Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: E6IOkhtMAaXF2yMOe2lrZ0M5BBD6Ipf6PFy8crbSEhE=
Subject key identifier: B5:C5:B9:FA:22:BE:2B:69:47:57:64:6F:80:30:08:23:65:14:EB:7C
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 0194BD4E9B0ED0E77D0D23789D407F47B025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0923
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: kV5lvJJ9q22c6Klj7LQcfRGv2Q3zhtxcFGr9772zqEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:0e:d0:e7:7d:0d:23:78:9d:40:7f:47:b0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=b5c5b9fa22be2b694757646f803008236514eb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:e8:fc:f0:35:41:8b:d2:44:ed:dd:7c:6f:
f3:87:14:71:a6:e8:94:dc:70:b7:ed:8f:b6:ec:f1:
9f:7b:0c:1b:8a:7c:10:9a:1f:b3:a5:cf:39:4b:85:
79:86:86:53:8d:34:cf:0d:f3:90:33:62:c4:93:7d:
e5:7e:8c:c2:ff:55:69:8b:da:3a:00:ad:3c:9a:47:
48:b6:e3:f9:1a:48:03:e5:ed:56:ce:c9:8d:81:e6:
6e:52:cb:db:f9:af:9a:9c:9f:83:8b:e3:a4:79:51:
41:29:61:4b:2e:6e:f3:d9:3a:a5:88:dd:9c:74:6d:
9e:61:a2:6d:71:cb:38:25:7c:7d:69:16:f5:26:fd:
ac:ca:e8:d5:bd:16:37:90:dd:33:4b:07:57:5a:42:
9c:fd:a9:10:8e:20:13:8f:a9:a6:d5:fd:d8:af:9b:
b5:d7:df:a1:9c:df:56:7d:62:d8:4d:4f:49:b2:2f:
d2:5b:70:d7:35:9a:d8:54:2c:61:fa:d5:55:56:bf:
df:56:c5:84:bc:d2:91:60:e0:cd:e5:cf:3b:07:24:
3b:b4:1e:59:d2:d1:88:77:bf:19:d6:26:2e:3a:42:
9d:e0:bc:ca:18:99:d3:14:3c:e8:5d:d5:92:18:76:
42:40:09:15:76:d7:c0:38:ca:97:07:4a:e6:4a:5e:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:B9:FA:22:BE:2B:69:47:57:64:6F:80:30:08:23:65:14:EB:7C
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5f:45:03:0c:55:21:0d:85:ed:e7:bf:e5:65:30:f3:c2:dd:
8a:9b:88:e2:fd:3a:aa:a7:7b:26:c4:d4:65:47:e2:67:b0:0a:
76:df:1d:f1:a1:20:00:5b:c2:4e:9b:83:3c:ab:ac:54:97:a7:
3e:1a:94:98:1f:be:15:88:73:3b:43:85:5c:1f:d9:0d:b9:5d:
a5:df:19:b7:38:af:c1:c4:d1:e8:2b:7d:b4:12:4d:ed:bd:de:
e4:8b:29:15:25:a3:6f:ad:2e:b3:13:b6:a4:01:65:33:64:23:
0a:ee:90:15:be:5b:b8:2d:fc:88:d2:5d:db:fb:4c:ea:07:ec:
58:b7:cc:15:11:51:65:10:ef:2a:e6:4e:7b:93:18:fd:bb:39:
b7:ff:70:07:86:c2:b7:d0:e2:21:ff:30:fa:ff:da:6f:86:90:
63:e1:b1:a6:63:85:dc:bd:38:71:c8:3b:cb:10:ef:af:96:17:
1b:51:17:43:b0:ab:c3:b4:b5:d0:5c:3d:66:f7:dc:35:f4:6e:
ef:0d:c3:6d:42:f4:7d:df:dc:2d:dc:28:5a:78:9a:51:a0:2e:
cb:06:47:16:07:18:1d:8a:65:02:a5:8f:fb:cd:20:38:56:1d:
75:b1:a3:98:04:cd:e8:27:ac:56:49:09:84:e5:18:20:59:1d:
8f:48:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client