Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: 8LqyyDB9vNL+UzNReP6JYTrfrN0farxWWDyzF8ULTBY=
Subject key identifier: 00:7A:E1:9D:90:F8:C2:48:E7:C9:F8:63:02:E4:76:1C:B4:5D:2B:EE
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 0194BCE077BF529E8F68F33A37F5342528C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: 8p2+Abd/g0eDwfgewsKTYHq7Cn5kLByL3JpZY6Ku+3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:bf:52:9e:8f:68:f3:3a:37:f5:34:25:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=007ae19d90f8c248e7c9f86302e4761cb45d2bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:3a:b9:d3:2f:52:b4:aa:dd:2d:1e:43:e3:
ec:ab:20:9b:34:1f:13:15:82:9d:ff:2d:82:1b:b7:
71:5f:f3:d5:ba:45:25:7d:05:05:74:02:67:e3:98:
9d:24:c4:0b:d9:94:fc:f3:2c:21:8e:4a:27:42:e1:
29:e5:5a:03:eb:dc:47:ef:b2:16:37:e0:01:cc:36:
b2:f5:76:cd:a7:b2:62:36:50:02:71:0a:dd:d4:16:
11:74:da:f3:95:f9:b9:f1:21:7a:d5:36:bf:41:1b:
62:a5:ab:11:a9:2d:1c:24:d4:03:f2:d3:e6:be:12:
30:a9:d5:87:a2:ba:76:3e:76:16:6a:25:08:af:2e:
43:d5:d8:c3:78:b0:ce:42:97:dd:c6:c4:cb:b8:78:
c8:1a:6b:ff:74:9e:93:0f:47:bf:2f:a8:86:36:6f:
47:c4:08:51:9f:8c:57:c7:84:f9:60:08:da:fe:8b:
1e:6f:e3:ab:aa:a3:12:0a:ac:65:44:55:b3:04:59:
9a:97:8b:55:c9:56:3f:c8:86:40:b1:3b:00:87:de:
5a:b0:de:d0:f7:a5:d0:35:43:c4:7f:75:3c:4c:13:
3f:3b:63:5e:3d:60:ca:ec:62:f9:44:e2:af:c4:4e:
20:cb:66:57:38:7f:98:28:06:26:a1:f3:82:16:94:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7A:E1:9D:90:F8:C2:48:E7:C9:F8:63:02:E4:76:1C:B4:5D:2B:EE
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e4:a2:8b:50:78:3d:e7:15:39:e0:f8:42:39:82:91:ed:c1:
38:24:46:34:5d:f6:7b:3e:da:ad:55:fb:1a:85:33:f9:21:8e:
da:68:7c:77:e6:2b:eb:c6:a9:32:d6:f0:c2:99:8e:cb:38:ab:
55:16:e8:93:ce:76:6a:81:7f:b9:60:3a:37:c7:3e:17:7e:46:
0f:aa:1b:29:b5:b8:79:ea:71:3e:d6:90:3f:d3:79:a4:7a:e2:
c8:fd:81:f1:bc:83:2b:76:7d:71:43:fa:83:45:a1:78:29:c3:
8b:54:d1:9e:b2:f1:dd:e5:6c:bf:16:aa:96:c8:23:6e:ed:31:
ea:7f:ba:5f:9a:c9:19:fd:b2:59:73:48:a3:04:8a:41:78:20:
af:6d:95:28:46:b7:2f:c9:10:e7:75:0d:c5:93:02:09:d0:0f:
79:e4:21:3b:19:b6:9e:4a:b7:30:4e:80:58:a2:2d:9c:a2:f7:
0e:08:04:30:4b:07:b1:74:a2:6d:29:79:29:b6:f0:b3:c8:53:
2e:69:33:13:68:af:da:d9:96:c5:76:b7:3e:e0:d1:84:38:a3:
fa:a5:0d:92:17:14:c4:1f:70:13:fd:8b:70:ec:19:c8:33:3a:
37:bb:23:31:e8:15:45:d7:04:ae:9c:ac:88:7f:7b:ac:2c:2b:
16:4c:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:22 2025 by rpki-client