4a:59:de:19:be:60:67:dd:9d:b1:79:47:
08:6b:90:36:72:dc:99:42:6f:d0:69:9a:6e:a1:95:
07:d4:3a:0e:8b:ea:0d:e5:e0:56:01:1a:47:d2:0f:
44:11:ba:83:c5:08:6b:77:5b:bf:c1:46:dc:cd:a5:
78:fa:37:40:6c:2e:e8:96:e8:5f:b9:bc:b9:8f:f2:
b1:c5:56:f6:d5:85:5a:66:2c:ae:a2:a6:6d:8d:ac:
f8:ec:16:60:cd:7a:88:ea:2c:84:40:c1:00:a9:88:
54:68:58:46:bd:5f:19:fc:17:cd:4c:7a:5d:e3:fb:
e8:80:73:41:f6:41:70:95:3c:56:67:9d:6a:33:a3:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:B8:2C:04:F1:3B:99:F3:4A:05:45:ED:3B:B8:08:72:FE:62:7F
X509v3 Authority Key Identifier:
keyid:45:C1:60:73:81:E1:C9:2D:75:31:AF:73:A0:7F:0B:9F:03:8C:23:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcFgc4HhyS11Ma9zoH8LnwOMI6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/RcFgc4HhyS11Ma9zoH8LnwOMI6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a6ef94-6fa7-4af8-aeec-c97449bebadf/1/RcFgc4HhyS11Ma9zoH8LnwOMI6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ea:fb:87:90:c7:0c:fa:53:ca:c5:16:da:b5:61:b3:74:34:
92:79:7f:26:87:e9:67:af:8c:5e:ea:6f:09:7d:8a:8c:d1:a5:
95:57:01:35:fb:52:e7:90:5a:96:88:ce:dc:37:5e:c5:ee:10:
d0:63:3c:b3:07:a0:e0:ed:40:33:fa:4b:72:eb:7e:ab:7d:4e:
1a:28:a2:7e:6e:50:c6:04:2a:1a:32:cd:43:b2:56:5d:3b:d0:
fe:50:a4:3f:84:49:d6:e3:d7:11:63:59:c1:54:2d:5f:eb:4a:
7a:3b:3c:52:80:be:46:32:ee:ab:cc:6f:9a:c7:b9:19:04:fb:
99:17:67:34:14:95:a2:10:8b:e6:16:57:b0:b8:e4:bb:2e:24:
d3:be:ae:6a:d1:9f:af:7f:7f:08:ed:85:65:2f:aa:d9:d0:24:
8f:2d:ad:ee:9b:66:a3:b0:ad:2b:65:79:46:3a:a4:e4:9a:88:
87:61:88:d4:49:29:68:70:18:23:e5:02:6c:78:9a:5b:f1:fd:
3a:0c:21:54:fe:7e:2e:2a:9d:fa:e1:ef:a2:14:61:45:98:23:
94:02:c9:77:c9:ee:9d:10:aa:ca:48:3b:04:5c:28:89:e3:9d:
d8:db:43:84:f1:76:3d:33:b4:b5:3c:92:3c:30:89:57:9f:63:
8a:71:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:30 2025 by rpki-client