Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
File: INShQtHjFwTrW88Dp4X2N4NVt5k.mft (raw, json)
Hash identifier: ZOLZIU/JwELxyTrD5JcYWPVhR9Y0mt2Guh8aHbDDSTo=
Subject key identifier: F1:F0:5F:C2:66:BE:3D:BC:62:BA:E3:9C:94:B3:84:B2:30:AA:71:1C
Authority key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
Certificate issuer: /CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Certificate serial: 0194BC3C4257282415DA7F45B8F1B289D3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
Manifest number: 044E
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: INShQtHjFwTrW88Dp4X2N4NVt5k.crl (hash: Jk5AxqFHgB/UA3meUOsI2N9sZUFpg3nqXIezP+oy7VQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:42:57:28:24:15:da:7f:45:b8:f1:b2:89:d3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=f1f05fc266be3dbc62bae39c94b384b230aa711c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:6d:f7:04:82:3e:a2:16:e0:10:ef:f0:eb:
b9:5e:56:87:9b:88:0b:ec:d7:79:da:6e:3e:3a:a1:
b8:f6:d4:94:9a:91:2e:19:a7:92:a1:ff:77:97:1e:
79:bf:aa:31:11:db:d4:ef:7c:33:bf:29:3c:83:28:
fa:a6:25:fe:8c:40:7c:42:c2:93:e9:f7:39:ff:8b:
d3:21:d9:18:44:06:28:39:2b:78:3b:0a:1e:29:1d:
df:fc:5e:41:3e:8c:b6:89:55:7c:3f:44:0e:b0:43:
2b:8f:b5:6f:a3:0d:25:07:41:5e:e7:27:dc:01:82:
e8:34:f3:34:ad:f4:ad:e3:0f:c5:63:27:69:72:52:
ed:cc:4b:63:6c:d5:d8:3c:31:2e:6a:e8:31:75:bf:
93:fa:03:cc:c1:48:1f:93:6d:b9:52:da:e2:70:26:
7d:4d:b4:bd:35:ee:f4:88:13:c5:a4:cf:5e:cb:30:
fe:12:b3:ed:03:ac:94:11:50:62:b9:9d:03:1f:f6:
ec:54:e6:c9:54:2f:e2:79:56:2c:1c:c2:0e:38:ff:
65:11:a8:39:a4:05:8a:88:4a:2f:d9:24:57:36:63:
a6:7d:9d:cd:24:c9:6b:60:af:67:37:8d:8b:91:84:
a9:23:36:c9:48:4d:7b:6c:fd:bc:be:86:c6:8a:66:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F0:5F:C2:66:BE:3D:BC:62:BA:E3:9C:94:B3:84:B2:30:AA:71:1C
X509v3 Authority Key Identifier:
keyid:20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:18:66:ca:37:37:4d:c7:d0:bf:3e:df:90:b1:9d:5f:f6:5a:
9d:c8:f7:36:09:8b:5a:d7:4e:dc:26:2c:91:07:c8:15:7f:81:
c6:29:d7:8b:b4:c5:37:52:fd:4b:a7:6a:8c:f1:00:9f:e1:f2:
54:6b:e2:3c:0a:89:04:73:b6:19:bc:d3:7c:38:e3:6c:eb:6c:
4b:50:6b:4b:dd:70:6c:4b:b2:02:8b:68:73:41:92:58:c6:4f:
5b:a5:6f:c2:28:b2:bf:fb:1f:9c:0c:e7:0c:e9:de:4a:7d:6c:
13:5a:8f:70:e2:b0:75:ec:d6:71:34:51:39:93:4d:6e:e3:4a:
3a:b2:23:33:4b:c5:5a:7c:3f:4b:d5:b7:2d:0e:bf:c4:c1:5f:
04:e1:2f:7b:ce:f9:77:97:d0:31:44:02:ff:73:3f:47:8b:e5:
73:b2:b3:ab:1c:7c:53:cb:e4:03:59:bd:fb:ba:50:ef:e6:9d:
5f:12:c9:25:39:0b:31:5b:b4:c9:48:54:09:56:00:29:4a:fd:
aa:7e:e5:be:1b:b4:c4:8f:9b:8b:98:63:db:cc:9e:1d:05:53:
d7:3d:17:ea:6d:2b:1b:17:0c:32:a0:68:9c:1b:db:ea:ac:ef:
fd:ed:dd:d9:a6:a0:80:7a:d0:8e:c0:80:14:5c:d0:22:b5:c2:
7a:ca:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:09:34 2025 by rpki-client