Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: Ii2bev7YMKoHV09wRe6+/4TNh0cwh7TIovEX5eOwvP4=
Subject key identifier: 0F:94:B4:D5:AE:41:A3:25:E8:EB:B6:28:DF:28:19:F7:F2:53:CE:81
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 0194BC72D88402EEFFD665ABFB9E06A568B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 0435
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: xuK7/oBCWeiM+0HliLRNvuF8qBfFGu7LAphYeIO3Eb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:84:02:ee:ff:d6:65:ab:fb:9e:06:a5:68:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=0f94b4d5ae41a325e8ebb628df2819f7f253ce81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:c6:9c:60:73:2b:e9:3d:25:58:3f:81:17:
44:2c:d1:11:40:dc:26:1a:ae:b1:6c:4e:7d:96:6d:
9b:d5:69:12:65:09:12:f4:7b:a6:73:6f:d9:92:79:
e3:4a:6f:9f:ce:63:da:0e:76:b1:d2:36:94:bd:80:
64:d1:56:0a:f6:c7:06:32:0a:1d:87:da:71:de:07:
47:a5:56:c2:b2:d6:b5:aa:cb:e9:f8:24:88:64:77:
e9:cb:46:08:04:a9:d4:47:6d:bf:c9:bc:6a:eb:28:
5c:16:64:89:a8:6d:40:e8:b7:50:4b:78:20:e6:0a:
9e:e8:5c:e2:f3:3a:0a:2b:3c:43:8d:03:7e:af:2c:
95:f9:e0:96:9d:05:1c:8b:35:df:d3:2a:f6:1a:c2:
a0:68:49:0e:42:7d:97:31:1c:ba:5c:d4:07:18:96:
bc:b7:74:d2:80:14:63:1f:f7:00:fb:ad:7b:ce:29:
3e:c4:aa:33:19:4f:81:f4:f9:52:d5:54:b5:59:55:
f8:c6:96:8a:bc:87:92:71:0f:44:7f:a4:c9:40:85:
48:97:e2:a7:c2:00:6a:81:1d:92:f9:5d:bf:02:2a:
5b:00:04:15:c4:f7:7c:1b:f2:18:bf:79:fa:d9:90:
ef:ea:f1:52:8e:a5:ce:de:38:be:28:2e:49:8a:78:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:B4:D5:AE:41:A3:25:E8:EB:B6:28:DF:28:19:F7:F2:53:CE:81
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:69:26:ff:8a:e3:22:93:00:b9:8b:8e:54:58:59:39:2e:0f:
d2:9c:ed:60:71:f7:d4:13:0c:d9:06:77:77:3e:04:bd:b4:36:
67:f6:a0:f3:0b:d0:9e:e5:6c:bc:41:02:a4:f3:62:87:fa:ba:
e5:d4:dd:48:90:72:16:9c:65:14:0e:79:9c:6c:24:33:53:02:
86:49:17:71:24:bc:19:b5:25:52:53:e6:23:55:31:c8:bd:93:
d0:f3:de:02:49:24:93:d8:66:a1:83:10:65:d3:64:ea:ea:79:
61:7b:73:d9:d1:67:99:15:ab:22:cc:bc:c6:55:f6:0f:87:2c:
ea:fc:63:d9:00:34:61:d7:d2:2c:26:c3:4f:8e:4b:99:4e:fe:
25:e3:db:95:63:3c:4a:58:be:20:c3:b0:0a:11:74:37:4b:04:
67:10:ca:ed:a7:e2:dd:f8:b3:4a:f8:fc:97:57:a3:c6:b8:47:
7e:f1:72:ae:a8:c7:da:d6:1b:ed:d5:28:a5:43:56:41:2b:24:
97:1f:01:b3:5e:94:a3:8b:6c:4e:7c:0d:24:ce:c0:ad:02:35:
cb:0a:64:82:18:4e:db:f9:e4:32:ce:7c:a5:88:42:18:51:58:
97:10:b4:33:ac:5f:66:2f:5b:c5:6c:ff:af:da:35:7d:e5:d4:
98:64:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client