Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: DgHzGO/uC/6ghCnds8CfN19brclDY65rTt5/TYNSl5M=
Subject key identifier: EB:51:B6:9B:A3:0E:6C:27:BF:3E:9B:7A:E5:1A:D3:33:16:E2:8C:9E
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01962E99588C6F0CF877EE49B29A4749DFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 14E7
Signing time: Sun 13 Apr 2025 10:02:03 +0000
Manifest this update: Sun 13 Apr 2025 10:02:03 +0000
Manifest next update: Mon 14 Apr 2025 10:02:03 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: UadjSCz+HhQe7rk/EXKnLyRQlGyypN2vR6t+t2o9IJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:58:8c:6f:0c:f8:77:ee:49:b2:9a:47:49:df:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Apr 13 10:02:03 2025 GMT
Not After : Apr 14 10:02:03 2025 GMT
Subject: CN=eb51b69ba30e6c27bf3e9b7ae51ad33316e28c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:dd:d6:a7:eb:b9:57:51:5f:fa:6e:22:e6:
61:89:cd:76:da:02:9d:a7:d4:2e:7e:82:e9:09:01:
7c:d8:eb:ea:05:38:41:ef:d5:20:48:cb:ab:20:ed:
c7:1b:39:5d:43:19:bd:a6:26:3d:a6:07:03:65:85:
16:29:75:19:1f:68:cc:2c:bd:fd:36:ac:e2:22:b3:
d9:d8:d2:2b:b9:7c:e8:b2:bb:ab:a3:20:71:95:05:
29:49:8a:3a:6e:cf:d8:b1:ec:3b:72:b0:c9:95:a1:
40:db:9c:1d:ac:54:5b:e4:c3:80:97:b4:cb:dd:30:
bd:f9:43:36:c3:97:73:52:9e:46:ac:1a:08:71:39:
a7:dc:45:bf:46:f1:4a:9c:e4:9b:76:a0:71:c0:72:
ec:2d:99:c4:1c:61:0e:f5:68:38:20:77:8a:57:bf:
5f:27:da:9f:4d:7a:e7:02:5f:22:05:7d:40:3a:b6:
7e:15:c2:09:d4:53:39:e3:6d:67:ad:d8:da:2f:97:
de:83:94:02:34:3b:61:8f:7b:e3:e8:21:9d:2f:3d:
4e:ee:8a:a0:02:f9:cc:a8:5c:81:0d:bc:ef:03:33:
d9:b4:8c:9a:f4:c5:e6:cb:2e:8d:a9:c9:5f:74:7d:
c0:0b:38:c3:4f:77:b0:d5:26:2f:65:cd:67:d0:41:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:B6:9B:A3:0E:6C:27:BF:3E:9B:7A:E5:1A:D3:33:16:E2:8C:9E
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:68:0c:06:ba:b5:5c:af:43:70:3c:48:78:10:2b:6c:5e:b3:
fd:73:f6:77:6d:93:f7:11:64:41:d0:94:a8:d1:e4:49:d3:9e:
fc:78:4c:9f:28:e7:cd:c0:64:f2:52:f1:24:7f:6b:4f:8d:6b:
95:f2:61:b0:74:40:7c:16:ef:1b:85:a2:f4:c3:e7:74:82:e7:
65:66:ef:b4:70:3d:6c:28:39:a1:27:24:5f:c4:df:21:c8:56:
47:47:05:4a:bf:21:d2:c7:cc:03:9a:c3:a4:4a:5c:b6:b7:78:
f5:56:1f:2d:d8:07:f0:4c:c5:ec:37:d6:00:9e:1a:da:cb:66:
e6:c4:46:88:9e:60:62:3a:60:c0:8a:ce:2e:e6:d5:2b:b0:ad:
92:86:c8:26:b8:a1:61:46:af:ca:c7:1d:86:f9:a8:5c:62:13:
fe:e9:d3:0c:72:ce:35:05:97:83:f1:5a:00:aa:78:13:eb:3d:
e7:ab:62:70:d4:8c:95:f3:d5:7e:c0:8f:ba:42:f8:c7:21:7a:
bc:81:b7:ff:86:e8:89:17:41:86:38:5e:f0:fa:0b:0f:1e:fd:
84:2b:d3:e2:66:7b:e1:eb:75:75:7f:7b:60:45:7b:14:26:3a:
30:b8:6e:e9:24:d0:09:8f:a1:a5:b1:bd:11:54:34:f8:da:86:
f1:db:ad:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumViMbwz4d+5JsppHSd/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4
MzdlNDAwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EyhlYjUxYjY5YmEzMGU2YzI3YmYzZTliN2FlNTFhZDMzMzE2ZTI4YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYPd1qfruVdRX/puIuZhic122gKd
p9QufoLpCQF82OvqBThB79UgSMurIO3HGzldQxm9piY9pgcDZYUWKXUZH2jMLL39
NqziIrPZ2NIruXzosruroyBxlQUpSYo6bs/Ysew7crDJlaFA25wdrFRb5MOAl7TL
3TC9+UM2w5dzUp5GrBoIcTmn3EW/RvFKnOSbdqBxwHLsLZnEHGEO9Wg4IHeKV79f
J9qfTXrnAl8iBX1AOrZ+FcIJ1FM5421nrdjaL5feg5QCNDthj3vj6CGdLz1O7oqg
AvnMqFyBDbzvAzPZtIya9MXmyy6NqclfdH3ACzjDT3ew1SYvZc1n0EFgyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtRtpujDmwnvz6beuUa0zMW4oyeMB8GA1UdIwQY
MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt
MTQ2MDVkYjU0M2QwLzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw
LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2gMBrq1
XK9DcDxIeBArbF6z/XP2d22T9xFkQdCUqNHkSdOe/HhMnyjnzcBk8lLxJH9rT41r
lfJhsHRAfBbvG4Wi9MPndILnZWbvtHA9bCg5oSckX8TfIchWR0cFSr8h0sfMA5rD
pEpctrd49VYfLdgH8EzF7DfWAJ4a2stm5sRGiJ5gYjpgwIrOLubVK7CtkobIJrih
YUavyscdhvmoXGIT/unTDHLONQWXg/FaAKp4E+s956ticNSMlfPVfsCPukL4xyF6
vIG3/4boiRdBhjhe8PoLDx79hCvT4mZ74et1dX97YEV7FCY6MLhu6STQCY+hpbG9
EVQ0+NqG8dut9g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net