Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
File: LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft (raw, json)
Hash identifier: GoFC+ggN+p2i3gpiHzAvg8jGQQ46t8a7du52ZVQKl78=
Subject key identifier: A5:81:48:56:4F:F7:C1:F4:7B:0A:DE:9D:F1:B2:DD:88:AA:DE:FB:59
Authority key identifier: 2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F
Certificate issuer: /CN=2e39d330a5f04067eff9173473d67088abe9196f
Certificate serial: 01955FBDC55B1F56E9970C38527A9C8C480D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
Manifest number: 09F3
Signing time: Tue 04 Mar 2025 06:00:26 +0000
Manifest this update: Tue 04 Mar 2025 06:00:26 +0000
Manifest next update: Wed 05 Mar 2025 06:00:26 +0000
Files and hashes: 1: LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl (hash: oSfNn3s3JIZfJssDVj2Jc4mtOOH7n09EOWPco7Xh8Wo=)
2: Ne10b5rjlmDzddihe7gb6ocO2b0.roa (hash: ylaDgjgfTcWmf+Rg61sIK8UxE7w3h13qSpQ40+L4Ysw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:bd:c5:5b:1f:56:e9:97:0c:38:52:7a:9c:8c:48:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e39d330a5f04067eff9173473d67088abe9196f
Validity
Not Before: Mar 4 06:00:26 2025 GMT
Not After : Mar 5 06:00:26 2025 GMT
Subject: CN=a58148564ff7c1f47b0ade9df1b2dd88aadefb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:32:a2:b7:b0:a0:6b:fe:22:0d:a5:e5:4b:
c8:03:7a:69:46:b4:78:df:7a:69:1d:6e:71:fd:55:
c4:ef:41:de:00:ea:55:3b:92:23:69:cc:b5:42:b7:
a7:23:da:a5:aa:96:3d:44:e9:47:25:e6:f9:53:4f:
83:10:d2:a1:6b:0e:02:5d:9e:d8:4e:1e:85:81:67:
ec:8c:ba:ac:eb:dd:df:96:81:09:85:f3:ba:8b:2f:
dd:90:35:fc:73:ce:2a:aa:ba:17:12:d2:8a:fd:a5:
07:97:8d:d4:9a:20:cc:88:ba:d5:45:73:d3:a1:76:
5c:9f:0c:64:3a:fd:21:43:50:42:e9:38:09:fd:ec:
54:42:ec:0e:33:54:70:87:63:7f:83:28:8c:de:20:
16:f7:0a:38:a4:f5:1f:ab:b9:84:6f:d8:e7:05:75:
6d:62:6b:47:5a:c2:7c:1d:7d:85:1a:33:b6:df:fd:
a5:d0:85:2a:04:11:9d:3b:b6:11:86:aa:b4:9f:9d:
f8:38:07:04:76:9f:af:e2:72:05:d7:21:4e:c4:86:
32:1e:b2:14:c8:72:d4:58:91:55:76:de:f6:f2:c8:
69:39:a6:b6:4b:d7:03:61:69:64:ab:d3:28:df:55:
1d:72:51:c8:bc:41:46:52:22:d7:15:d7:8c:2f:55:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:48:56:4F:F7:C1:F4:7B:0A:DE:9D:F1:B2:DD:88:AA:DE:FB:59
X509v3 Authority Key Identifier:
keyid:2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0e:48:f8:c5:86:da:86:cc:8a:82:c2:02:32:cc:51:8f:78:
8f:70:84:21:57:02:86:f4:50:79:61:f1:a6:70:1d:b7:1f:20:
72:fc:c2:c3:5a:05:09:4a:a6:9c:86:d5:66:ee:dd:ae:38:cb:
0a:4d:2e:cb:64:b1:1f:21:f8:ea:d9:b3:b5:3f:e6:ca:26:9f:
e6:47:1b:2a:77:5d:d4:cf:07:9a:2e:d3:61:59:a1:f1:3c:51:
99:ec:3f:95:d7:d9:30:28:be:1e:b0:dd:67:d9:22:95:70:64:
e4:c9:58:4c:9c:26:db:53:80:d7:10:c1:e3:3a:18:b6:67:16:
34:73:67:c4:ec:fe:b0:02:23:2b:4f:39:53:03:54:d3:ac:e8:
d6:5f:30:52:95:3e:31:f9:73:d5:21:c9:bc:b6:30:96:1f:4b:
be:fc:c2:61:2d:28:09:f0:c0:10:3a:1a:3d:31:b3:f8:69:dc:
30:c9:42:6e:3e:d6:f8:42:88:e0:e4:a2:f8:09:22:5b:78:41:
7e:34:8e:64:3f:f8:4d:4d:d6:1f:0b:b4:5f:5c:17:65:d9:ba:
3a:70:1d:1c:e5:89:1c:28:4f:95:bb:56:9b:29:df:e7:90:db:
c7:bb:f8:27:b5:bd:8f:09:f1:38:fb:43:a2:a6:5f:1c:af:89:
a8:8f:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:35:06 2025 by rpki-client