Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: ct46z/HZGST2OAE2ZMnykXMK6AQjsYYRLrMeEgGdQZ8=
Subject key identifier: FE:0A:7F:A0:72:71:02:53:B6:15:DF:C5:57:9C:9F:23:16:9A:AB:7C
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 0194BD176D00E1A538D619630C1B48506BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: UAK74TOZl3xYK19rAyH2rhW+zR2Bpoqy4TWR+RkMUnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:00:e1:a5:38:d6:19:63:0c:1b:48:50:6b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=fe0a7fa072710253b615dfc5579c9f23169aab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:bd:cf:27:dd:56:db:c1:4d:fc:ce:fd:ab:
2d:f6:51:bb:f7:0f:ea:1d:2c:59:e3:5d:d6:9a:1d:
cb:60:42:75:58:41:f8:37:23:0b:eb:dc:8b:31:83:
88:a2:29:dd:5f:2b:bf:c5:14:f6:10:3f:79:5e:65:
66:be:16:9e:c9:67:8c:12:3c:d4:cf:f8:f0:e9:ad:
c9:ff:d3:e5:47:d8:9b:e0:24:ec:3f:83:74:11:a3:
a1:b1:73:4b:a5:e4:35:1c:b4:e6:9c:ee:5c:46:23:
6d:40:bb:de:e0:23:2b:5f:4a:6d:ae:d3:ac:46:a4:
af:a1:33:b0:c5:5a:58:07:50:7a:d1:c7:63:d6:cf:
85:af:e6:00:9c:7e:18:39:3f:6f:04:fd:64:9a:9d:
c7:14:38:74:1e:39:83:62:a3:ad:b3:89:0d:47:10:
dc:d0:ce:02:76:13:db:fd:58:84:e9:c4:9a:d9:b1:
db:88:06:98:bd:73:ac:bf:d5:0a:b9:1d:65:c2:1c:
1a:78:d4:43:f0:d3:e5:c3:5b:b2:b4:cb:8b:01:e2:
d2:5d:65:2a:7b:b9:cb:8a:99:10:07:cd:7a:b1:77:
88:22:b4:75:d6:9d:04:1f:60:f6:c8:7a:82:a1:b9:
e8:1a:aa:fe:e5:d5:2d:20:00:50:6b:9c:72:f2:0b:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:7F:A0:72:71:02:53:B6:15:DF:C5:57:9C:9F:23:16:9A:AB:7C
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:b0:bb:2d:2f:df:ce:e8:7e:f3:a1:2d:e3:3a:e4:9b:e6:
27:72:cf:7b:87:ba:1a:5b:12:25:0f:5a:a9:36:cc:f4:1d:21:
3f:7e:80:ce:07:23:20:89:8a:3e:31:d9:ef:7d:8e:bb:be:4e:
36:d5:02:35:5a:a4:17:28:aa:88:3b:2e:a1:db:9e:ce:f9:52:
0c:92:fc:c6:99:9e:87:ae:14:1b:3d:f1:22:6f:bc:c6:5f:c3:
5f:5d:e1:5b:44:78:b3:ad:5d:a9:ea:58:26:c9:51:52:c4:c1:
8a:6d:c1:08:98:08:f1:9b:ab:28:8e:5e:75:d4:20:63:d5:53:
13:36:78:c0:1c:7e:38:7d:f7:4f:4c:64:8f:c8:39:00:83:bd:
0c:98:fb:f5:0b:17:66:c4:0e:b9:d2:7f:5d:55:6b:a2:e7:38:
cb:72:2a:c2:c7:11:e4:fe:90:83:b6:3f:2a:4e:79:da:27:68:
f5:f5:93:02:09:55:3c:44:96:34:2e:9e:48:04:52:e2:0c:21:
50:06:f4:b3:1c:f9:16:95:4d:99:0f:44:60:67:e9:9f:6a:97:
ae:c1:2a:ef:2e:99:c5:e1:0f:e5:b1:6f:5d:5f:dd:b3:53:be:
a3:a0:ad:7b:6a:85:ba:17:22:08:2e:62:44:f9:54:c8:b7:50:
20:55:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:12:01 2025 by rpki-client