Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: 7QWA5Y557a0MMsnYf1nkpYyqJOOZxbkCV3bNrRqN+X8=
Subject key identifier: 63:5D:F8:C9:75:EC:E0:09:DD:CA:DA:BD:29:88:AC:D3:61:31:A1:AB
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 0194BC3C6F45AEB6FEF3CA9F965D6B006696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 0639
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: QrQJAfJCVqAWHZt/D1pLcsaY3LB/6Q4Pf8Q1KKBF3NI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:45:ae:b6:fe:f3:ca:9f:96:5d:6b:00:66:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=635df8c975ece009ddcadabd2988acd36131a1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:82:46:d2:2f:f7:a7:fb:a0:32:0a:df:86:
d8:0f:eb:2e:94:fd:30:6e:ee:a4:50:ee:d7:2f:fb:
00:59:bc:9e:f3:3e:dc:ed:e0:ae:4d:4a:14:02:b5:
ba:94:9d:6f:29:11:1e:e6:20:4f:18:4b:3d:fe:46:
d2:2b:28:5b:73:1c:a7:c3:e4:34:30:4d:f7:f5:68:
92:0a:e1:04:6f:98:d1:cf:c3:99:55:55:ec:e3:3e:
fa:19:4d:fd:fe:ba:28:0e:e9:a6:60:0d:19:fa:b4:
4e:44:0d:22:a2:ed:f9:60:b8:b4:ab:49:38:2a:d0:
83:3c:41:08:90:7b:f2:6e:5d:7e:2a:33:2d:d8:dc:
d1:9f:b2:1f:fe:45:97:89:1f:56:82:dd:1c:3f:ad:
4b:fa:61:a2:2a:af:da:ad:90:bb:23:2a:58:0a:e6:
dd:de:1c:0f:17:c4:40:ae:76:d2:d1:54:08:9c:cd:
50:ca:8f:4f:0e:e7:6f:d7:41:05:9d:2b:12:90:ae:
78:3c:92:a4:7a:46:f9:ae:02:ec:5e:82:7c:24:e5:
66:09:dd:1b:04:92:e6:65:e4:ee:e4:5f:47:36:98:
60:7a:da:96:21:4e:47:04:7d:e0:1c:b1:6e:f0:c6:
ce:a3:b8:bf:64:06:4e:41:0c:58:3d:3f:37:f4:cd:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:F8:C9:75:EC:E0:09:DD:CA:DA:BD:29:88:AC:D3:61:31:A1:AB
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fa:2d:a1:09:05:24:20:77:51:02:bf:93:5c:d3:fd:9c:72:
d5:86:ee:0e:6c:82:c7:38:a0:2e:00:96:08:4f:6f:f4:f3:9d:
67:86:05:3a:db:56:d4:df:79:24:35:26:ab:cd:2c:1b:62:82:
f4:24:5b:91:fe:67:e5:8e:2b:a5:56:7e:ea:48:76:ff:13:87:
34:c1:61:e2:b5:a9:41:f0:cb:63:41:a8:e1:93:dd:33:35:ab:
4e:18:7e:39:47:fe:06:f5:7e:d3:70:a7:f6:a8:72:ee:26:66:
3e:90:8f:68:3b:a0:0b:f2:31:79:a6:f7:f1:2f:b6:eb:e0:d5:
99:6a:bd:4b:eb:5d:67:cc:00:22:a9:00:1f:41:47:4b:d3:ea:
c3:2a:ca:30:4b:35:f6:fb:9c:c4:96:39:43:55:a7:0b:fd:b2:
41:1f:c3:e4:f3:21:01:c3:2d:3a:14:54:be:cc:66:4f:15:fe:
a8:24:10:49:90:5a:f9:21:7b:86:74:a5:27:34:c8:bf:77:47:
88:16:cb:ff:2c:90:da:63:5b:bf:ed:d8:f9:80:14:9e:7d:b6:
98:89:ee:6b:46:4b:5d:2d:0a:79:fe:4a:d0:98:09:95:c7:f1:
56:04:44:13:60:c8:cb:23:da:e2:91:5b:08:59:ed:23:bc:b0:
8f:d6:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:32 2025 by rpki-client