Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: Ajx/OWA9MD9KabRk08RPUqv9rFGVzbT2Mdufqu1dCKs=
Subject key identifier: 39:7B:55:01:76:04:33:D1:E2:8D:6B:73:32:41:16:79:02:16:F1:6D
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0194BBCE161E97E19CEC600990469DD137A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: Pz5hAsVc/dtEYtfFXQBXSqa/dlOkQ8aPiLhJlN2Xi8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:16:1e:97:e1:9c:ec:60:09:90:46:9d:d1:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=397b5501760433d1e28d6b73324116790216f16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:4c:f7:7b:42:f6:f1:a9:1f:bf:0a:83:52:
a3:3f:f9:9a:67:e7:f7:ac:65:5e:bc:08:65:1e:b5:
99:02:c1:74:81:a6:78:ac:c8:a5:49:6a:f6:80:b0:
7c:c5:78:b5:0e:f6:0b:03:ab:51:e8:46:a4:f0:cb:
c9:b6:06:56:de:c1:61:7d:7f:fe:80:d2:9c:46:9a:
c7:81:90:3e:35:6a:e5:0a:97:e7:db:9d:2f:d1:e7:
50:3e:ee:d7:ec:13:78:b0:c6:5a:33:00:db:bf:48:
b0:d4:05:5c:8f:6c:f9:6f:68:b3:43:a3:9e:78:8d:
9a:fb:87:9c:67:25:e8:63:8d:07:48:8d:36:e3:80:
b2:c6:0a:c7:a8:1c:67:14:5b:25:e2:15:0f:65:4b:
a4:e3:b4:cf:1b:76:48:dd:d7:a9:40:0d:4c:ed:18:
e8:11:3e:4c:ea:3f:05:88:58:af:14:f4:c2:b4:eb:
b8:da:f9:ae:cd:a1:e7:f1:90:21:b0:1a:34:e0:b6:
1b:3c:18:29:eb:9c:d3:a9:0d:a1:e3:2f:83:a4:65:
69:46:c9:9a:45:84:86:71:db:06:1e:c3:f4:7e:9e:
78:56:f9:30:7f:c8:73:de:af:dd:17:36:a1:ce:5e:
63:62:ef:96:31:e0:7e:6d:5f:78:41:44:7c:09:3b:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:55:01:76:04:33:D1:E2:8D:6B:73:32:41:16:79:02:16:F1:6D
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6a:d3:0f:e5:bf:c9:66:d3:88:4b:75:d0:fe:dd:89:df:72:
67:0b:0e:a3:6d:e5:c9:00:56:ee:75:62:58:b5:fb:d0:e6:62:
2d:18:c6:3d:49:80:bf:38:5b:a9:a1:5d:2d:45:bf:c8:c9:6d:
a7:5e:36:8a:b2:f4:af:72:e8:28:de:9c:e2:e8:02:6c:ba:19:
22:51:a5:6b:68:3f:1c:ba:6c:13:21:92:97:18:3e:75:47:a5:
3a:69:3d:c8:32:48:14:c8:04:5e:94:f9:3b:a8:cf:f5:f3:34:
aa:9d:5d:ca:15:c9:64:de:b5:44:9b:07:4f:8d:24:a6:8a:c8:
76:46:c3:60:07:f1:b7:cf:d3:20:4c:25:1e:9e:38:68:6c:2a:
a9:ec:34:6f:33:67:ce:b1:54:7f:04:18:6d:fa:35:e2:0d:c3:
4e:96:86:d4:69:64:47:a1:35:98:04:0d:7c:03:d8:5c:8e:89:
37:d0:fe:cd:35:5c:36:78:16:da:eb:7c:af:45:23:e6:2f:56:
c9:d9:42:89:7f:ac:47:35:6c:bb:a5:06:ad:89:ea:0c:c5:b0:
71:c8:7b:d6:a7:3d:d6:59:80:a1:19:9c:8d:01:d2:ae:4f:e2:
d7:46:24:50:6a:6f:06:58:71:8c:5e:6d:f4:ed:5b:b8:ac:7e:
9c:39:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:17 2025 by rpki-client