Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd41e0-8fb2-4593-9dce-a1fc8c2e6dfe/1/tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.mft
File: tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.mft (raw, json)
Hash identifier: 5U74Wtn6LbqTeV6sGp4+vZeS/c26lvPalAPd5gKrGcQ=
Subject key identifier: 47:28:09:79:06:F7:62:E6:0E:1D:37:39:43:30:B9:8C:CF:A0:16:B0
Authority key identifier: B4:77:10:D2:0F:52:94:BC:20:7E:66:7F:86:73:12:6E:2F:5C:11:AC
Certificate issuer: /CN=b47710d20f5294bc207e667f8673126e2f5c11ac
Certificate serial: 0186B9290DEAE4059294AD000AEDCBE80C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd41e0-8fb2-4593-9dce-a1fc8c2e6dfe/1/tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.mft
Manifest number: 01
Signing time: Mon 06 Mar 2023 23:02:00 +0000
Manifest this update: Mon 06 Mar 2023 23:02:00 +0000
Manifest next update: Tue 07 Mar 2023 23:02:00 +0000
Files and hashes: 1: tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.crl (hash: sEr0jVhy6KmypsPpRInZbWbjNxxVzdKz+q9YfL1b2r0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b9:29:0d:ea:e4:05:92:94:ad:00:0a:ed:cb:e8:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b47710d20f5294bc207e667f8673126e2f5c11ac
Validity
Not Before: Mar 6 23:02:00 2023 GMT
Not After : Mar 7 23:02:00 2023 GMT
Subject: CN=4728097906f762e60e1d37394330b98ccfa016b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:29:65:6d:91:be:f6:5d:e0:e0:63:b6:0f:
b8:5a:cc:02:d3:0b:63:6c:c4:1e:4a:25:e1:58:03:
d3:37:b7:cb:b1:d0:7c:f7:32:ab:aa:3b:75:5b:0f:
df:70:d5:9d:05:54:e0:c5:3c:a8:b8:7e:1a:77:e0:
e2:cb:78:2d:21:d1:9a:4d:45:1d:9a:88:c9:0f:95:
42:ff:db:2b:eb:db:48:22:c1:a6:4f:fb:3d:b0:0d:
ff:d3:04:a9:3d:54:c4:da:06:81:07:e4:64:3e:6f:
27:d0:4d:f2:ff:90:f5:e0:ae:e7:bc:10:80:aa:2f:
1a:1b:fd:46:df:f2:5b:ef:e4:a8:40:e1:68:58:b0:
5d:66:77:4d:f4:90:92:c8:82:ed:13:d2:f1:61:72:
80:03:5a:be:e5:f8:97:d9:a1:3f:f3:f3:e3:74:18:
db:f5:09:16:9a:af:15:c5:2f:ba:f8:30:84:4c:b0:
75:8a:a7:ea:ca:6c:27:77:2c:40:d0:63:1f:f2:b7:
b5:73:5f:87:df:5e:9b:e0:e9:80:2e:a9:43:ac:86:
1b:df:7f:45:d1:12:ea:10:a0:4c:7f:a8:cf:6e:e2:
d1:e2:5f:0d:95:ec:c0:67:4b:7c:54:bf:43:23:c4:
30:e9:6c:99:70:a4:80:4c:0c:ef:28:07:c6:84:03:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:09:79:06:F7:62:E6:0E:1D:37:39:43:30:B9:8C:CF:A0:16:B0
X509v3 Authority Key Identifier:
keyid:B4:77:10:D2:0F:52:94:BC:20:7E:66:7F:86:73:12:6E:2F:5C:11:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd41e0-8fb2-4593-9dce-a1fc8c2e6dfe/1/tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd41e0-8fb2-4593-9dce-a1fc8c2e6dfe/1/tHcQ0g9SlLwgfmZ_hnMSbi9cEaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:44:4c:8e:5d:84:ca:f0:91:2d:98:d2:9d:95:34:94:77:e9:
ca:af:c4:bf:f3:24:79:88:9f:07:58:c2:26:57:04:65:e1:ff:
34:a8:53:0a:b4:e1:fc:86:22:d4:2a:37:f5:62:6a:b8:d4:74:
8e:03:fb:b2:0f:66:39:fb:8c:d5:ba:6f:37:37:f5:73:e9:92:
79:26:49:7e:5c:fb:47:f3:a0:a6:0e:47:08:bd:b0:d0:3a:05:
7d:c4:78:b7:99:44:67:fc:19:e9:b3:cf:1b:1b:a2:b6:0d:96:
81:3d:78:5d:13:d0:31:21:1c:5a:4f:a7:c0:f6:78:78:65:a1:
cd:5b:99:eb:11:06:cf:8b:6c:02:98:07:dd:6f:9d:64:c3:b2:
13:f8:7f:b3:bb:5e:9f:57:ce:54:75:05:fe:5e:7a:3b:af:8c:
d8:b7:e8:d5:b3:e7:f3:3f:89:3c:20:ab:ef:37:e5:b7:d0:15:
f2:a8:a9:ab:95:a4:3c:9e:80:6a:6a:37:b6:43:4a:e0:f9:b2:
a4:cf:d9:eb:bb:07:da:34:d9:30:40:27:ac:dd:06:8c:68:53:
3a:d3:5e:a0:ff:35:ab:08:77:c0:a3:ac:db:d0:3c:b5:4e:c2:
57:24:7b:56:b8:66:7c:ea:c9:85:ee:63:a2:60:d3:32:5a:00:
9f:48:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:27:25 2025 by rpki-client