Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/ErC0iVPOd3hOAP1SYnEL_z2JHjw.mft
File: ErC0iVPOd3hOAP1SYnEL_z2JHjw.mft (raw, json)
Hash identifier: +shWl/L6dz8aH9kA76iGJnh1LTA8/XqBXPxxRQE8X8s=
Subject key identifier: 05:41:26:25:CF:AF:19:6B:F1:01:89:F5:BD:A4:F4:28:5F:FF:5F:D0
Authority key identifier: 12:B0:B4:89:53:CE:77:78:4E:00:FD:52:62:71:0B:FF:3D:89:1E:3C
Certificate issuer: /CN=12b0b48953ce77784e00fd5262710bff3d891e3c
Certificate serial: 01857BB74AA526EA3DEE60979CA360438CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErC0iVPOd3hOAP1SYnEL_z2JHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/ErC0iVPOd3hOAP1SYnEL_z2JHjw.mft
Manifest number: 03
Signing time: Wed 04 Jan 2023 07:38:07 +0000
Manifest this update: Wed 04 Jan 2023 07:38:07 +0000
Manifest next update: Thu 05 Jan 2023 07:38:07 +0000
Files and hashes: 1: ErC0iVPOd3hOAP1SYnEL_z2JHjw.crl (hash: UYFpxm5Hx5iUWsmHZ8P/D4M2I3fAERaRJhWXk4YXTFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:b7:4a:a5:26:ea:3d:ee:60:97:9c:a3:60:43:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b0b48953ce77784e00fd5262710bff3d891e3c
Validity
Not Before: Jan 4 07:38:07 2023 GMT
Not After : Jan 5 07:38:07 2023 GMT
Subject: CN=05412625cfaf196bf10189f5bda4f4285fff5fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:a5:a6:ef:59:e4:e2:2b:33:73:8c:d6:0c:
8c:0b:31:49:6d:2a:9b:19:c6:06:71:17:27:d6:5e:
8e:2b:99:af:6a:fd:34:c3:71:5d:da:46:53:43:31:
34:a4:3f:de:8a:c6:69:e7:b9:fd:99:c2:c1:05:df:
24:7f:60:f3:c3:71:70:65:cc:bb:21:16:75:11:4a:
75:5b:4e:d1:91:1c:4f:89:8c:ff:18:78:5c:e7:2b:
eb:2e:8d:a0:cd:3f:e5:00:3a:89:aa:53:21:4d:2f:
d2:15:cf:86:f5:19:6e:a9:44:f1:8f:81:ec:96:aa:
74:7b:e0:a2:f4:a7:3a:da:09:e9:f1:39:46:0a:83:
cc:1f:10:d8:88:0a:f8:6f:70:f7:8e:bc:40:4e:78:
db:1a:25:03:4e:e2:49:58:98:db:e8:fc:e8:9f:97:
ed:aa:d9:fc:ca:ad:bb:97:80:8c:8a:e9:78:e0:f2:
a2:18:db:c4:fb:b3:8d:c5:a5:7e:a2:2f:3c:a5:35:
85:d5:9e:e2:20:91:a3:f0:5e:ba:08:61:e8:6f:dc:
dc:61:de:60:0d:bf:33:23:b1:7a:0f:78:f1:b4:36:
b8:5e:8e:16:69:98:39:16:4d:08:1d:b3:33:7c:8f:
d7:15:5a:6c:55:b1:a9:99:ee:c5:4d:c7:9f:9f:f7:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:26:25:CF:AF:19:6B:F1:01:89:F5:BD:A4:F4:28:5F:FF:5F:D0
X509v3 Authority Key Identifier:
keyid:12:B0:B4:89:53:CE:77:78:4E:00:FD:52:62:71:0B:FF:3D:89:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErC0iVPOd3hOAP1SYnEL_z2JHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/ErC0iVPOd3hOAP1SYnEL_z2JHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a07157-8ba2-46e8-8896-ab5e3e98e653/1/ErC0iVPOd3hOAP1SYnEL_z2JHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:35:c6:7d:3c:f7:6a:37:08:92:29:c6:08:57:b2:61:c0:73:
9b:db:41:57:be:3e:07:b7:99:13:99:2a:b3:bb:01:46:87:3d:
c7:64:28:cb:ed:f8:6f:e3:bd:67:99:dd:cc:54:1d:dc:16:60:
48:10:dd:49:dd:07:7b:33:eb:78:43:cc:0c:55:f7:6e:93:4b:
ed:2b:89:16:47:2d:d0:49:12:0b:3f:9c:8f:ec:69:e0:81:a8:
f7:a2:fa:d8:07:39:d6:31:b1:1c:23:a5:96:ac:f9:3a:84:3a:
40:1a:e8:e3:30:54:fe:75:7e:f6:ee:0d:ea:5c:36:23:78:d5:
81:72:3a:ab:f2:29:ad:1f:f0:fb:37:3d:48:ba:e4:6f:0c:62:
c7:65:63:d9:ba:7d:c7:59:7c:66:28:d2:fd:94:dc:79:21:26:
64:84:93:74:40:6a:42:2c:6b:bc:43:4a:bb:7c:4c:fb:70:b0:
cf:88:bb:1b:86:aa:1b:b5:b0:bc:55:ef:01:50:4e:e6:95:9e:
84:88:60:78:57:a1:b8:f8:54:22:47:26:2f:fd:78:0b:e2:10:
ae:12:38:13:16:c2:3c:3c:72:06:ba:d3:b6:70:3e:2e:fa:c0:
39:24:25:8b:10:ed:03:03:4b:90:f5:3f:2e:e9:fd:f8:23:9a:
79:1e:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:51 2025 by rpki-client