Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
File: UxAsMB-QQClnkqlOQgV8Fi--MMw.mft (raw, json)
Hash identifier: 1qkl9IAmXX8SEoL0wLe9rc1+U0vcqX1f89GrHmVL0S8=
Subject key identifier: 9B:48:80:DD:37:11:20:FF:27:19:CB:20:84:3E:01:4F:06:63:A8:CB
Authority key identifier: 53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
Certificate issuer: /CN=53102c301f9040296792a94e42057c162fbe30cc
Certificate serial: 0194BC3C3613DD0D37A3EB3C46121E6017BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
Manifest number: 01DF
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: UxAsMB-QQClnkqlOQgV8Fi--MMw.crl (hash: NKR16fvd9VI0T+L5Y71fNcI7hUbF+6luNQWyZRp6msM=)
2: YEqgt3H0jekaraXiLuW29od6J68.roa (hash: fhjiFYXnrZio/UQKgEWfS/D575KxnwSqzt+pGF0htc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:36:13:dd:0d:37:a3:eb:3c:46:12:1e:60:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53102c301f9040296792a94e42057c162fbe30cc
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=9b4880dd371120ff2719cb20843e014f0663a8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:44:14:ee:98:9f:e5:47:87:18:f3:c4:2d:
0d:3d:00:ec:5d:d5:ea:3c:3d:28:95:1a:49:d6:92:
86:1e:d1:50:0e:5c:a8:33:81:93:7e:ae:ef:9e:32:
62:56:44:6a:5b:c2:10:82:36:d3:fe:c5:36:08:b9:
2a:77:c9:11:eb:2e:8b:ac:ef:50:ea:d4:a6:df:66:
4f:e4:02:43:0a:46:99:64:30:c6:85:73:52:3f:50:
38:83:a7:17:e9:18:b8:66:f9:c0:54:9b:95:1b:c1:
35:68:fd:3c:a8:21:18:14:96:74:01:5d:44:4e:4e:
da:5a:14:5c:5b:2e:11:fd:cc:d1:66:76:e3:c5:97:
53:14:c4:47:cc:1a:eb:cf:d1:9a:e9:ca:02:a4:1a:
6a:29:17:dd:a3:eb:97:97:b1:ec:0b:f0:ba:0f:d4:
93:0c:6d:e8:f1:6b:c3:5c:fb:b0:52:10:2b:4f:fa:
40:dc:7b:93:40:65:69:c4:5c:c4:b7:55:15:cf:a8:
14:81:ea:7f:4b:5c:7a:02:32:13:c8:0f:1f:37:9e:
af:cb:ac:f1:24:e1:1f:53:80:d1:d4:26:42:24:13:
81:d7:86:f6:a8:e4:cf:6e:b3:b0:21:5a:73:9f:11:
31:52:84:36:46:c7:51:31:28:7f:01:dc:e9:0a:c0:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:80:DD:37:11:20:FF:27:19:CB:20:84:3E:01:4F:06:63:A8:CB
X509v3 Authority Key Identifier:
keyid:53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:d7:77:07:bf:67:e6:c8:05:24:df:4c:82:4c:31:44:6d:
31:5e:40:54:19:07:29:6e:c9:88:d0:97:9d:b1:17:e9:9f:e4:
d3:b5:8e:8e:03:22:a3:2e:28:36:6a:c2:39:c9:49:59:6f:e8:
1c:7f:bc:49:cf:4c:5a:5e:08:2c:2d:a4:40:1b:00:c6:97:5e:
d8:64:21:37:61:3d:d9:3c:8a:3e:00:dd:be:bd:26:af:72:09:
cc:5d:b0:3c:42:7b:ba:f7:a1:98:d7:57:03:03:c8:0d:76:62:
ab:65:8c:f3:09:56:5e:72:1e:9f:34:8c:c1:8b:e9:62:52:51:
df:b3:f6:ea:90:ab:59:d4:16:ae:f5:9b:fc:d9:45:a8:c8:51:
47:d2:6d:3a:fa:a5:f2:0a:52:13:ca:93:2c:52:6e:9d:16:9f:
f1:a3:14:6f:1c:36:0f:6a:09:e5:ce:84:9a:75:5a:18:fc:e1:
75:0f:42:a6:99:c1:41:b8:bc:85:ed:16:1d:81:93:2e:0f:d5:
cb:87:04:91:1c:78:df:21:2c:d5:ae:b7:09:f7:21:e0:16:94:
f6:a8:66:ab:f6:a4:4e:42:9d:9c:7f:bf:92:53:bd:e8:d8:f3:
b2:93:af:a8:42:77:b4:8f:18:06:27:ec:77:72:f5:1f:66:dc:
d7:91:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:50 2025 by rpki-client