Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/HT30q9neZB4e6ry3q8TBM0MTXmk.mft
File: HT30q9neZB4e6ry3q8TBM0MTXmk.mft (raw, json)
Hash identifier: fi4Zt75K+r5fnhUl8x9fdL5yDaLVUd5OjuJ+6m24Woc=
Subject key identifier: 32:82:17:96:18:8D:C5:9D:D1:AF:78:4D:4D:12:22:67:36:F8:9F:82
Authority key identifier: 1D:3D:F4:AB:D9:DE:64:1E:1E:EA:BC:B7:AB:C4:C1:33:43:13:5E:69
Certificate issuer: /CN=1d3df4abd9de641e1eeabcb7abc4c13343135e69
Certificate serial: 01877A2EBAAEB80EBA76A6EA091C943FEC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT30q9neZB4e6ry3q8TBM0MTXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/HT30q9neZB4e6ry3q8TBM0MTXmk.mft
Manifest number: 0326
Signing time: Thu 13 Apr 2023 10:34:55 +0000
Manifest this update: Thu 13 Apr 2023 10:34:55 +0000
Manifest next update: Fri 14 Apr 2023 10:34:55 +0000
Files and hashes: 1: BkzA2q0KWboCcPAo0bt1hrPm1MA.roa (hash: jvZdUjy5tRoqNdn38OjlGoeAPBjoUc/Ypzy71cubOLg=)
2: HT30q9neZB4e6ry3q8TBM0MTXmk.crl (hash: mAHADnQF47CoKAbzaYZiEK9UOopOU1IwiF911ihvNis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:2e:ba:ae:b8:0e:ba:76:a6:ea:09:1c:94:3f:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3df4abd9de641e1eeabcb7abc4c13343135e69
Validity
Not Before: Apr 13 10:34:55 2023 GMT
Not After : Apr 14 10:34:55 2023 GMT
Subject: CN=32821796188dc59dd1af784d4d12226736f89f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:de:0e:d1:76:a1:48:e5:98:48:da:c0:59:
82:6d:2c:88:f6:a4:f7:fb:8e:94:81:55:5b:a9:d4:
49:31:c4:5b:cd:ee:c6:b7:e4:7f:4c:3b:db:06:d5:
e9:91:60:3e:32:7a:e9:91:21:84:16:d3:c0:3f:c4:
78:48:cf:9b:da:82:a1:bb:45:fe:03:da:92:ea:a2:
45:c0:d9:1e:02:69:ab:95:67:70:34:40:a3:17:d2:
fe:fc:82:9c:8c:8c:91:8e:1d:0d:b4:4f:6c:18:9d:
a0:ac:b7:87:bd:6f:0b:de:53:62:48:bb:4f:e0:9c:
08:eb:7a:eb:a2:43:2e:13:21:55:12:7b:bb:88:70:
f1:ca:f6:80:a7:93:d3:52:01:ed:2d:99:1c:ef:24:
64:6d:b7:b1:ec:8c:a7:0d:bb:08:82:b1:ce:45:1a:
0e:a2:75:7a:ea:18:c0:17:9e:fb:de:da:d9:0b:9d:
03:42:b5:01:1d:78:a1:05:04:da:05:f8:29:3a:09:
e0:e6:c9:e7:d2:d5:b2:dc:3d:4f:65:35:e4:ed:2e:
c9:14:33:42:90:3d:a4:1c:1b:c6:56:a0:7e:86:8e:
28:6b:30:46:5c:6e:fe:ed:4e:0a:d3:a2:a0:ec:91:
49:3d:2b:97:fb:6e:fb:17:7f:14:24:87:82:d0:ff:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:17:96:18:8D:C5:9D:D1:AF:78:4D:4D:12:22:67:36:F8:9F:82
X509v3 Authority Key Identifier:
keyid:1D:3D:F4:AB:D9:DE:64:1E:1E:EA:BC:B7:AB:C4:C1:33:43:13:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT30q9neZB4e6ry3q8TBM0MTXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/HT30q9neZB4e6ry3q8TBM0MTXmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/79f42d-1475-4f83-913a-31797bb3e355/1/HT30q9neZB4e6ry3q8TBM0MTXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:09:54:1b:43:30:21:95:40:7f:49:17:2a:4a:22:75:98:d8:
8e:3f:d8:3b:9f:ab:5d:84:ea:9d:68:33:35:12:42:36:cd:c1:
16:d8:55:95:a9:17:df:a3:33:13:b6:d8:23:22:eb:af:ca:dd:
06:fc:e9:e5:d9:a5:66:c3:58:72:8f:2a:e0:6f:bb:7c:83:ec:
17:ff:27:c2:51:50:5c:25:29:4b:20:03:33:8c:de:a8:6c:df:
3b:ba:d1:a6:34:6e:79:a6:25:d1:e0:63:e0:35:21:6c:b6:d0:
6a:ed:6b:23:ac:e7:3e:d7:d9:50:57:8b:cf:70:95:d3:8f:ea:
e5:3f:6d:29:22:1a:7e:43:fe:22:0b:ea:ca:27:cd:93:42:bb:
bc:08:9e:fd:8b:af:88:14:6d:c4:b3:12:80:e4:b1:01:05:4a:
2b:f7:36:75:b7:64:95:18:92:5d:ca:57:cd:10:38:7e:62:f1:
6a:f2:cf:23:c9:a7:65:d0:0f:af:0d:72:7a:fe:cd:25:fc:1f:
6d:aa:26:df:2c:57:d2:b1:37:ca:67:fd:24:c0:05:95:3e:75:
79:b6:ce:d9:9d:ac:22:a2:c6:00:f5:98:b7:d8:9d:de:5d:21:
e5:dc:87:26:30:5a:cb:d5:da:64:d5:e9:13:64:e9:51:b6:5f:
e6:a6:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:12:21 2025 by rpki-client