Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: e7KfWcqUm5MDdR06IY+zXis/LKUsn2aLxF1G9wVw8eA=
Subject key identifier: 5A:69:7F:13:4B:63:70:27:AD:AF:55:46:36:68:83:F5:70:62:E9:6D
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 0194BD857CEE3E31EC42EEB50EAEA97C6760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 0F4B
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: sEcXHrLMlTuMARdVl0Na0VleXK07yQCz5S++vCGzey8=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:ee:3e:31:ec:42:ee:b5:0e:ae:a9:7c:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=5a697f134b637027adaf5546366883f57062e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:0b:d5:af:9f:23:94:ec:00:71:3b:f6:23:
81:86:3f:47:38:f3:6a:e4:c2:88:9f:6a:b4:ad:7b:
6a:3d:d7:89:aa:c4:15:95:51:c5:5e:47:db:b9:5e:
44:58:c5:e9:b1:1d:11:8c:a2:fc:09:a0:59:0c:19:
f1:42:1b:f9:7f:72:8d:90:47:7f:28:33:da:bd:52:
cc:2f:42:83:e7:da:c7:32:ac:90:2d:ac:cd:7e:38:
c7:f3:d0:14:32:e4:5a:82:d1:6c:de:cb:2e:94:25:
3b:7e:db:36:80:de:df:61:21:b2:4d:c7:d0:0c:c3:
9c:47:47:e8:01:c4:87:64:3f:f6:51:d3:db:4d:89:
3c:6b:31:3e:e6:11:15:5d:33:96:82:80:11:ec:92:
1b:87:fc:6d:02:8c:c5:32:96:43:73:69:19:5e:0a:
40:bf:e1:53:c1:fe:bb:6b:d7:36:d0:47:22:f1:66:
14:7b:97:14:6e:28:ea:53:45:da:fa:06:44:28:b2:
cd:8d:4a:35:5b:d7:c2:54:5a:b4:e4:03:57:7f:4b:
87:5a:d7:a4:f5:8a:dd:0f:33:b8:e1:5d:a8:e8:b5:
f4:82:50:1a:db:9b:35:79:50:6c:cf:47:6c:59:72:
1a:25:15:d8:5f:55:a9:b8:4e:e5:0c:40:27:80:13:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:7F:13:4B:63:70:27:AD:AF:55:46:36:68:83:F5:70:62:E9:6D
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9b:a1:5f:24:8d:90:3b:bd:08:2a:b6:e0:33:eb:a7:ac:a4:
91:5b:8f:3c:9d:3d:8c:55:46:bc:f9:2d:8c:0d:88:47:e9:1f:
5f:bc:67:0d:32:c8:c4:81:73:e7:45:4f:09:05:3e:8e:58:08:
54:6e:a5:76:fa:14:e3:e0:62:ec:9c:6d:ec:40:6f:9a:59:54:
a0:28:0d:f5:20:38:6c:16:34:35:a0:93:36:63:51:3d:bd:48:
4d:14:48:26:ce:52:29:b7:db:0d:7d:f2:c4:24:cb:83:43:ca:
38:6a:31:32:20:ea:47:36:f6:da:52:fb:70:8c:3c:04:9c:49:
17:53:4a:71:44:94:a7:ea:27:43:ca:2c:92:15:d1:16:63:e0:
a1:e6:3a:ec:fc:74:27:8d:f2:14:92:06:62:97:7e:94:cb:5e:
f6:17:27:75:a2:87:c4:fe:55:eb:36:7d:1c:94:21:89:f2:a8:
3c:a5:3e:3a:e6:02:a0:2c:2c:49:ea:71:f7:09:d4:35:5c:7a:
29:64:79:82:d7:1a:4f:d5:16:8c:c1:02:46:e8:68:c8:33:0d:
de:5d:c6:d1:f6:39:d3:b6:48:8a:e3:2a:7f:7f:b3:e7:41:c8:
a4:4e:3a:ac:b0:4e:24:05:0f:ba:fe:4c:3c:0f:61:09:05:20:
83:fb:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:32 2025 by rpki-client