Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: JqSV0jPk35tF1ZxAR9Xl8tHqZQrU/NOdoHFc63Dn6dc=
Subject key identifier: 32:BD:DE:A6:B6:B4:B1:6B:23:73:8C:B4:BF:35:DD:9E:5E:47:12:52
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 0194BD176A15694CB420A0866C4CA74BF13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: 9ekvJAKquC/sEpshZwzyVEW0DVleUlouyNxzx+mQVes=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:15:69:4c:b4:20:a0:86:6c:4c:a7:4b:f1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=32bddea6b6b4b16b23738cb4bf35dd9e5e471252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:92:ec:74:cb:5b:e4:84:3c:08:1d:f5:bd:a3:
74:1e:33:a7:e6:ff:7b:be:be:94:a5:58:af:9e:34:
27:a3:ed:a6:02:d2:f1:39:30:6a:8b:1c:45:00:2c:
38:9f:be:d2:8d:73:1f:67:94:4d:61:05:56:ca:9e:
75:90:32:19:1a:4f:31:7c:af:91:10:6d:44:0a:7f:
70:0d:32:47:c1:d8:d5:03:b1:33:91:7b:f3:2b:9e:
b8:29:67:70:33:b4:02:5e:63:5f:f6:a0:08:a2:d5:
9c:69:13:e7:a7:68:5a:ab:c3:2d:ca:bc:39:1a:30:
a8:f8:87:5a:a2:eb:c7:48:3e:dd:1e:68:38:73:27:
aa:09:f1:50:1b:2d:b8:c4:ac:93:bd:47:a4:db:dd:
2d:3f:55:63:11:43:ba:b8:ae:b0:59:d0:24:af:18:
fa:7b:0a:ad:50:e8:8b:33:d6:e8:00:d7:88:b6:9c:
83:5e:bf:9e:d0:73:47:28:d3:c7:04:5b:c5:97:ba:
77:79:15:c6:63:56:2d:d4:e4:99:fd:6c:54:6a:56:
82:d0:8c:03:96:9f:bf:b0:61:81:bd:34:61:f2:e0:
c5:4b:bf:a5:a3:65:6e:47:20:08:18:6a:da:b8:d1:
e5:29:90:df:64:b6:4f:41:1b:62:8c:af:a0:39:9c:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:DE:A6:B6:B4:B1:6B:23:73:8C:B4:BF:35:DD:9E:5E:47:12:52
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:31:86:2e:2f:9d:c1:39:b1:38:e5:e6:f2:7a:2f:d7:a7:
fe:a4:72:67:25:45:a5:3d:ef:2a:76:64:b1:bc:ae:be:37:81:
69:49:75:d9:f0:2f:fa:1c:55:74:ec:fd:65:dd:eb:d6:80:e4:
b0:ba:20:e1:b3:4d:8b:27:b3:3e:3a:96:e3:32:63:cd:f6:ff:
29:14:7b:af:2e:99:b7:9d:92:54:28:72:fb:41:c8:2f:e2:91:
d1:81:28:8f:f0:57:da:50:1f:15:69:5e:9d:c7:8b:9f:84:92:
64:35:cc:43:3e:5e:fe:0a:1d:66:59:96:b5:f8:c0:82:29:0a:
fc:5d:fd:e8:77:2e:8d:95:b6:72:a9:42:05:cd:46:70:fd:0a:
6b:8e:8c:4f:42:26:29:31:84:47:bb:88:07:d2:15:7a:71:3f:
84:1a:ec:5c:0f:dc:bc:f3:a9:df:a3:c8:b5:1d:ae:11:3b:87:
cd:d0:31:e6:9b:c0:aa:7d:53:66:92:38:e6:de:8c:22:1e:da:
e5:32:56:0c:5d:fa:b1:54:b8:5a:dc:18:97:7f:06:af:3d:d0:
73:c4:62:f6:96:61:eb:d7:8e:86:fc:19:e9:7e:be:24:af:04:
b6:74:6f:b7:c6:06:51:27:6b:de:ec:a0:3b:ca:a9:e6:83:df:
2f:8d:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:42 2025 by rpki-client