Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: OLJXGL7CCBentNC7f9dnv/v/NSdGitBP96PugJAJJ60=
Subject key identifier: 62:31:6B:67:48:5C:24:C2:4A:D6:92:8B:86:50:FB:E6:1B:19:AF:22
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 0194BBCE41C5247C937A2087D7EFC496528B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: nxeBduh4qZ1pqgqTghks2kO8LmUqGsj292oObOpLWlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:41:c5:24:7c:93:7a:20:87:d7:ef:c4:96:52:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=62316b67485c24c24ad6928b8650fbe61b19af22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:66:89:11:53:40:e7:c4:eb:c1:1e:f1:0a:
64:9c:2d:5d:f6:54:7d:88:be:7b:c9:d5:2b:75:d8:
c0:1b:21:c4:b9:d6:b8:f3:e1:63:3a:37:fa:39:6f:
1b:f6:47:38:a2:ce:4f:3a:91:9a:c1:0b:14:f5:19:
d5:43:73:32:fb:9f:12:79:3e:7e:7e:7a:86:e0:cd:
c1:1b:81:06:c0:b7:13:45:36:8f:37:89:31:1d:f4:
6f:4c:e3:36:8e:1b:85:f0:a0:6c:71:5d:64:b6:b9:
8a:dd:77:f6:c3:c5:a7:31:64:25:81:2e:9f:c2:0a:
b9:b9:43:16:a7:2c:36:df:ac:c1:e9:b4:e8:c5:13:
56:61:aa:11:7d:bf:b1:da:e7:32:92:93:d7:41:60:
5f:e1:e0:dd:2c:b3:1d:70:96:43:f5:6f:2f:bd:2e:
83:38:c3:d3:9a:2c:3e:34:2a:9d:7c:8f:4b:39:93:
02:7f:80:cb:b9:49:e2:10:7a:cb:d5:01:d8:5f:8f:
59:a2:d2:20:41:0c:05:4f:dc:09:4a:7b:82:c3:19:
c3:52:92:29:3e:0b:8c:3a:10:05:4c:2d:74:8b:4b:
0c:f1:9c:3a:b1:a2:66:3c:51:5b:d2:ed:94:26:ce:
b7:5d:a1:3f:a5:88:a3:53:ae:f0:71:61:09:b9:ae:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:6B:67:48:5C:24:C2:4A:D6:92:8B:86:50:FB:E6:1B:19:AF:22
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fa:71:f8:50:ad:eb:48:f4:98:11:bb:a7:73:13:cb:7e:29:
96:6d:47:f2:a6:63:99:c7:3f:1b:f5:c1:ef:50:67:23:ee:de:
a2:69:f9:4e:f7:1e:18:30:be:39:e1:97:20:45:f0:2e:02:75:
99:05:3b:65:6c:81:61:c4:84:52:9e:8e:4a:40:ca:3b:04:5b:
6d:10:a6:bb:70:f5:45:3d:0b:d3:1f:10:28:a1:4b:2c:da:5c:
cc:5a:55:0e:3a:f4:51:62:13:d0:20:d7:97:35:b2:22:b5:29:
98:06:bf:5d:aa:1f:5f:57:d5:0d:19:fc:8e:b6:fe:d2:b8:1e:
7e:aa:b8:87:0b:ab:74:f8:0b:df:8d:c9:88:31:7c:69:27:3b:
ba:06:0f:1a:78:e1:7c:3f:20:39:2c:f1:4a:05:02:8f:34:88:
82:bc:07:c5:50:30:a4:dd:dd:1d:18:6c:5e:e4:e2:a9:96:48:
1c:41:3f:1b:b0:5e:52:75:78:8b:a6:9d:8f:da:2f:57:0f:18:
f1:86:9f:35:31:76:07:47:18:45:b2:41:25:44:c5:aa:02:a8:
93:3e:04:fc:e2:14:33:ca:bd:4c:88:9a:a3:aa:b1:60:0a:02:
28:f0:a6:0f:76:1d:1d:ed:a3:eb:f9:a2:c0:05:18:55:77:15:
6a:78:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:24 2025 by rpki-client