Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: 4H2uB/g6JmlJKa8SHM0bfpxbMxaH7/CoVxZkjSkppUY=
Subject key identifier: 6F:AB:58:52:70:65:B1:2E:F6:44:CC:D5:49:B9:0E:82:5B:A7:84:C6
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 0194BBCE3EB4C8716D5CE8CB85A4137765F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 11FA
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: YY+jM+4p5b2Fs3+sOYTsFoqpzdog7mOWRMWgpqRsfkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3e:b4:c8:71:6d:5c:e8:cb:85:a4:13:77:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=6fab58527065b12ef644ccd549b90e825ba784c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:82:70:53:fa:76:3f:49:ec:5b:f9:16:7e:
50:8c:d2:26:ba:eb:06:ce:91:f6:4c:1c:0d:3a:06:
af:eb:a3:88:a9:f8:d1:9b:db:c0:87:0a:9c:83:72:
af:08:b6:4f:ff:bc:57:aa:f5:42:e7:97:a3:4a:b7:
7e:f6:39:f6:fe:40:e1:7c:5d:ad:2e:3f:f4:dc:4d:
11:b8:d5:9b:bf:92:ed:61:25:9f:03:a0:de:b2:66:
8c:ea:1d:92:28:38:d6:41:83:0b:b4:7f:40:48:af:
05:2e:d4:2a:87:76:16:52:4c:8a:b2:e3:99:ef:d4:
3a:e5:68:c9:76:6d:41:d4:35:94:b8:b8:10:df:af:
ec:12:07:08:3e:a0:a9:a2:5d:b4:c4:2c:68:50:2e:
16:52:3c:94:fe:4e:2d:75:84:67:53:4c:6f:76:09:
21:dd:4f:e6:83:cc:71:74:41:ec:49:5f:b5:d6:a1:
37:02:79:e1:be:5e:21:b2:a1:b3:dd:29:9c:44:f4:
ea:6c:91:b5:e7:3e:7e:ae:c4:e4:af:1f:3b:90:78:
a6:fd:87:c7:4a:99:0f:46:a6:03:b0:26:4b:f0:35:
5e:f7:bf:95:d7:19:75:7c:f7:44:fe:cf:55:45:15:
00:05:05:18:dc:c0:53:07:bb:26:c0:16:d9:c2:a7:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:58:52:70:65:B1:2E:F6:44:CC:D5:49:B9:0E:82:5B:A7:84:C6
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:99:d5:59:ad:3a:92:c4:93:d5:12:5d:34:e0:e8:39:e3:79:
31:7d:3f:1b:d8:7d:80:60:79:cb:a2:cb:38:64:30:0e:60:e9:
77:f4:2a:c6:e6:5a:5b:2e:ae:22:44:c4:a3:61:65:b0:5c:8e:
e3:46:08:24:b3:4a:97:c0:d9:ba:46:8e:1f:1e:bd:e9:ef:30:
97:f4:17:71:ce:90:21:b7:11:fb:62:7e:9b:c9:9d:94:b9:5a:
86:b2:de:16:26:fd:91:3f:db:b3:40:bd:92:1a:e0:bd:38:f1:
92:19:34:6d:35:d2:05:46:36:e9:60:ec:3e:8d:b3:69:50:02:
05:bf:f4:d1:be:19:22:df:7e:f1:ec:76:58:ef:38:b6:03:9b:
90:1b:04:14:53:24:ff:74:50:37:46:0a:51:8b:2a:78:63:1f:
8a:66:5b:f7:bd:2a:c4:eb:3b:90:13:b1:12:ca:85:41:2b:69:
73:8f:ec:e9:b2:30:31:b4:e2:8b:56:dd:15:a5:2f:9d:b9:3e:
0a:ed:06:4d:a1:61:0b:1a:20:8f:3d:56:87:dc:2d:3a:21:ff:
98:2d:26:ed:85:a1:08:88:62:69:8c:30:8b:e6:9f:bb:7f:49:
fe:20:c2:9d:d6:4e:df:e6:ed:8f:8c:ab:ce:c2:5a:1c:1e:d3:
05:8a:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:06 2025 by rpki-client