Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
File: HAa2lWCp0xRian_piP3SF0dL-G0.mft (raw, json)
Hash identifier: 12r+fCHsXWIWH1mG6XBnyApjoQqYwZV7HmRFbYG2mNc=
Subject key identifier: 40:21:7B:17:B8:63:42:E4:4C:31:AE:07:4D:45:99:0F:57:FB:CC:3E
Authority key identifier: 1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
Certificate issuer: /CN=1c06b69560a9d314626a7fe988fdd217474bf86d
Certificate serial: 0188E41203F35B5BA9BD110E4FF3F68AF76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
Manifest number: 080B
Signing time: Thu 22 Jun 2023 17:06:05 +0000
Manifest this update: Thu 22 Jun 2023 17:06:05 +0000
Manifest next update: Fri 23 Jun 2023 17:06:05 +0000
Files and hashes: 1: 7dmuqVnKFzri4xpJMH44ANX55UA.roa (hash: /sjVNy8PU3kWmOdSiYmAbkW5KeMApno2rT+jvtT1bzc=)
2: HAa2lWCp0xRian_piP3SF0dL-G0.crl (hash: yD+PMptWK2uQdGEyPjxuLSBUteLPv2TOmAinka9nkCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:12:03:f3:5b:5b:a9:bd:11:0e:4f:f3:f6:8a:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06b69560a9d314626a7fe988fdd217474bf86d
Validity
Not Before: Jun 22 17:06:05 2023 GMT
Not After : Jun 23 17:06:05 2023 GMT
Subject: CN=40217b17b86342e44c31ae074d45990f57fbcc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:71:01:0c:59:a4:18:a8:db:fb:60:5d:a6:
bc:43:90:a1:17:fa:46:08:88:0f:53:bb:d5:c8:29:
b6:75:3e:c2:e8:8e:f4:dc:27:62:d4:17:33:51:3d:
74:5c:ef:a1:9a:6a:84:2d:ae:e6:17:58:49:89:c2:
9a:8e:32:56:e5:f2:27:b8:81:42:87:20:8b:57:cd:
38:cf:c9:18:98:5f:5f:6c:65:f3:f1:2a:6a:85:35:
ef:6e:a5:a0:3d:2b:ad:2b:28:1c:26:a4:3c:76:81:
24:08:23:21:e2:a9:e1:3d:b8:2d:44:d8:4d:7f:0d:
8d:01:03:75:2a:92:da:61:5c:c2:c5:d2:2a:30:24:
af:41:e5:b2:c7:d9:96:be:0c:1f:dc:ed:98:48:da:
88:11:2d:ed:ba:67:4b:d9:6c:b3:04:e0:b7:f6:3d:
87:85:b4:a8:7c:fe:d9:fa:4c:1b:ba:51:13:50:f3:
da:ae:0a:42:a7:92:dd:b6:16:2b:4a:23:d6:75:5f:
a7:a2:3f:c7:2e:b0:22:c5:ec:f5:1c:94:26:e0:f6:
08:fc:dc:a9:9d:f6:84:75:1a:54:9a:0e:85:32:bc:
12:6c:f2:32:19:f9:1f:35:22:1f:67:bc:a0:70:21:
ba:3e:8d:25:a7:2a:b5:e6:0c:03:ed:fc:2b:68:37:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:7B:17:B8:63:42:E4:4C:31:AE:07:4D:45:99:0F:57:FB:CC:3E
X509v3 Authority Key Identifier:
keyid:1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:56:13:14:4c:c2:2b:69:68:da:06:0e:7b:b6:b4:04:9e:
9c:0c:8c:52:06:5c:65:9e:c7:8c:39:43:15:93:46:95:fe:e5:
f7:04:c7:86:7f:a1:0d:a3:0f:28:89:83:3a:ca:e8:f9:f0:f1:
7d:79:98:a6:54:dc:ce:20:36:9a:47:56:55:44:ef:a6:b3:94:
8f:fc:56:69:f3:b1:e2:4b:5a:d3:6a:73:58:98:aa:16:c2:a6:
2a:b1:29:90:e1:7d:be:1d:eb:55:98:04:7b:db:15:11:3d:c2:
bb:34:32:b0:61:48:60:e5:80:31:89:e1:ae:aa:00:6e:bb:e8:
bf:ff:ac:5a:26:ea:d0:49:ab:17:43:8d:a4:e9:b0:ba:26:7d:
c7:02:0d:7d:d8:11:77:26:ca:6f:80:a5:64:ca:29:ac:58:31:
9e:76:c2:27:4b:dc:d0:9c:19:03:4b:92:33:1a:ea:05:78:ce:
8b:65:56:19:20:dd:c5:fd:50:8a:fa:f4:38:41:8e:53:4f:d0:
fa:54:c3:0b:fe:7a:e8:d1:67:4c:a0:49:d7:e6:c0:b2:e2:06:
37:fc:bd:36:39:0d:c1:b1:f2:20:cb:37:f6:28:c3:75:64:07:
37:a3:ca:a7:ff:2a:14:49:a6:be:cc:c5:78:21:78:6c:37:db:
2e:ca:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:25:43 2025 by rpki-client