Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
File: HAa2lWCp0xRian_piP3SF0dL-G0.mft (raw, json)
Hash identifier: mUMJOOvwmnQ8/oHSmsjsxOGWCpKHAZD4ifBnTLCWcU8=
Subject key identifier: 78:F8:E9:27:B7:D2:5F:13:E1:5F:BB:25:8A:34:E8:D5:58:FE:1A:1D
Authority key identifier: 1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
Certificate issuer: /CN=1c06b69560a9d314626a7fe988fdd217474bf86d
Certificate serial: 0188F758AD3C8432C48489193B6167BAE815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
Manifest number: 0816
Signing time: Mon 26 Jun 2023 10:56:03 +0000
Manifest this update: Mon 26 Jun 2023 10:56:03 +0000
Manifest next update: Tue 27 Jun 2023 10:56:03 +0000
Files and hashes: 1: 7dmuqVnKFzri4xpJMH44ANX55UA.roa (hash: /sjVNy8PU3kWmOdSiYmAbkW5KeMApno2rT+jvtT1bzc=)
2: HAa2lWCp0xRian_piP3SF0dL-G0.crl (hash: 8rhJdN1z1DtP3fXqHKmk1tSd0AtWU36xSG9v7Ue3J6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:58:ad:3c:84:32:c4:84:89:19:3b:61:67:ba:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06b69560a9d314626a7fe988fdd217474bf86d
Validity
Not Before: Jun 26 10:56:03 2023 GMT
Not After : Jun 27 10:56:03 2023 GMT
Subject: CN=78f8e927b7d25f13e15fbb258a34e8d558fe1a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:13:ff:cd:69:12:1d:e0:58:48:09:7a:9b:
d9:0d:15:fd:2a:f4:e5:0f:41:d8:b4:22:f6:48:7b:
66:8b:57:0d:68:5d:26:7d:f2:28:21:29:e4:39:fb:
8b:74:b8:8b:5d:13:41:df:ab:54:f8:1b:b3:6b:79:
d3:fd:49:d0:8d:c8:3a:d5:79:a9:66:fd:9c:89:eb:
55:a7:ac:a3:43:ba:52:24:f2:3d:f8:5d:c5:46:db:
33:ef:72:b2:a6:2e:ed:7e:90:69:23:be:7f:dd:ea:
0b:05:f8:21:a0:da:c2:be:af:f5:8d:34:fe:f7:b3:
83:e7:b9:8a:28:77:30:ff:46:62:ef:a3:1a:40:ff:
28:07:a8:2a:43:e9:05:68:c3:4c:d4:5b:4e:f5:d0:
bf:6d:e6:b8:7c:2a:70:ce:d8:ce:aa:8b:e7:a7:c2:
ea:da:24:4a:d1:13:de:11:16:ca:b7:dc:63:0b:77:
71:9a:2f:d9:97:b7:99:54:4b:7a:b2:38:71:d0:33:
f2:72:1c:ef:9f:d6:6d:49:8a:65:2c:4d:4e:11:4e:
32:9c:c3:77:14:d0:76:3e:f5:08:a6:9e:48:80:87:
93:e7:c4:29:fe:df:0b:5a:44:14:7d:21:d9:b1:a1:
3c:53:f2:d9:55:ee:4b:40:3b:0b:4c:9a:6c:0d:6a:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:E9:27:B7:D2:5F:13:E1:5F:BB:25:8A:34:E8:D5:58:FE:1A:1D
X509v3 Authority Key Identifier:
keyid:1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:23:1d:b0:50:03:9a:2c:7c:fe:51:c1:30:ff:9d:b7:7d:e8:
28:05:6e:e1:5e:7d:3b:86:60:df:fd:40:a9:33:3b:67:c8:a5:
7c:3b:6c:57:8d:7b:38:da:09:7d:46:0c:f5:1c:d1:12:88:5b:
84:e3:b0:24:c4:e1:0b:1b:72:e8:4c:67:8c:05:75:7b:0e:b3:
34:bf:57:68:a8:9c:7f:94:0d:63:36:f0:49:1f:9d:27:ae:9c:
d9:d4:8d:02:e3:f1:f9:d8:b1:dd:95:67:53:83:9e:e8:dc:05:
6a:3d:c1:c2:97:9e:77:c4:dc:44:27:ec:a9:2a:72:41:7a:20:
70:cc:3e:7a:83:87:45:fa:26:c7:3c:9e:75:ba:57:28:59:cc:
9a:77:2c:3e:4b:24:78:f8:83:1e:31:3f:84:a2:46:c2:7d:69:
6b:70:1f:bf:93:c4:bb:99:fb:c0:92:42:9e:77:c1:b4:cf:0f:
4a:fb:70:7b:6c:60:5d:3d:7e:25:87:bb:eb:fc:74:23:7c:b6:
9c:c3:46:f2:53:c5:80:43:53:33:e0:0a:f3:93:c9:c9:88:ca:
11:ff:b2:1a:20:3b:e4:60:43:89:cd:7d:4b:82:5b:af:8d:fd:
29:3a:7a:67:d5:8e:5f:27:34:d4:de:25:c2:56:95:f7:a2:53:
55:b6:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:53 2025 by rpki-client