Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: goT9FVcXdje8/Xc6o8/mrdcE5ZhthaeZWyfq86Qhcgo=
Subject key identifier: B0:5B:B6:02:F0:69:19:9B:B1:71:DD:2C:A0:99:47:6E:59:CA:1D:40
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 0194BD857D5021E7621FA96DEC89621D839E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 0F29
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: I/IejuzFVBwBAu31+IfNj569iz8AsM1rv3upNDqLQ1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:50:21:e7:62:1f:a9:6d:ec:89:62:1d:83:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=b05bb602f069199bb171dd2ca099476e59ca1d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:b2:54:14:40:1f:f4:04:fe:19:92:36:b7:
1c:fb:46:de:c5:a9:be:35:df:29:74:fa:5a:17:ad:
7f:ca:c8:ce:25:38:2d:a1:19:83:1e:8d:b8:d1:02:
19:d2:d2:15:17:0c:b4:cc:8d:0b:a4:df:f7:03:21:
2d:e7:0f:25:68:0c:e4:a1:79:7b:fb:87:c8:d4:45:
dc:93:08:39:99:a7:5a:23:34:9f:7c:fb:08:08:c4:
89:f6:8d:ca:84:cf:95:33:f5:35:07:b4:8c:34:53:
c4:28:0c:87:5f:4f:a1:a3:24:44:1a:73:cf:b7:6d:
64:98:3f:4a:92:06:a0:b9:79:79:e0:a5:e3:18:d7:
e4:64:37:01:8d:2c:d3:c3:22:71:f8:54:cc:ba:71:
e0:ae:d9:28:db:7c:6b:7d:ee:cf:8f:09:0b:4d:d0:
8d:8a:5f:74:08:60:c6:8b:97:f0:4a:9a:1a:a6:5d:
b1:5b:78:db:9c:c7:06:20:29:6b:ef:a6:d4:cd:03:
14:d1:d2:e4:14:e2:23:37:6e:0f:e0:48:12:26:a2:
ee:34:1e:83:b5:28:b2:45:8f:36:8d:e8:71:9c:ae:
d8:4e:5f:7e:28:81:52:b8:51:e7:e9:cd:9a:de:be:
50:14:19:5f:68:6d:b4:d9:fe:47:16:a1:75:76:f8:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5B:B6:02:F0:69:19:9B:B1:71:DD:2C:A0:99:47:6E:59:CA:1D:40
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d9:20:1a:3c:a8:a6:e6:3e:48:63:c1:a6:23:59:8e:09:53:
0a:04:60:eb:57:5f:b7:75:2f:13:1d:e8:3b:f9:20:cb:74:b1:
49:9d:32:76:67:43:01:53:17:7b:02:cb:5b:3b:53:67:6b:64:
ec:3f:a7:ca:aa:7c:1a:27:75:5a:bf:18:7d:4b:93:56:c1:89:
83:30:8c:0b:f9:33:04:82:f8:d9:24:35:bd:4f:1b:81:d0:f4:
24:53:49:88:50:f3:0c:26:d0:56:5f:5b:6c:b2:92:1a:f1:99:
81:df:8a:e8:a1:c3:5c:e2:91:03:a6:ac:ff:e0:6f:0d:26:9e:
15:7b:eb:4e:fb:09:c3:a5:21:d0:2c:94:3a:5b:e5:0a:2b:e1:
d2:93:71:7e:8a:50:29:9d:df:86:65:f0:ed:76:13:ae:ab:f5:
39:c8:42:3a:1f:e9:c7:c8:34:f0:01:3d:e4:68:e5:0f:af:20:
d5:a8:55:0c:46:f2:fb:5e:f9:5b:e5:be:f0:97:cc:fe:9f:d5:
93:a2:13:79:f5:33:b7:78:c4:68:3e:33:ab:b1:72:2b:2f:fd:
e4:de:b4:a9:e7:65:ad:bf:d6:fd:81:a9:ec:31:2b:40:af:51:
9d:73:34:56:4b:58:c1:97:71:5b:95:df:db:ed:e2:41:c5:69:
3c:27:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:19 2025 by rpki-client