Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.mft
File: HdGoMITMB7cxuvkdqvMTbC9rddM.mft (raw, json)
Hash identifier: 3cGFZcjunKg1FgzSY3a/IUV2xn6C5vMKFT394+CcU6E=
Subject key identifier: 3A:1C:1C:30:30:33:21:1B:35:A6:04:79:C4:78:00:5A:12:49:4E:70
Authority key identifier: 1D:D1:A8:30:84:CC:07:B7:31:BA:F9:1D:AA:F3:13:6C:2F:6B:75:D3
Certificate issuer: /CN=1dd1a83084cc07b731baf91daaf3136c2f6b75d3
Certificate serial: 0194BBCDC7C0D67546479DB02D2F3A4BD569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdGoMITMB7cxuvkdqvMTbC9rddM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.mft
Manifest number: 0FF7
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: HdGoMITMB7cxuvkdqvMTbC9rddM.crl (hash: aKmDXVEti7GPYdhhAQb9myGqOrafTIst0Hdvk1Pm0BY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:c0:d6:75:46:47:9d:b0:2d:2f:3a:4b:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd1a83084cc07b731baf91daaf3136c2f6b75d3
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=3a1c1c303033211b35a60479c478005a12494e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:44:d5:2f:97:e5:1f:f7:7d:d2:a8:17:af:
51:71:d1:88:ce:bf:60:c1:2e:4a:14:70:2f:3b:f6:
51:74:10:e2:c6:a9:21:f4:3f:42:e5:2d:37:04:20:
85:e4:f8:9c:fd:96:11:11:48:00:01:15:93:22:02:
aa:9b:f1:ad:5e:40:2a:f3:44:0c:94:b3:cd:ef:50:
5a:37:db:fe:65:17:3f:30:d8:db:6b:e3:b2:aa:8e:
33:ce:27:87:fd:51:9b:ca:0b:c4:19:ec:c5:67:67:
74:fa:19:42:ed:9c:60:d5:f2:24:3a:04:8d:c8:9b:
43:54:ad:43:37:28:bb:cc:db:a7:20:c8:16:3a:ee:
5c:b3:1e:b9:e9:77:7c:2d:e7:5c:ba:15:09:2c:a6:
37:c6:d8:f6:f8:b5:23:23:ad:57:e2:53:9e:01:2d:
69:ef:08:d5:b9:28:df:f0:43:54:2b:ee:1a:a6:db:
02:98:6e:3e:38:00:56:f0:84:24:8c:82:05:ce:e8:
4b:7a:98:b3:20:05:1c:1e:54:88:fc:38:2f:ec:83:
fa:9d:ca:a6:24:d0:67:4b:75:4d:ae:47:bd:26:21:
d7:98:ea:35:95:bc:d3:78:e8:c9:f6:b0:c8:86:71:
c1:cf:86:8a:88:69:75:c4:6f:af:a7:f6:73:bb:70:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:1C:30:30:33:21:1B:35:A6:04:79:C4:78:00:5A:12:49:4E:70
X509v3 Authority Key Identifier:
keyid:1D:D1:A8:30:84:CC:07:B7:31:BA:F9:1D:AA:F3:13:6C:2F:6B:75:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdGoMITMB7cxuvkdqvMTbC9rddM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5d0928-e68f-4e19-b226-4036278b43f9/1/HdGoMITMB7cxuvkdqvMTbC9rddM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:23:74:e9:52:02:e4:c2:8a:b7:2c:cc:35:05:12:98:f9:bd:
d6:23:11:06:db:b9:d7:55:8c:76:57:3e:31:76:f6:49:9e:48:
24:65:2f:6c:57:5a:aa:09:46:07:3c:bc:77:e1:80:1f:db:a8:
a3:e5:44:74:de:f9:1c:23:ef:22:92:49:70:77:c0:c7:f0:8a:
92:c0:4b:50:2e:bd:66:ab:a9:ce:01:10:32:f7:f3:ed:80:9b:
ff:9c:6e:cd:ad:81:a7:03:ad:71:3a:bd:7e:35:80:37:cb:8d:
e1:86:ce:b4:c5:ac:62:ea:d5:72:7b:04:ea:c0:22:fe:0d:03:
f5:25:58:7f:5d:37:78:eb:82:0d:7a:ec:b8:46:20:e2:8e:3f:
5a:48:17:62:ba:75:24:c0:3e:36:84:89:66:57:44:b9:70:5c:
0f:b5:0f:c4:75:c8:c8:62:53:2f:f8:aa:04:d8:8f:dc:ac:31:
14:dc:12:d3:3e:11:9f:e4:9e:69:d1:44:70:fc:bf:39:7f:0c:
cd:25:a7:bc:59:34:4d:00:4e:3a:5a:a0:4e:b4:c3:92:0d:d2:
a7:4b:e8:a9:50:42:50:26:e7:03:60:43:f4:ce:24:79:75:f0:
b1:26:d8:94:05:05:7d:df:f4:5c:c6:e0:7d:2e:85:1a:b6:d7:
97:de:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:17 2025 by rpki-client