Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
File: KNX3dyLGFlf4HJ965JznKbWA9ng.mft (raw, json)
Hash identifier: MfBxOY4qQCcV5x/ULB8AAX5d0IUmNuMV4fNO8DWlzlI=
Subject key identifier: 98:1F:23:BC:F2:AE:E5:5A:28:59:90:01:A8:D7:0A:2D:FF:FA:94:2F
Authority key identifier: 28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
Certificate issuer: /CN=28d5f77722c61657f81c9f7ae49ce729b580f678
Certificate serial: 0194BBCEBF318905D3BF36345F1B9D407988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: KNX3dyLGFlf4HJ965JznKbWA9ng.crl (hash: 7bYfT26iDQNMkP+iM48XZFkbYrrkCZQRG72noryAeJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bf:31:89:05:d3:bf:36:34:5f:1b:9d:40:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d5f77722c61657f81c9f7ae49ce729b580f678
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=981f23bcf2aee55a28599001a8d70a2dfffa942f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:53:cc:55:05:e0:d8:48:a9:f3:b6:cc:93:
c9:c2:a6:36:28:a3:d2:88:7c:22:9b:be:2a:9d:93:
16:0f:26:8a:6e:ee:ef:01:ae:a6:ed:0d:07:9a:df:
b2:51:5d:df:54:92:91:be:68:6f:cb:10:e1:fd:9d:
77:2b:d0:56:aa:99:6a:d9:60:53:eb:f3:52:ca:b7:
3e:a9:29:0a:de:cc:1e:00:ac:5d:d8:5c:8b:5d:39:
96:de:66:d6:78:bd:d6:1a:38:9d:97:77:44:43:0e:
e4:4c:7c:50:1f:d9:57:27:1d:29:28:64:cc:21:ac:
ad:c1:ac:da:0c:44:b8:0b:ce:83:95:4c:cb:7f:49:
75:7e:b3:90:de:ee:2c:fd:73:60:5b:d2:ec:7d:72:
e3:cd:57:bc:23:58:92:92:ee:38:16:23:07:fb:cb:
84:6b:3b:72:b9:55:9a:4b:91:45:de:83:0b:de:1c:
16:db:92:a9:7c:c6:52:c9:bc:74:7c:bd:1e:3b:d8:
24:9d:bf:de:50:d4:c5:94:20:2e:ea:9a:1b:99:5a:
7a:7b:7e:36:23:49:2b:2b:73:1a:a8:ca:cb:04:ef:
c7:f9:50:7e:b2:83:01:db:fd:9d:51:38:76:eb:72:
fd:e5:f3:a6:7c:43:70:1b:19:ad:dc:df:32:62:50:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1F:23:BC:F2:AE:E5:5A:28:59:90:01:A8:D7:0A:2D:FF:FA:94:2F
X509v3 Authority Key Identifier:
keyid:28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8c:13:4a:63:f5:4c:98:d7:e1:61:f5:6f:9a:70:c6:37:32:
6e:73:58:7a:5b:32:f3:89:26:eb:fc:33:c5:8f:70:48:a7:14:
c7:a0:6a:b6:19:03:ec:7e:10:13:28:a3:dd:ba:65:8b:64:e1:
88:3d:f5:98:5a:c9:86:d6:5f:da:02:82:05:ca:08:1c:87:be:
0a:89:6f:f2:d8:e5:22:4d:c5:c1:05:f4:46:d8:18:3f:f8:a9:
89:4d:8e:9f:76:6f:55:f7:35:50:81:51:64:a9:a3:08:c3:00:
f2:fe:a3:3f:3b:bf:83:1d:68:47:69:9b:3f:80:6d:2a:dd:c1:
e8:a1:6f:5d:63:3e:e2:1d:60:9b:fc:92:94:85:10:9f:1c:89:
5c:da:64:cc:4c:b2:53:8d:f8:c6:e8:e4:d1:55:b5:6e:36:8e:
9c:6f:09:2c:26:9b:3e:b9:fc:4e:ac:e8:f3:63:75:69:da:f2:
4f:e2:ee:d1:56:39:84:73:d3:d4:3c:ac:a4:e6:a9:dc:12:92:
ee:9e:75:4c:ff:c3:0f:91:78:24:1b:9a:9b:5b:00:9c:a2:67:
e3:2f:8c:6d:fc:08:3c:ff:70:2b:ae:75:05:cd:50:6c:92:f9:
2c:e4:e6:b8:c0:be:cd:b4:09:58:f7:09:07:b6:9c:cd:1f:c5:
e4:74:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client