Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: 6H0qVF9ugfJeqhFcw4HaPwGbOgaLRhCyLN1Plx5DZBg=
Subject key identifier: 74:DD:3A:DA:5C:F1:76:78:D1:CC:B0:F1:02:0D:4E:1C:3C:44:A5:CC
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 0194BBCEB0739E1B313E81FA65D91DC04BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 0309
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: 8GKUZTOusMvwqNq/kfxa3Rg4R54ROYLmNhD+Slgy0CM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b0:73:9e:1b:31:3e:81:fa:65:d9:1d:c0:4b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=74dd3ada5cf17678d1ccb0f1020d4e1c3c44a5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:62:14:0c:40:4a:0f:20:a0:9b:d9:21:5e:
75:d3:50:bc:8b:d7:73:65:d1:17:06:08:5b:ff:c6:
25:0e:81:5f:84:54:a0:e9:7b:ff:0e:e9:c6:1e:4e:
7c:a8:4a:9f:37:de:02:23:7b:82:3b:6f:b8:ff:ef:
82:86:d3:ef:8c:da:f6:af:3b:49:77:49:af:f1:95:
aa:fb:ea:66:27:69:22:46:1e:4d:8f:35:37:ec:cb:
ef:7d:1a:12:e1:46:68:83:fc:97:27:28:ba:16:91:
58:92:6e:88:7c:22:ab:18:60:74:50:a6:6e:36:f0:
22:83:a7:be:5f:c2:a3:3c:0d:f8:86:8d:c3:53:16:
8e:f6:3d:88:2d:9e:73:0f:3a:e9:e5:c7:54:19:c7:
82:95:3a:cd:00:9b:3c:9c:e7:24:a1:f3:7c:74:0e:
9a:3f:39:c5:72:67:dc:40:b5:6c:63:d2:73:db:14:
1a:27:03:a9:e7:aa:e6:e8:d1:90:56:a5:19:81:e2:
dc:96:e0:51:36:0c:03:0d:83:45:19:d1:36:73:ed:
56:d2:6b:52:2b:d5:1a:a2:a1:8f:55:9e:6c:50:63:
06:dc:a4:2b:b4:14:f8:fa:c5:41:d1:fc:be:01:f0:
a1:22:7e:65:01:de:10:88:0d:17:a2:51:e2:29:03:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:3A:DA:5C:F1:76:78:D1:CC:B0:F1:02:0D:4E:1C:3C:44:A5:CC
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e4:93:20:e5:0d:93:0a:ad:72:85:fa:25:5a:a9:09:3f:26:
13:61:4a:cd:7d:f6:cd:4d:69:b4:7a:18:52:33:a2:b9:93:1b:
a3:56:3b:23:d6:17:a6:d8:e7:a0:bb:0d:1a:3d:19:3a:77:f7:
b3:a2:40:80:f8:69:99:40:03:9e:95:d8:88:25:c4:3c:03:7c:
65:ed:e6:a9:89:7e:a9:a7:37:9c:9d:a4:31:12:4b:7e:fd:66:
6f:2b:10:0e:30:af:5f:0a:60:f3:58:0b:40:4e:34:70:cd:4b:
2e:b4:5a:2d:39:a6:39:2b:ec:32:dc:cd:15:41:ad:8f:3b:fa:
72:b3:aa:c0:a6:63:20:ea:60:8f:90:cb:e1:76:01:37:b6:90:
b2:f1:7a:ac:9b:bd:78:de:73:8b:d3:6b:c5:b2:27:eb:44:52:
f6:ae:d7:23:30:ff:e9:39:0c:22:b6:16:c2:3c:ba:72:8a:8f:
84:44:94:4e:4b:77:a0:e8:34:0c:1d:b6:2f:e6:f1:c1:60:fd:
e8:a2:f7:bf:89:68:6c:1e:64:25:a6:08:7d:20:e5:74:49:a0:
06:e8:b4:de:31:fc:be:81:61:88:13:f0:68:cb:de:e4:74:c5:
99:8c:94:cb:2e:78:66:a5:a7:04:ae:4c:57:6d:15:2c:d3:78:
ee:06:3e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:28 2025 by rpki-client