Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: pscjsutk0NDd9cUlEuYQfC22AlwFNOnhQl8v5O1EKlE=
Subject key identifier: B6:58:32:D9:61:E0:0E:FE:0C:AA:55:6A:66:5A:C3:D1:65:88:DE:05
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 0194BBCE7A388D9F16BC64CF43A5CF45E8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 06C9
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: xD+eDdOjgLRY+VUL7pLutPIa73zMkiPMK7N+ZO08RBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7a:38:8d:9f:16:bc:64:cf:43:a5:cf:45:e8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=b65832d961e00efe0caa556a665ac3d16588de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:d9:71:81:0f:87:0f:78:45:d0:69:fd:2c:
a8:0d:ae:67:83:b7:cc:db:39:2a:33:73:40:a7:8e:
07:5d:1b:73:61:60:6f:e3:cb:b6:6f:63:e3:8e:da:
76:4c:0f:ea:de:08:96:21:c5:4f:70:a8:34:73:6e:
12:2b:04:cf:30:07:c0:90:50:84:c3:ab:ce:39:b5:
05:42:01:bf:87:70:3e:46:bb:5f:d2:12:94:3e:75:
3f:b8:31:4c:cc:74:e9:bb:23:92:a8:ab:a3:b0:58:
44:a2:37:f7:5e:4d:c9:53:10:81:50:76:57:49:b4:
bf:f1:24:1b:eb:30:ff:ea:02:3d:7e:c3:c4:3f:5f:
26:07:1e:4a:81:7e:92:4f:e0:ee:8c:d4:e1:7f:a4:
68:e5:4b:1e:6f:de:e4:ce:e3:13:6b:01:4e:5a:66:
01:bd:c1:80:ef:76:12:fa:d7:1e:e1:b2:17:3e:b6:
19:96:d1:7d:2b:d6:92:aa:70:a5:ff:20:09:b1:00:
e8:09:2b:8f:de:a6:73:07:cb:b1:59:7f:84:20:98:
4f:d8:4b:91:c5:be:a1:8b:8b:13:67:45:66:fb:f0:
6c:40:df:5c:06:2f:aa:76:db:dd:67:5e:8e:37:8a:
f3:06:e7:f5:5b:cb:01:f2:f1:1a:cc:b2:7f:8f:c2:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:32:D9:61:E0:0E:FE:0C:AA:55:6A:66:5A:C3:D1:65:88:DE:05
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b9:bf:93:f9:e6:6c:ab:71:9b:69:22:8c:ee:59:b8:12:50:
e5:34:c3:90:23:d5:d2:ba:ca:e3:6c:84:23:ca:29:7b:8c:06:
48:99:ab:5e:01:61:33:4f:3b:17:47:cc:7e:7b:e1:42:58:21:
98:5f:14:97:9b:fb:06:af:99:15:73:1a:43:8e:22:08:ac:ff:
b4:25:db:a0:29:21:ad:f6:99:29:2f:0c:86:a6:f7:94:e2:59:
2c:ae:40:8c:58:03:a6:65:7b:ff:f1:a6:0b:42:f6:3a:a2:db:
d6:01:74:7a:72:2c:9f:71:05:37:13:17:3f:62:4c:d2:12:42:
15:d4:3d:b4:bb:60:27:17:ed:b6:eb:cb:ef:6f:31:36:bb:b3:
5f:36:3d:8c:a3:ec:f1:5e:04:2d:0f:c9:29:a5:3e:c0:b9:8b:
98:34:e3:63:26:f5:a9:f3:57:ee:34:20:4a:e8:1d:d8:6d:b9:
f7:d7:b1:cc:95:1a:f0:83:89:4b:f6:14:2e:5a:df:76:e3:c6:
89:d4:b3:51:f4:36:e9:bb:dc:82:d0:5f:c0:2f:0d:a9:c2:e7:
03:ef:3c:03:c0:7f:8f:4c:9c:49:06:38:bc:fc:d9:cf:8b:86:
6a:24:ff:38:ed:df:27:6c:fd:e4:c1:e6:d7:c1:b2:2f:bb:52:
e3:4e:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:32 2025 by rpki-client