Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: vV9weXWMSuK2DIwzFeXTp5O3X/HGdws5jDgaMrvytMk=
Subject key identifier: 48:4A:66:8F:DA:4E:24:83:20:BD:A8:E1:42:A5:1B:0E:74:EE:3D:1D
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01962E2AEA8F0A7FF4BE5B96CD3B7FC37086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 09E2
Signing time: Sun 13 Apr 2025 08:01:26 +0000
Manifest this update: Sun 13 Apr 2025 08:01:26 +0000
Manifest next update: Mon 14 Apr 2025 08:01:26 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: fXKYc/rZY1LdbXgQnle5clbEe2sL+AeRC0Qo1CQiTzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:ea:8f:0a:7f:f4:be:5b:96:cd:3b:7f:c3:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Apr 13 08:01:26 2025 GMT
Not After : Apr 14 08:01:26 2025 GMT
Subject: CN=484a668fda4e248320bda8e142a51b0e74ee3d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:63:72:c5:fc:8e:0a:bd:01:a7:18:60:f0:
6e:9c:a1:2e:18:02:d3:ce:d0:04:79:89:45:5e:8f:
28:e4:e7:88:33:1d:56:0f:9e:1e:64:e9:1b:fd:ef:
20:ec:3f:a8:5f:6a:c5:08:aa:ad:7b:f5:7c:b3:53:
be:87:0e:41:1f:c7:1d:59:64:69:ea:7d:7b:dc:bf:
42:55:4e:af:4d:b7:26:68:9e:6d:30:e4:e9:b7:d0:
c1:35:df:e0:f0:88:ca:ea:e6:73:72:1c:35:5e:90:
b0:35:43:2c:31:5a:cd:a2:76:e3:fb:58:52:41:d6:
b5:0f:5b:27:11:e5:4f:9f:5f:4f:ca:73:da:8b:78:
c5:df:0e:83:bf:c1:3d:4f:d4:cc:ec:2d:c1:38:22:
29:82:53:e6:71:7c:87:56:76:36:b2:fe:b9:6d:a6:
3e:d8:5f:9d:37:a5:bd:5d:60:c5:cb:ff:76:9c:50:
87:88:49:69:a4:03:e9:07:e1:5d:27:95:09:4f:c2:
42:23:f9:ef:7d:94:3b:d6:a5:61:55:0d:07:cb:9e:
ea:c7:8d:f8:ac:97:f6:77:69:af:1a:cd:0c:e9:f7:
80:af:3d:fe:84:0a:75:f3:58:23:bd:fc:d6:6c:ac:
b0:5b:1a:11:1a:26:28:f4:20:a4:b5:dc:0c:ef:35:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:66:8F:DA:4E:24:83:20:BD:A8:E1:42:A5:1B:0E:74:EE:3D:1D
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:24:4d:5f:bd:9e:06:1f:3d:33:6e:9f:2b:dc:4b:5c:48:07:
49:7a:a1:6a:fc:06:99:ce:87:6d:fe:ee:f1:ba:a9:1c:63:dd:
64:a9:9e:ce:aa:04:ef:8c:1f:f3:ba:10:7c:76:d8:db:76:f3:
b8:c0:5a:a7:6d:96:95:55:40:e5:fe:ef:96:8a:db:63:4f:56:
17:0b:ef:48:76:23:69:45:30:c6:11:da:82:73:32:a8:01:b9:
32:a8:a5:53:f3:fb:a6:e9:46:f0:07:02:91:04:2b:7b:78:1a:
54:0f:7e:74:f4:85:1f:e3:84:e5:e5:ba:14:4e:6e:03:0b:00:
d7:8c:dd:b0:e2:db:4d:d9:e9:67:33:5a:56:93:cf:fe:3c:52:
c5:1f:55:73:c9:81:e8:63:86:af:cd:9e:2d:da:b7:21:b1:ff:
10:8e:fc:48:db:83:58:7b:44:ba:2d:47:d9:35:59:85:7b:ac:
ef:38:e5:d0:88:15:08:99:2e:81:04:07:c6:50:70:bb:d1:73:
40:80:25:27:ec:87:24:1f:33:01:a5:a1:12:4b:99:94:9d:c9:
dd:1d:fa:af:15:0e:00:6d:5c:4b:b2:58:0d:52:ff:7f:ea:8e:
d1:9a:33:d3:b5:45:60:05:d7:e2:20:b2:f0:2d:40:8b:58:6d:
2b:02:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net