Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: L055tuUR+Cg+/d5a00m/SOsSI6KezGV42pIl102UicM=
Subject key identifier: CA:8D:01:5F:86:F8:A2:31:91:21:0B:ED:86:48:FA:03:A3:B5:01:B7
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 0194BC3CAB875AF20C846B225CD4D7EA14FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=)
2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: MkSFFaqNVYk8bbAM1QnkHKLGhOrV23ZX6XONTfyHnPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ab:87:5a:f2:0c:84:6b:22:5c:d4:d7:ea:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=ca8d015f86f8a23191210bed8648fa03a3b501b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:11:ac:85:97:3e:4a:9c:89:b9:b0:81:d5:10:
1d:fb:ed:76:8f:e9:15:c7:6a:9e:2a:79:47:98:be:
ea:60:b2:48:cd:32:10:d6:c0:32:fe:86:bc:5e:a3:
cf:d6:c9:bb:89:16:29:82:0e:b1:17:ae:d0:16:f1:
9b:8c:5c:62:06:f9:6d:03:30:b5:2d:c8:7c:3c:5f:
44:ba:d0:66:b4:2c:ab:74:ed:ee:8c:e9:1d:7f:7e:
04:e9:6c:c8:9b:21:60:55:ef:c6:3e:9b:e8:1f:8e:
e3:35:e7:1c:a3:70:b8:d9:90:37:33:a2:35:bc:57:
24:fe:99:c0:28:b4:bd:b9:93:98:b6:75:23:69:a8:
5b:a8:5f:52:18:e7:3e:d1:08:a5:8e:e2:4e:f4:88:
af:6c:4e:1e:b8:22:74:a7:b6:8a:eb:d1:0b:5e:0e:
cf:58:2d:68:40:1c:79:58:93:f5:c9:2e:7a:cd:9c:
2a:be:26:c4:8c:e6:3d:74:86:46:95:25:87:c8:13:
6a:8b:1b:4e:21:45:1b:62:2d:a3:35:e0:f2:0d:d1:
7f:d1:4a:aa:de:77:9e:09:5a:d3:57:f7:44:9f:b5:
8b:fe:24:c1:ee:06:de:c4:1b:80:7f:ae:85:80:16:
76:eb:a3:7f:db:e7:c3:bb:8b:01:c4:da:cd:73:97:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8D:01:5F:86:F8:A2:31:91:21:0B:ED:86:48:FA:03:A3:B5:01:B7
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:3b:a2:e6:f8:9c:04:10:c1:74:5b:22:df:4b:4a:9a:ec:
41:6c:d0:0d:eb:40:6d:b6:65:cf:5f:67:9e:02:d6:71:1f:6c:
da:33:f2:af:77:e1:0e:79:9c:1e:47:70:66:8d:2a:a8:28:3a:
df:62:9b:49:e4:a1:04:d5:bd:cf:aa:2d:8e:d8:69:c0:5e:ec:
ed:ae:e2:01:d1:8f:3b:65:7f:69:e9:01:47:e8:4d:26:fc:22:
6f:aa:ae:32:a8:b4:0e:44:29:c1:dc:b0:63:00:c7:be:49:88:
b0:de:db:25:27:59:b9:36:ae:2e:cb:b8:89:e2:bb:f5:d2:94:
e3:da:02:21:4f:e8:93:56:26:4e:f7:7c:7d:a2:a4:2d:83:b6:
a5:db:f3:d4:6c:e8:4f:2a:68:4b:4f:41:2c:a4:54:d8:8d:d0:
bf:53:9d:b4:fb:6b:4c:7c:2e:b6:1d:e3:b3:3a:4e:c2:b5:47:
69:d1:36:b5:5b:06:0f:dd:45:d8:58:b6:08:b2:03:bb:59:50:
7b:a5:05:6b:09:06:51:30:9b:66:47:c1:86:3b:e6:3e:df:d5:
aa:8b:40:18:25:b7:14:99:4c:9a:0c:bd:62:78:dd:ee:4a:c2:
e5:fd:8d:80:de:3a:58:f3:d4:8b:f9:43:27:18:2d:99:0a:97:
8d:c1:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:59 2025 by rpki-client