Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
File: UxAsMB-QQClnkqlOQgV8Fi--MMw.mft (raw, json)
Hash identifier: Z/tBNh8WeOAccf1Aeq7Zyk7aX4eKUMNXfPfSB+vDxOE=
Subject key identifier: 15:4E:CA:99:AC:B7:47:EC:7F:63:DB:78:CD:F8:60:BD:70:6F:4B:1F
Authority key identifier: 53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
Certificate issuer: /CN=53102c301f9040296792a94e42057c162fbe30cc
Certificate serial: 0195018A9ECBF0E9A77424599A0FFA5B622A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
Manifest number: 0203
Signing time: Thu 13 Feb 2025 23:00:16 +0000
Manifest this update: Thu 13 Feb 2025 23:00:16 +0000
Manifest next update: Fri 14 Feb 2025 23:00:16 +0000
Files and hashes: 1: UxAsMB-QQClnkqlOQgV8Fi--MMw.crl (hash: CCeCNTIhAM00aOZQUNYBC2NX68IesIME759F9QshMig=)
2: YEqgt3H0jekaraXiLuW29od6J68.roa (hash: fhjiFYXnrZio/UQKgEWfS/D575KxnwSqzt+pGF0htc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:01:8a:9e:cb:f0:e9:a7:74:24:59:9a:0f:fa:5b:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53102c301f9040296792a94e42057c162fbe30cc
Validity
Not Before: Feb 13 23:00:16 2025 GMT
Not After : Feb 14 23:00:16 2025 GMT
Subject: CN=154eca99acb747ec7f63db78cdf860bd706f4b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:c1:9a:2b:61:9d:da:ab:7a:13:12:c3:7f:
16:da:7e:60:3a:ac:35:50:3b:72:0d:91:37:96:07:
c7:fe:e6:c3:cb:79:3c:64:89:c4:53:4d:68:2f:b6:
90:4d:fa:6c:c7:9a:2f:b2:2a:f9:ec:da:45:a9:86:
d8:08:a5:fa:43:94:28:f6:f6:00:03:e9:e4:d8:b4:
4b:0a:66:1e:d9:3d:50:03:e0:74:06:fd:9c:3e:d1:
69:81:3f:2c:f6:66:6b:68:1e:42:a0:6a:b4:16:3f:
d0:f5:e3:2b:1e:12:bf:e5:8a:f5:e4:32:70:db:67:
e4:80:90:a9:2d:28:90:6e:01:9f:51:64:b3:ef:58:
dd:fb:97:ff:bd:a1:62:ec:bb:89:d6:b2:77:ae:ad:
8c:45:68:98:66:f9:50:b5:3d:e2:79:fe:53:d1:37:
b2:7f:cf:ce:99:e0:98:ae:62:84:33:20:b2:2b:6b:
eb:07:99:df:3f:7d:ff:64:2d:27:ed:cf:6e:ed:fb:
76:30:88:04:94:64:2d:7c:21:1f:55:96:99:ab:3b:
b1:02:a3:31:9a:93:eb:d0:86:0b:64:94:3e:9f:2d:
c9:31:2b:50:94:f1:3b:6c:fa:90:e4:b3:76:b2:76:
ff:95:f9:62:6c:af:2c:54:32:48:d3:a6:66:82:7d:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:CA:99:AC:B7:47:EC:7F:63:DB:78:CD:F8:60:BD:70:6F:4B:1F
X509v3 Authority Key Identifier:
keyid:53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:51:c0:58:a5:4a:68:25:a1:48:b0:b6:75:75:74:04:e9:a0:
e3:36:2d:f2:66:21:f7:4c:2b:d0:32:e8:d2:f0:5b:89:36:33:
7e:7f:9e:21:e5:92:fe:df:f7:a3:8c:7d:79:f0:cd:48:55:46:
19:d2:90:bd:4e:09:c0:6c:6d:77:12:8e:22:42:c4:12:f1:c5:
2f:60:c6:80:58:e2:86:1f:bc:63:fa:75:46:1b:6f:c5:26:a7:
cb:06:b6:a2:3c:f7:b9:f1:c6:38:a5:cc:54:9b:95:c9:64:47:
41:19:2a:3d:43:32:88:22:50:3c:02:41:34:2a:c3:d0:4b:50:
a0:2e:14:3c:7b:25:b2:5a:64:e3:55:d3:e2:86:6e:6b:b5:28:
1c:65:f4:22:b2:fc:27:fb:df:74:82:5c:46:98:2d:44:fd:13:
44:f8:88:5b:18:6b:3f:e3:72:4b:40:b1:4c:c7:48:ff:ee:b6:
1e:6f:88:a0:b3:32:4a:a3:4b:14:3c:15:e7:91:d2:49:ac:8d:
14:c5:f5:7e:c7:43:b2:74:15:bf:3f:2c:e1:82:98:a5:83:0b:
e5:31:ae:cf:f1:0b:63:20:dd:84:5f:80:c0:52:51:58:71:e2:
8d:1a:ef:a5:99:00:c8:72:f7:8d:ed:7d:a7:15:08:8d:f5:e2:
d0:a6:62:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUBip7L8OmndCRZmg/6W2IqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTAyYzMwMWY5MDQwMjk2NzkyYTk0ZTQyMDU3YzE2MmZi
ZTMwY2MwHhcNMjUwMjEzMjMwMDE2WhcNMjUwMjE0MjMwMDE2WjAzMTEwLwYDVQQD
EygxNTRlY2E5OWFjYjc0N2VjN2Y2M2RiNzhjZGY4NjBiZDcwNmY0YjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpnBmithndqrehMSw38W2n5gOqw1
UDtyDZE3lgfH/ubDy3k8ZInEU01oL7aQTfpsx5ovsir57NpFqYbYCKX6Q5Qo9vYA
A+nk2LRLCmYe2T1QA+B0Bv2cPtFpgT8s9mZraB5CoGq0Fj/Q9eMrHhK/5Yr15DJw
22fkgJCpLSiQbgGfUWSz71jd+5f/vaFi7LuJ1rJ3rq2MRWiYZvlQtT3ief5T0Tey
f8/OmeCYrmKEMyCyK2vrB5nfP33/ZC0n7c9u7ft2MIgElGQtfCEfVZaZqzuxAqMx
mpPr0IYLZJQ+ny3JMStQlPE7bPqQ5LN2snb/lflibK8sVDJI06Zmgn30CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVOypmst0fsf2PbeM34YL1wb0sfMB8GA1UdIwQY
MBaAFFMQLDAfkEApZ5KpTkIFfBYvvjDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhBc01CLVFRQ2xua3FsT1FnVjhGaS0tTU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iN2RiZDAtZmUwNC00ZTUwLThjNDEt
ZWJjNDU4OGIxNGE3LzEvVXhBc01CLVFRQ2xua3FsT1FnVjhGaS0tTU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iN2RiZDAtZmUwNC00ZTUwLThjNDEtZWJjNDU4OGIxNGE3
LzEvVXhBc01CLVFRQ2xua3FsT1FnVjhGaS0tTU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFHAWKVK
aCWhSLC2dXV0BOmg4zYt8mYh90wr0DLo0vBbiTYzfn+eIeWS/t/3o4x9efDNSFVG
GdKQvU4JwGxtdxKOIkLEEvHFL2DGgFjihh+8Y/p1RhtvxSanywa2ojz3ufHGOKXM
VJuVyWRHQRkqPUMyiCJQPAJBNCrD0EtQoC4UPHslslpk41XT4oZua7UoHGX0IrL8
J/vfdIJcRpgtRP0TRPiIWxhrP+NyS0CxTMdI/+62Hm+IoLMySqNLFDwV55HSSayN
FMX1fsdDsnQVvz8s4YKYpYML5TGuz/ELYyDdhF+AwFJRWHHijRrvpZkAyHL3je19
pxUIjfXi0KZiJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:52 2025 by rpki-client