Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.mft
File: krknliKgzX1YqiukNvvj8gsX6z0.mft (raw, json)
Hash identifier: ClkeYFWm/lXm9t/PZg48dmsnrBrUpXLN6isrwlBuGNE=
Subject key identifier: 73:3F:0B:62:06:68:15:AE:B7:24:73:2F:8B:68:20:B7:AC:72:CF:02
Authority key identifier: 92:B9:27:96:22:A0:CD:7D:58:AA:2B:A4:36:FB:E3:F2:0B:17:EB:3D
Certificate issuer: /CN=92b9279622a0cd7d58aa2ba436fbe3f20b17eb3d
Certificate serial: 0192F5FC16949249AC4045AA3319EFF1C023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krknliKgzX1YqiukNvvj8gsX6z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.mft
Manifest number: 05A4
Signing time: Mon 04 Nov 2024 07:03:11 +0000
Manifest this update: Mon 04 Nov 2024 07:03:11 +0000
Manifest next update: Tue 05 Nov 2024 07:03:11 +0000
Files and hashes: 1: krknliKgzX1YqiukNvvj8gsX6z0.crl (hash: j29flxD+2E7e4kM2qUW88zAdQw2HkepL+E77Rn/R2+0=)
2: ojqzm1WVnOB7vsu9340f9HR7484.roa (hash: fMJAmwD5O+Vok7lvTIFDerOXura/7Kbd0ByjbHDi0VE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f5:fc:16:94:92:49:ac:40:45:aa:33:19:ef:f1:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b9279622a0cd7d58aa2ba436fbe3f20b17eb3d
Validity
Not Before: Nov 4 07:03:11 2024 GMT
Not After : Nov 5 07:03:11 2024 GMT
Subject: CN=733f0b62066815aeb724732f8b6820b7ac72cf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:5a:5f:e0:7b:ca:13:ed:05:8f:94:01:0a:
36:a7:b0:20:f4:ab:5d:9e:05:f2:cc:e5:d2:d3:fe:
ed:10:04:2f:7f:75:f5:bf:18:fc:81:41:ad:c5:3c:
77:8b:ad:bd:ed:1e:75:11:3a:6d:0e:f9:59:80:6b:
44:18:6f:39:77:47:38:75:a3:df:19:33:77:db:c0:
72:10:71:a5:2c:0b:5e:60:00:af:6c:31:9d:07:bc:
cd:d1:4a:b0:67:48:2d:2d:35:36:1a:99:25:d6:a9:
9f:81:37:98:96:a2:04:63:ab:48:84:15:9f:e7:21:
48:42:83:74:90:b2:9e:40:b4:4f:2e:77:15:39:90:
9a:6f:96:a9:75:47:17:7f:89:d9:77:db:2c:c6:81:
b7:ec:9f:09:19:9d:15:ee:83:b5:ca:d2:05:18:3b:
75:6a:4a:fd:dd:cc:0a:15:41:fc:6b:6f:79:b8:bf:
8b:ba:1c:99:52:ad:2a:ab:18:8b:12:eb:2f:9a:d7:
ae:8a:84:eb:13:95:cc:84:f3:6f:5d:c5:62:b3:b7:
10:86:29:57:a7:0e:c1:d8:50:db:34:24:94:cc:d4:
65:c7:33:62:8e:4a:d0:65:f3:86:fb:62:18:41:b9:
96:46:e4:f0:c8:1e:ae:7a:11:11:8f:99:ce:44:fd:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:0B:62:06:68:15:AE:B7:24:73:2F:8B:68:20:B7:AC:72:CF:02
X509v3 Authority Key Identifier:
keyid:92:B9:27:96:22:A0:CD:7D:58:AA:2B:A4:36:FB:E3:F2:0B:17:EB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krknliKgzX1YqiukNvvj8gsX6z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d0:33:a4:ab:d6:fc:31:cb:96:79:de:e2:6c:24:20:84:b1:
dd:8c:2d:91:e6:4d:13:9a:80:cd:ef:26:28:9b:84:ee:11:64:
f6:64:f9:f6:0b:72:40:81:d2:f9:5c:64:ae:dc:86:14:46:45:
5d:0c:0d:7b:cc:13:3f:47:73:49:5d:a6:10:45:04:e0:15:21:
70:72:ac:0e:2c:4e:ee:1a:b3:bf:73:02:c7:07:33:a4:b6:36:
0b:56:3c:90:af:d3:fd:50:7a:9f:97:29:cd:4d:ef:0d:56:30:
dc:54:2d:90:b4:e0:31:ab:6d:59:a1:db:23:33:6d:64:fb:e9:
21:84:a6:e2:f0:7b:10:37:b6:75:de:8d:05:6b:30:75:eb:e8:
79:0d:0a:5f:d9:d7:0b:43:f1:a6:35:d2:b9:0a:7e:f8:9a:79:
c0:e1:0c:58:55:29:a2:c2:d2:54:a4:1c:c0:68:56:2f:13:f3:
57:d9:d4:00:57:70:2a:48:69:49:d3:61:06:01:b4:a6:6f:d5:
3a:58:5c:47:a8:86:e7:ef:86:6f:02:16:98:37:dc:85:fe:51:
d1:20:d0:f8:50:82:21:9f:21:77:6b:96:8e:26:e1:a4:4a:19:
f5:3d:1c:52:69:1f:4a:52:4e:4d:14:eb:df:6a:a6:35:45:05:
f1:f7:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:52 2025 by rpki-client