Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json)
Hash identifier: JD4J8iR4L1rUYQ/iQRSrGWc9x5Sy9WIJhA1W5Gptzsg=
Subject key identifier: F6:0D:09:B2:B1:8E:47:F3:7C:EF:3A:D5:F1:3E:AF:97:8A:82:61:09
Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Certificate serial: 0194BBCDFE0468C977E190D34CC440D1643A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
Manifest number: 06CA
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 3JUWGQsOPBFoC4I-OGs1qaLU-CQ.roa (hash: HAn/ErTzS/Zebt/yY2233fhmAXGMbizcG23F8CM++/Q=)
2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: QwGcg2IoxBc7R3oYKA4Zo2rGDNOJ1mVWFeZblquYrF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:04:68:c9:77:e1:90:d3:4c:c4:40:d1:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=f60d09b2b18e47f37cef3ad5f13eaf978a826109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:a9:5e:9b:90:c2:c2:63:04:54:91:d5:93:
39:7a:01:fc:f6:a8:59:7c:a5:86:52:04:0d:7e:08:
43:90:e4:1c:8a:43:85:df:68:f3:aa:99:7d:5d:21:
81:c5:c6:38:9b:89:d3:14:02:e6:42:21:16:bf:35:
04:30:d4:8f:ea:e0:69:af:0d:21:19:44:51:cf:50:
de:9c:47:66:15:20:a7:79:de:1a:6b:c1:8f:c6:74:
ca:2b:53:6c:7d:d0:19:88:58:e1:f4:9c:20:be:3b:
68:e6:4a:cd:fc:ef:1f:90:31:76:8a:76:a3:9e:0d:
7d:5a:5a:e6:18:e3:90:cb:55:81:57:5a:9e:a8:13:
e5:d6:fe:ce:28:0c:2b:85:46:42:eb:74:dd:a6:6e:
b6:4e:30:86:a9:ea:00:ec:17:90:ec:8f:85:9a:46:
0b:44:37:5e:36:97:46:6c:72:34:48:75:f9:db:47:
de:94:75:0a:e3:9a:f2:39:05:42:7e:d7:f3:f8:fd:
e2:18:03:c9:e7:5b:e8:d0:8a:45:3a:48:ed:5e:27:
9c:5e:1d:32:fd:27:56:ac:74:df:d5:4c:22:1a:5c:
b6:1b:c0:c7:4d:58:c4:22:43:e0:fd:2f:51:5a:97:
3c:62:fd:51:e4:c1:5b:56:7e:a0:9d:b2:83:cf:22:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:09:B2:B1:8E:47:F3:7C:EF:3A:D5:F1:3E:AF:97:8A:82:61:09
X509v3 Authority Key Identifier:
keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:df:f6:95:cf:08:dd:4d:29:e8:4d:30:17:61:8c:6a:04:1d:
61:f4:40:4e:89:6f:ad:e6:a5:a8:75:c0:0e:80:cf:4d:e0:03:
d7:18:a5:47:4f:b5:0c:bc:80:e5:b1:a9:85:e3:36:16:d8:f1:
c5:e9:0a:b0:f6:27:12:f8:2a:21:e4:67:11:dc:eb:50:2c:90:
4e:ab:5e:07:76:72:60:50:2a:ff:fe:70:63:4f:b9:2c:96:c0:
47:23:c3:ba:c7:8b:e1:37:2e:59:89:e1:0a:d0:09:07:4c:c9:
4f:84:ac:5d:45:4c:2c:8d:a2:c4:d7:df:04:8b:a4:8c:fd:b7:
ed:6c:91:1f:a6:81:22:16:40:9f:3f:2f:73:f0:55:16:17:80:
97:c2:4c:1e:36:24:8d:b9:7d:19:15:22:a2:cb:de:c3:c8:14:
3e:bf:4a:e9:dd:b5:f2:3d:40:0a:6d:13:3e:77:b6:22:15:4c:
cf:63:34:5c:27:2e:ed:01:e1:20:ad:f9:70:53:92:33:52:3f:
88:7d:c4:5e:59:0e:40:52:38:e8:47:31:be:7b:ac:e4:c9:3e:
02:1e:e3:8a:3c:36:ba:6c:2f:fb:4d:27:f8:c2:2b:79:7e:8b:
4b:aa:0a:8f:b5:34:f3:41:9b:0d:c6:a8:a8:91:a0:52:97:d9:
d1:a3:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:22 2025 by rpki-client