Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: r/94fonzSvuxb4Y0VuOfxXwF5d4fvZJA2gxYHB9MdjI=
Subject key identifier: BF:B6:DA:C5:AC:E8:5E:B5:71:F4:03:0E:BB:67:EB:35:68:EA:73:F9
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 0194BBCEEAE9F0E6B537F735506612FC47DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: CcQZ7MWs8Xs7py8ETgEhEiyQs7nqUdOlAc9ylRkmFig=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ea:e9:f0:e6:b5:37:f7:35:50:66:12:fc:47:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=bfb6dac5ace85eb571f4030ebb67eb3568ea73f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:b3:11:26:21:2b:fe:cd:42:ba:57:f8:2e:
05:40:67:98:d8:4c:11:c4:ed:3a:91:c2:c1:18:f3:
7d:75:cd:97:be:76:28:4f:60:12:0e:01:c3:4f:bb:
a1:3b:89:1f:46:82:87:95:b1:be:00:77:4c:33:ee:
69:ce:bd:52:a5:2b:79:8b:dc:0f:85:0d:ed:0a:78:
d2:6f:cd:f6:d7:75:49:35:05:c2:24:62:d9:e7:a3:
54:42:63:a8:0c:e4:c8:a8:34:fa:d2:5f:7d:52:17:
70:14:af:6c:b6:25:36:28:0d:52:58:cd:1e:cf:03:
12:60:e9:e9:ad:3d:f3:63:fd:e4:8c:0d:ac:ef:4e:
78:78:20:31:50:0a:cf:72:8f:72:2d:8b:4f:28:4d:
09:02:98:39:6a:52:2a:15:f1:82:c1:8c:e1:0f:28:
cc:4f:de:02:b6:a7:6e:9c:5d:e3:ad:12:54:f8:c1:
1e:cd:9b:57:c9:ad:1a:69:47:63:ff:32:ff:b5:bd:
0b:e2:03:7f:45:63:0f:82:20:d7:af:b1:ea:d6:1d:
97:16:64:15:08:d9:fd:22:96:9d:13:c3:54:0e:a3:
e4:d4:0b:c9:a2:af:cf:b8:b6:d9:39:35:15:77:2a:
c2:91:3b:5d:c2:8c:75:e4:a3:37:99:33:e8:02:d2:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:DA:C5:AC:E8:5E:B5:71:F4:03:0E:BB:67:EB:35:68:EA:73:F9
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:53:39:52:8b:0f:7a:5d:d7:35:3f:0e:d4:be:15:6c:cb:7b:
cf:02:7f:0f:f2:81:de:35:71:26:45:1b:25:c5:c8:4c:bc:1e:
fe:b1:6a:e6:26:31:32:b1:63:bc:57:b6:1a:59:2f:a3:55:44:
e2:e3:9a:13:80:75:c2:cc:b0:80:eb:69:eb:2e:15:0d:b2:c7:
85:52:0e:2f:bb:67:a4:b5:fd:7b:8d:8f:69:a6:93:22:63:1a:
8a:6e:83:a7:47:82:a6:4e:d4:62:ed:05:73:b4:03:7f:25:d5:
11:ae:2a:67:ce:8d:3a:7d:0f:41:42:6b:c6:1d:c5:6e:13:66:
21:c9:c7:b0:32:79:42:cd:c5:84:6f:9b:7c:c7:2d:d8:e9:30:
99:bd:a9:59:e7:9f:22:32:77:2b:b8:19:b5:8c:31:ba:68:d8:
d7:b6:c7:82:b7:f8:23:bb:54:23:ab:23:63:ea:0f:58:2c:31:
b8:8a:86:6c:ce:b0:46:83:d4:34:bd:94:75:4d:7a:2f:a2:ff:
59:67:5a:99:2b:be:a0:d2:a3:54:f9:8d:2a:14:6d:b8:07:91:
33:df:91:90:b7:38:71:b8:9d:fd:bd:21:c0:ad:1e:5d:66:a2:
7f:f0:e3:2d:00:94:25:d8:dc:05:e7:d7:e7:62:e4:02:25:0d:
2b:cf:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:09 2025 by rpki-client