Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: 6xX1e6HsEEte1RD+6jURme3knIdR47lrENO6Sr8Vp8w=
Subject key identifier: 4F:5D:10:65:59:97:42:23:0A:56:0D:CB:A9:A4:F5:A2:80:C0:82:57
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 0194BC3CB1B04628E66E518D56B5BEEA6343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: Cprrtvwcj09PH2eOFT/H8O3bepGaRmLCPtpv08TA5kQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b1:b0:46:28:e6:6e:51:8d:56:b5:be:ea:63:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=4f5d1065599742230a560dcba9a4f5a280c08257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:dd:04:07:b7:5d:ac:e7:0d:7c:81:36:59:
41:02:81:07:58:7a:05:4f:ff:c7:1e:04:eb:a3:ae:
37:7e:23:9c:9b:a0:c6:70:a6:00:1a:0b:c0:4a:7c:
7a:09:34:fb:51:78:59:11:b5:d8:4b:01:01:68:ac:
dc:77:f3:91:2c:0c:55:5e:86:be:9b:26:91:08:83:
90:e0:54:83:82:c3:df:e8:0f:e3:88:d5:01:83:31:
ca:8e:21:00:b2:e4:b3:c8:15:e2:cf:a7:49:42:2d:
d6:d1:d1:45:ad:23:9c:e5:1b:2f:f0:09:a9:db:57:
24:81:5e:6d:97:62:50:0b:9d:54:e5:59:e9:cf:3f:
09:56:ed:41:de:9a:82:32:3b:01:ea:1b:2b:2e:a9:
8a:6c:47:26:e4:4d:14:62:e3:be:e0:c5:b9:44:65:
d8:e6:42:09:af:6b:24:cc:f5:5e:9a:b4:58:d3:8f:
73:4d:d1:54:43:0c:a5:26:f8:85:82:57:9e:36:07:
eb:f2:65:52:5c:67:6a:ab:4b:e7:b1:74:09:03:57:
1c:d5:cb:c8:ad:d7:a7:48:aa:0c:76:32:99:fe:8c:
cc:e3:94:1e:87:13:0b:1b:4b:a6:35:aa:65:53:4c:
f9:f6:ec:27:ca:74:c3:8b:15:86:81:35:88:47:fb:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:10:65:59:97:42:23:0A:56:0D:CB:A9:A4:F5:A2:80:C0:82:57
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f0:8f:10:4b:82:c9:9a:8c:41:b1:55:4f:91:2f:34:ec:5d:
3b:81:46:20:65:ba:ee:c1:40:d8:11:34:84:35:ca:a0:f6:dd:
fe:e4:9c:0c:5d:4a:c9:25:da:a7:6d:a7:99:79:fd:35:be:4c:
b6:cb:3e:ae:37:8e:5a:a0:40:09:40:1c:b2:df:15:16:ba:db:
57:03:5e:c9:8f:13:a5:f4:bd:7a:c1:97:0a:4b:dd:dc:5e:3f:
6a:81:eb:45:68:d8:e1:fb:34:b5:e0:2b:74:e7:b2:0d:54:3b:
65:67:c5:b8:b8:e3:69:56:18:64:58:15:17:90:da:d4:c2:c7:
90:bf:1b:31:6b:41:86:51:c8:4b:ba:85:74:86:4c:14:8d:ec:
0b:c8:e2:11:5d:bf:48:24:96:d7:4a:53:1f:66:2f:3a:08:ec:
b0:62:a0:a1:4b:7b:f2:a6:88:1a:47:a2:36:4f:06:64:30:7f:
28:d1:1f:f5:e3:46:f7:63:d9:ba:e7:d9:f1:b4:65:fb:f0:78:
1c:11:e3:b4:64:4e:c6:bc:7a:ad:f0:ea:51:6e:9e:b8:a6:43:
9e:3d:2c:1a:0b:e2:37:08:5c:a8:05:af:26:46:e3:ba:0e:65:
20:e1:5d:0e:79:a2:53:ff:93:1a:1b:94:98:f0:64:24:38:eb:
90:f5:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client