Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/34780b-9bcf-4e90-96e9-342142a50841/1/KN_naEsTGsn-ml1sC739qzCbXhY.mft
File: KN_naEsTGsn-ml1sC739qzCbXhY.mft (raw, json)
Hash identifier: 1tmw5t4w90OlT068w7U08d9oO/W2voe3hHyvuSxwZew=
Subject key identifier: BA:E1:EA:41:D1:8C:8F:27:9F:18:C2:CB:9E:35:CE:19:D5:6B:85:79
Authority key identifier: 28:DF:E7:68:4B:13:1A:C9:FE:9A:5D:6C:0B:BD:FD:AB:30:9B:5E:16
Certificate issuer: /CN=28dfe7684b131ac9fe9a5d6c0bbdfdab309b5e16
Certificate serial: 04520FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KN_naEsTGsn-ml1sC739qzCbXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/34780b-9bcf-4e90-96e9-342142a50841/1/KN_naEsTGsn-ml1sC739qzCbXhY.mft
Manifest number: 0595
Signing time: Thu 17 Mar 2022 11:05:48 +0000
Manifest this update: Thu 17 Mar 2022 11:05:48 +0000
Manifest next update: Fri 18 Mar 2022 11:05:48 +0000
Files and hashes: 1: KN_naEsTGsn-ml1sC739qzCbXhY.crl (hash: s4vIbdIHm5PFOXrY/d44zE4ezomPICWmmQhuUZkqUiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72486888 (0x4520fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dfe7684b131ac9fe9a5d6c0bbdfdab309b5e16
Validity
Not Before: Mar 17 11:05:48 2022 GMT
Not After : Mar 18 11:05:48 2022 GMT
Subject: CN=bae1ea41d18c8f279f18c2cb9e35ce19d56b8579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:7c:d9:83:4d:ec:db:2f:94:b5:4a:bc:a7:
1c:c7:50:b8:59:63:0b:ba:0f:46:38:bb:3a:a0:ed:
20:17:80:07:81:2d:ba:e6:7c:d3:a9:d0:0c:cb:c4:
01:6d:b7:e0:ca:4a:ba:60:47:dd:fc:33:4f:48:c5:
f3:5d:85:94:63:60:5e:10:17:8d:a3:a8:b6:9a:0b:
2f:fb:fe:f6:d6:dc:0a:7a:7f:e9:dc:49:94:05:9b:
81:22:45:c8:57:40:5f:63:ad:31:ca:7f:ef:6a:26:
86:05:78:da:a0:3f:d0:f4:38:a2:54:6d:d9:ca:fd:
d1:10:39:1b:42:a2:12:8e:c2:c5:58:57:90:41:c7:
e8:dc:38:2f:5f:f6:ce:9e:55:03:4b:f3:1f:53:b9:
dc:54:6a:18:69:f3:80:c1:f8:95:2f:94:9a:66:9e:
ae:07:60:39:e8:30:25:0e:57:dd:c7:b5:c4:03:ff:
ce:b5:e0:03:ec:7a:68:32:04:6c:28:8e:30:ab:bf:
86:1e:db:a7:7d:f2:18:d6:68:eb:d4:0d:bc:9f:ac:
0e:de:a0:0f:2b:d4:25:17:ec:6f:9d:64:f4:1a:90:
02:60:23:6b:a1:6d:06:97:71:d9:01:c8:5f:d1:c3:
af:21:9f:d2:69:cc:bb:3e:a2:7b:5a:d3:a1:69:6f:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:EA:41:D1:8C:8F:27:9F:18:C2:CB:9E:35:CE:19:D5:6B:85:79
X509v3 Authority Key Identifier:
keyid:28:DF:E7:68:4B:13:1A:C9:FE:9A:5D:6C:0B:BD:FD:AB:30:9B:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KN_naEsTGsn-ml1sC739qzCbXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/34780b-9bcf-4e90-96e9-342142a50841/1/KN_naEsTGsn-ml1sC739qzCbXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/34780b-9bcf-4e90-96e9-342142a50841/1/KN_naEsTGsn-ml1sC739qzCbXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:7a:ad:6d:85:30:5c:fd:6c:aa:b6:03:3d:2c:f9:f3:54:
f0:59:1e:ff:c9:b0:6c:b1:7c:e4:55:2f:15:59:d3:76:c5:bd:
95:66:5b:e0:70:00:ac:48:d3:c3:50:82:3f:00:8c:90:c2:48:
24:af:45:2c:af:48:bd:74:48:de:47:6e:05:7b:0e:c8:07:f6:
51:40:25:64:a9:ed:1f:7f:46:30:f8:ab:06:b7:33:ad:37:d0:
be:c3:0e:88:99:92:8b:3d:d2:ee:d7:f4:39:48:22:d3:45:3c:
ff:81:e4:dd:33:d7:19:d9:dd:33:16:85:15:a6:21:ab:e3:fc:
b7:7a:b4:38:be:46:ae:2c:e1:af:02:73:c5:bc:5f:e0:9b:88:
31:28:e4:52:30:5e:4f:df:9c:91:ea:92:e3:8f:3c:b0:41:62:
cb:26:22:05:7d:ce:00:4c:63:3e:1e:fb:8e:00:8f:22:5b:00:
0c:b6:e7:64:0e:07:ad:4d:6d:fd:c4:65:52:63:69:77:e9:e8:
50:f7:9d:db:5b:ea:a6:8d:1c:8c:71:c5:1e:76:81:fb:38:9c:
a0:96:83:3f:80:cd:57:50:1e:98:e3:5d:b8:3f:02:2c:a1:f8:
c3:13:e3:d6:b6:fe:61:4a:0a:2d:78:73:c9:ab:d5:34:7e:3f:
c1:6a:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:03 2025 by rpki-client