Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File: ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier: vUcPfLc2sMm4ODLOguCizNYSWhZtP30PjdEaLEy4Ozs=
Subject key identifier: 01:85:48:7B:7B:C6:33:C7:68:52:0A:14:69:59:CD:76:49:91:B1:88
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 01962ECFBB9DB11747A2A066C485EB09BEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number: 01E3
Signing time: Sun 13 Apr 2025 11:01:27 +0000
Manifest this update: Sun 13 Apr 2025 11:01:27 +0000
Manifest next update: Mon 14 Apr 2025 11:01:27 +0000
Files and hashes: 1: YKvMMcRqLG8F9RKMTccvi7ZwGaQ.roa (hash: vyK0AzONbiCe5g5hUQ+qpo+ABY7iaBzdOKFUE4y2Cqc=)
2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: HTz7Srt/5xkdXOSfLG7PEY48s4uHNIHBbM4MTng+m5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:bb:9d:b1:17:47:a2:a0:66:c4:85:eb:09:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Apr 13 11:01:27 2025 GMT
Not After : Apr 14 11:01:27 2025 GMT
Subject: CN=0185487b7bc633c768520a146959cd764991b188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:fe:34:1e:50:d9:ac:08:eb:57:31:a1:e4:
8c:aa:91:c1:a6:c8:35:97:bc:05:56:b2:d5:ef:ec:
7f:46:22:23:47:dd:94:14:e4:31:70:0c:87:72:21:
17:59:37:f2:e9:05:da:1d:54:6e:dd:b4:a1:0a:96:
51:83:d4:72:cd:0b:51:b1:a1:97:03:0d:d2:25:ab:
22:07:e3:29:8e:95:79:9a:31:a6:f8:41:23:b2:ee:
0b:97:55:b1:94:bf:b9:55:99:62:bb:97:02:b5:4a:
31:95:36:f7:50:6c:39:92:62:37:57:82:8c:25:40:
7e:c5:8a:6d:28:04:88:a8:73:b7:21:50:23:0d:d3:
ef:83:54:da:e8:0e:31:e8:91:03:61:e0:70:49:3b:
d5:be:e6:32:93:7e:2e:f2:bc:1e:13:12:bb:ce:f2:
c1:d6:5e:6e:ed:ea:f5:9f:1e:87:20:6b:87:03:da:
cb:a4:57:88:ac:60:d2:8a:ae:a2:08:fe:09:79:41:
2e:3a:b3:b7:07:d9:5b:ec:c3:59:32:ec:1d:91:da:
e6:69:18:9b:d6:f6:62:a4:23:0c:82:8d:80:73:6c:
8f:96:66:09:92:43:b9:5e:fa:ff:c8:c1:2e:fd:8e:
bc:8a:56:9f:f3:2d:89:e2:52:b8:b1:c8:10:ac:b1:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:85:48:7B:7B:C6:33:C7:68:52:0A:14:69:59:CD:76:49:91:B1:88
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:c0:95:42:f7:a8:d4:a9:eb:47:a3:28:a8:d2:f0:18:04:
a4:b6:d6:06:6e:75:c5:34:09:eb:6f:35:e2:d7:42:35:03:a1:
39:8c:f8:0d:20:e3:20:ec:61:ff:96:92:be:bb:22:65:b9:1f:
0b:8e:1c:27:76:4d:dd:66:15:cb:09:7d:fe:51:38:7d:33:d3:
02:1e:b8:fd:71:67:4e:e6:8c:6a:07:de:38:a8:18:1f:5a:25:
20:0e:bb:18:57:01:e6:b3:56:bd:09:5a:8a:12:f0:49:bb:06:
9f:ba:6e:a3:ed:83:65:da:c8:31:aa:95:5d:3d:d5:03:f4:f1:
b8:d2:fd:9a:3b:c4:67:7b:75:e8:05:f3:9a:0a:f5:87:19:c3:
d1:60:12:3c:df:f7:c5:50:0a:4b:98:f2:3b:79:cc:cb:c0:02:
79:7c:0b:00:53:f4:d6:9e:41:b2:6c:6f:ae:63:7e:6a:e2:2e:
d5:e5:44:00:16:7d:14:68:54:7e:a0:c0:15:20:ba:9a:19:a5:
80:17:38:7e:67:8f:4a:51:82:85:67:ab:17:f0:67:51:0f:c9:
87:33:ec:a6:fb:e8:17:54:ed:21:9a:c4:4f:f9:28:c3:81:b9:
67:fa:e7:a4:fd:6e:90:6d:36:a0:cc:9d:a1:51:ad:85:67:b1:
5f:c7:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net