Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft
File: ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft (raw, json)
Hash identifier: FkbYHFiwcTaFnxYCIERZ6z1UqR2OlaXG2O81G/rab2Q=
Subject key identifier: BF:82:C7:8A:F4:F6:50:0E:8B:2E:94:49:65:8E:CD:7B:20:6A:1D:59
Authority key identifier: 93:2F:B8:2B:8D:02:90:B1:CA:58:CC:7F:1B:ED:63:E4:E4:37:A0:CB
Certificate issuer: /CN=932fb82b8d0290b1ca58cc7f1bed63e4e437a0cb
Certificate serial: 0194BC72B7AA7B8DB946B53217CDE9D9D9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky-4K40CkLHKWMx_G-1j5OQ3oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft
Manifest number: 0C14
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: ky-4K40CkLHKWMx_G-1j5OQ3oMs.crl (hash: h4QlIRp661UIpB7i6jtan29oLXwLEn9VaBsEsH8sD5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b7:aa:7b:8d:b9:46:b5:32:17:cd:e9:d9:d9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932fb82b8d0290b1ca58cc7f1bed63e4e437a0cb
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=bf82c78af4f6500e8b2e9449658ecd7b206a1d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:44:9e:c3:3c:fe:49:93:b3:2d:7e:07:54:
51:50:14:cb:02:89:58:e5:1a:c3:ce:73:be:43:e3:
e0:55:26:5b:df:4a:56:9c:99:f7:57:ae:12:56:a7:
ce:f9:67:66:0a:7b:2c:03:a9:08:9f:9a:b8:9a:b2:
05:8d:19:40:8c:2f:b0:a5:44:42:c2:65:b1:a4:1a:
6a:20:16:07:e5:b8:a8:00:2d:e1:12:0b:e9:1a:62:
7b:38:fc:b1:b1:c7:b1:12:80:05:32:17:4e:eb:3e:
29:a1:88:8a:54:bb:a1:29:d6:2f:89:b3:74:fa:71:
ba:8b:84:04:c3:0f:0e:96:9c:aa:a8:73:0b:06:c5:
e0:25:c9:1c:23:0c:e8:f1:0c:52:a3:89:6a:af:e1:
e2:18:3d:89:83:10:27:c0:9c:cb:82:b0:a5:9c:52:
99:70:75:c7:88:03:0c:31:de:e3:aa:31:e2:dd:5c:
1d:b9:e2:e3:14:60:bb:f1:b7:34:13:84:ab:da:32:
53:93:72:75:59:27:f8:6f:d6:87:4f:96:c5:0e:dc:
d8:65:e3:1a:78:8f:cc:99:c1:77:e3:0c:25:a3:10:
1e:58:cb:2d:8a:bc:47:13:c9:42:03:7b:ba:eb:2a:
e0:42:f1:fb:46:aa:9e:ff:e1:2b:12:57:21:18:c9:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:C7:8A:F4:F6:50:0E:8B:2E:94:49:65:8E:CD:7B:20:6A:1D:59
X509v3 Authority Key Identifier:
keyid:93:2F:B8:2B:8D:02:90:B1:CA:58:CC:7F:1B:ED:63:E4:E4:37:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky-4K40CkLHKWMx_G-1j5OQ3oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4a:c6:d8:44:49:20:4b:24:be:48:a4:a7:ac:08:cf:56:d8:
0e:97:d6:90:0f:d0:87:8f:7b:34:47:4e:c2:a8:bb:22:11:f7:
7c:19:96:89:63:76:c0:02:32:5e:b4:e4:6f:1b:2b:32:60:11:
33:57:a9:2f:73:51:fe:11:a4:9f:96:0e:7f:22:d7:02:6f:61:
7b:8e:f5:46:37:f9:a8:37:e4:b8:ba:16:3f:8a:84:4c:2e:fc:
8f:d2:75:7f:90:ec:bb:df:99:f0:41:1d:47:d0:3f:ff:0b:f4:
8a:8d:22:72:bc:b3:2c:2c:3f:43:98:e2:36:e4:5f:1a:48:4d:
b5:b4:d6:9d:81:24:14:72:4d:80:10:04:44:46:2c:c0:8f:b8:
99:12:a4:01:0b:18:83:ac:ad:d9:c2:83:27:e0:68:95:fc:dc:
96:da:29:73:28:47:62:1f:60:b7:5b:b1:41:2a:9b:e7:42:cc:
ed:16:20:7e:c8:bd:ec:e2:cf:66:8a:06:8a:af:ce:3a:21:01:
dd:4c:f2:48:1e:5b:6b:65:ee:3c:f3:f7:88:90:63:bd:99:f9:
48:48:45:4f:d6:8a:7e:99:21:0a:1c:96:90:32:19:44:36:24:
08:d5:a8:19:bc:59:d0:3b:3b:62:35:fe:d7:38:25:f1:68:76:
4c:f4:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:30 2025 by rpki-client