Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
File: UxAsMB-QQClnkqlOQgV8Fi--MMw.mft (raw, json)
Hash identifier: fxT/miUJMlornuhCDJpyfWKGwInTinbqh8QsLjfde7g=
Subject key identifier: 5D:64:FF:65:E2:52:E1:D7:B3:F2:2B:E7:C0:90:9C:AD:0D:8C:17:93
Authority key identifier: 53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
Certificate issuer: /CN=53102c301f9040296792a94e42057c162fbe30cc
Certificate serial: 0195037943AD6C680D828D1EBFB12A7885B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
Manifest number: 0204
Signing time: Fri 14 Feb 2025 08:00:33 +0000
Manifest this update: Fri 14 Feb 2025 08:00:33 +0000
Manifest next update: Sat 15 Feb 2025 08:00:33 +0000
Files and hashes: 1: UxAsMB-QQClnkqlOQgV8Fi--MMw.crl (hash: W3dLaocl3alLM9S0OsSrnunMjQ+fgqRfhjosA1ExHbQ=)
2: YEqgt3H0jekaraXiLuW29od6J68.roa (hash: fhjiFYXnrZio/UQKgEWfS/D575KxnwSqzt+pGF0htc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:79:43:ad:6c:68:0d:82:8d:1e:bf:b1:2a:78:85:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53102c301f9040296792a94e42057c162fbe30cc
Validity
Not Before: Feb 14 08:00:33 2025 GMT
Not After : Feb 15 08:00:33 2025 GMT
Subject: CN=5d64ff65e252e1d7b3f22be7c0909cad0d8c1793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:be:46:f3:d1:ac:45:8a:f5:17:d4:68:8a:
47:3c:67:41:b8:40:cb:0e:8c:e5:cd:33:e8:e0:24:
24:b2:53:de:0d:bc:d5:e5:06:38:88:47:cd:b2:75:
2a:62:6b:25:79:16:27:bf:3b:ed:63:45:f5:21:f0:
98:fd:a4:26:b3:e9:8c:df:87:45:4a:d6:42:2e:f2:
75:86:2b:47:6f:31:62:45:f8:57:21:45:6f:6a:2a:
29:9d:45:fa:7e:1f:9e:69:7b:6a:02:3f:51:fb:d1:
04:ba:51:28:17:79:e7:2f:b4:50:4b:c1:1c:a5:3a:
62:ee:e1:30:9e:f2:6e:a1:30:61:9d:4d:51:e2:02:
18:ee:ea:61:19:16:b3:e3:ee:4c:51:91:39:56:82:
bf:af:4f:fb:b2:c7:73:44:11:de:f9:1d:b2:9f:9e:
7f:ad:20:d7:89:91:36:27:7c:ce:ef:bf:82:42:5d:
18:fc:2b:3e:40:51:9b:f3:e5:4f:a3:30:84:67:2f:
f1:5c:85:4d:cd:32:fb:70:47:a4:39:c6:f2:44:1b:
e7:b1:55:78:42:78:cc:64:d7:5a:e3:a2:55:10:29:
d6:34:da:c4:44:ce:bd:24:93:38:3f:b6:a1:d5:8d:
e0:9e:09:e8:24:77:1c:64:0c:c2:fc:f1:85:63:95:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:FF:65:E2:52:E1:D7:B3:F2:2B:E7:C0:90:9C:AD:0D:8C:17:93
X509v3 Authority Key Identifier:
keyid:53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:21:46:f3:94:84:1a:cd:13:40:9c:e8:43:0a:35:af:e7:00:
8a:2a:30:29:e2:31:06:91:bb:02:3f:c3:ab:23:46:10:d0:37:
1d:c0:50:91:b6:40:63:b9:0d:01:77:60:e0:6c:31:e6:fc:0f:
f7:19:20:e6:94:4c:cd:0a:32:53:e9:26:ab:16:4a:f2:d5:f3:
b8:0e:ab:29:79:d7:53:0e:88:ab:80:9f:e9:c8:c1:a8:4b:3d:
ab:42:ac:5a:ce:ea:18:ec:15:d9:6d:57:a5:87:8c:65:ad:df:
ec:80:44:a6:23:ce:5a:1c:d8:f2:73:2d:d3:67:8e:af:cb:08:
df:b9:96:96:3a:63:d4:5f:ec:51:61:15:86:0e:8d:e0:0e:e8:
9b:f5:38:17:b4:ad:11:89:e9:8a:6f:89:c9:e6:4d:5b:14:6a:
f0:78:80:cd:95:ea:12:af:2e:f5:db:11:82:53:34:ef:42:88:
f9:24:45:c1:08:19:fe:4e:ca:bf:47:13:74:48:1b:1d:cc:f7:
d9:7e:2d:0e:5d:8d:02:c3:4b:24:d3:ee:54:b6:b9:a0:88:14:
0d:cc:7c:23:60:36:a1:65:ac:fa:0c:b5:d3:cd:f4:95:df:43:
a6:80:df:d3:77:a3:74:e5:ec:45:63:1d:9c:69:39:49:a7:27:
21:89:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:25 2025 by rpki-client