Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json)
Hash identifier: rMzePUbvQVK28eaI8TiLl/ekvHWysv9xJw2TgtiVbNk=
Subject key identifier: 1D:F2:4B:CD:51:3E:00:36:CE:C9:AB:15:CB:5F:6B:98:DA:D9:F9:03
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0195DFD8A40642644C1A9C0C70B37372400A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
Manifest number: 0CBD
Signing time: Sat 29 Mar 2025 03:01:11 +0000
Manifest this update: Sat 29 Mar 2025 03:01:11 +0000
Manifest next update: Sun 30 Mar 2025 03:01:11 +0000
Files and hashes: 1: 0JRoWQ-bKpnOguLXiXYB3jJdTu4.roa (hash: VzJsKHpUQpit3sPn+6kTTMxbJRpLiMINGWJUJX/UKbE=)
2: 8gg7kQMVPMp5CW_2Zh8YAWMAQ5w.roa (hash: f3wtA4WN/DWLyQp37wYwvHxSkXSyAaxvA1pdEj3pPLE=)
3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: TpIoO9QOTxFWvW1Tq44/ishS7Ql8WF8dV+yvGt7SOIM=)
4: f99QaNImVksd_4fwJs_0jT5Ig2g.roa (hash: UE3mO+CTEUsKvTBCtFKJEMJlm1F6YnPBO42bToz3pgQ=)
5: l3J9gB4IMgSdlImDHfTTPYnsaMI.roa (hash: P3pHI/DrughOEkN4jU0yG73V2ZlqyiY2X1oOcPDXPps=)
6: pFni8BuhN7DO3E6SL-8dURfAHBM.roa (hash: Z7r1I+UjoIHQbs4HyVmg7922FtvK+u2Y8zjbNGqqhcs=)
7: teJ51KVPIWV36Tlu6BnhXD2AUD4.roa (hash: iirQ6/n4/0a+w6plKlxP3E2dDeNQoZhhCXUm/2+ugFU=)
8: tjgugWtXCRAR6LvB3B_fCXXkrDc.roa (hash: wDXsrBE0CeUhXqGr+vuXkjURzA3CYwNxPRQ4zDLi3bY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a4:06:42:64:4c:1a:9c:0c:70:b3:73:72:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Mar 29 03:01:11 2025 GMT
Not After : Mar 30 03:01:11 2025 GMT
Subject: CN=1df24bcd513e0036cec9ab15cb5f6b98dad9f903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:5b:2a:48:5e:6a:98:23:f6:dc:22:f4:93:
b8:68:0b:66:4d:bb:b3:e2:e5:2c:c8:ce:30:05:ac:
31:25:ab:d0:27:50:c4:60:18:19:44:f0:02:5b:2e:
1e:78:73:ac:99:7f:8a:f2:3a:ff:6f:ca:52:a1:39:
13:b9:91:c7:4d:c4:18:2d:64:08:a4:ee:34:be:89:
ed:c7:75:69:bb:4d:cd:b1:63:00:4e:a6:7a:38:c8:
50:85:79:f3:0c:bb:85:64:fa:03:12:ab:85:15:55:
cd:93:39:7b:f6:67:c6:1a:36:02:47:9a:0c:96:bd:
d0:09:a2:83:d7:19:69:9e:16:b9:77:2e:4b:d2:c6:
8a:7b:29:a7:81:a7:01:00:e1:41:15:0b:e7:6e:cf:
e3:95:3e:93:04:f9:ab:13:08:f1:94:22:d3:4a:6d:
fc:f6:80:0e:79:e2:c1:25:9f:42:3e:cd:f4:37:3a:
45:23:99:f1:73:f7:65:02:6f:56:d1:01:da:9e:ef:
57:50:c6:0c:1d:90:30:f0:da:19:b8:1e:cb:17:61:
e5:9e:46:fd:31:8b:b7:b4:54:40:8f:73:05:fa:8f:
fb:a3:73:32:58:25:cb:07:e7:cf:47:93:e9:d3:9f:
29:51:fe:32:b2:c2:42:6d:9b:e7:be:ef:a1:3b:29:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:4B:CD:51:3E:00:36:CE:C9:AB:15:CB:5F:6B:98:DA:D9:F9:03
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:58:62:97:37:f3:0a:90:c6:96:d8:4c:2d:c2:a3:06:db:
de:ca:d1:ab:1b:e5:e5:01:75:e1:67:e0:1d:78:a9:b3:77:51:
af:4e:4e:65:43:6e:14:a4:61:f7:cb:94:d2:3f:b9:4e:25:3b:
1b:66:46:a2:66:3b:9e:f4:90:cc:a4:69:1d:f5:c4:22:31:97:
89:3c:5d:1b:10:e1:2f:35:94:e6:69:d6:53:e3:f8:af:be:18:
a2:8c:81:5d:95:fb:7b:31:32:fa:f0:7d:d2:1d:6d:5a:45:20:
8f:d3:dd:26:1b:98:a2:93:2c:ce:cb:a3:ce:16:4e:d8:6c:64:
22:e3:98:8e:2b:c2:f5:57:2b:64:f8:5a:7e:7e:ac:99:57:78:
c4:da:1d:eb:2f:8c:40:d2:c2:24:d3:63:ef:4f:f0:31:d7:05:
ba:07:8a:9b:49:a2:f5:b1:0b:fe:d9:10:1c:6d:76:ab:42:5b:
57:b7:2c:80:1d:25:77:6c:1b:a4:d9:e4:ab:ca:fe:a1:7a:d3:
ef:13:46:8a:2e:4c:79:eb:87:90:72:1b:07:52:51:44:aa:79:
59:a6:82:08:77:8e:f4:be:fb:2b:d4:41:ed:f2:90:e6:95:7c:
cd:1f:af:5c:4c:6e:71:c0:84:d7:4b:c1:3e:ec:05:3d:90:ed:
f0:b8:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:36:28 2025 by rpki-client