Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
File: LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft (raw, json)
Hash identifier: U/WPVz9/uYaQLYDog2v802R3hCKFimv3lQvxcww5BKk=
Subject key identifier: 63:3B:19:48:2F:54:83:95:20:FB:82:C2:8B:A2:F5:83:20:BC:10:CF
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Certificate issuer: /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial: 01976F99F178991C7DE5D2E7F9F10ACC2E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
Manifest number: 0246
Signing time: Sat 14 Jun 2025 18:00:49 +0000
Manifest this update: Sat 14 Jun 2025 18:00:49 +0000
Manifest next update: Sun 15 Jun 2025 18:00:49 +0000
Files and hashes: 1: 5e9MeZDhShrujLkSqLN7eYMHWl8.roa (hash: /dmgZK0n8EohgIkkcn1lUf0J3aamzQZdCxpas+dAOSo=)
2: LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl (hash: L2T3KiTUDYDph2OQZSJtf9H4qtZP1Al+nY5mF+2JlbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:f1:78:99:1c:7d:e5:d2:e7:f9:f1:0a:cc:2e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Validity
Not Before: Jun 14 18:00:49 2025 GMT
Not After : Jun 15 18:00:49 2025 GMT
Subject: CN=633b19482f54839520fb82c28ba2f58320bc10cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:81:7b:f4:5a:1c:55:5c:c3:00:42:9c:a7:
9d:13:9d:c9:ef:2b:ec:e2:c1:f5:84:dd:e1:70:a9:
b6:9b:ee:a6:6c:5d:de:91:28:89:12:a5:d6:02:71:
d6:c1:2b:ad:01:9f:ce:23:ef:3a:1f:7b:e0:97:7d:
44:98:1b:5a:97:da:fc:b9:12:0e:38:f7:57:ba:88:
40:0e:35:57:78:cd:e0:03:24:70:5f:97:d0:06:f7:
ad:4d:03:44:9e:16:ed:23:a9:47:1e:0f:d0:38:e3:
ce:36:45:0c:c6:74:7c:e9:e8:31:48:6a:f1:9e:be:
dd:78:f9:3e:c7:51:cd:ee:7a:fd:d9:6f:68:d2:f7:
26:f1:5a:71:b6:ac:ca:a8:23:9f:1a:ef:1c:20:c7:
34:89:7d:68:84:25:07:b6:28:43:fa:35:21:71:3e:
d8:44:66:95:74:3d:4d:c5:40:31:cd:25:92:cb:30:
c2:5c:b5:dc:ae:c0:2b:a3:8e:a9:89:e8:74:dd:be:
a4:40:0e:75:49:90:bd:2c:46:ce:ec:97:d8:98:1e:
bb:00:9f:77:17:0b:2f:05:70:59:93:78:21:9e:29:
bb:74:ba:95:6c:38:72:0f:ce:9e:5a:22:e4:a5:9c:
cd:18:93:b8:de:a2:d2:58:d3:6c:9b:1b:66:17:91:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:19:48:2F:54:83:95:20:FB:82:C2:8B:A2:F5:83:20:BC:10:CF
X509v3 Authority Key Identifier:
keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:55:15:2a:5b:96:97:37:b5:1c:4a:b5:69:1f:0e:75:45:8e:
0d:5a:15:9c:08:71:6f:33:42:1f:4d:3d:f9:4e:9b:d4:c7:a2:
68:00:78:48:ed:53:6c:1c:d1:2b:e9:fc:77:d6:dc:f2:80:95:
15:94:19:32:1c:1f:c1:0e:a1:29:11:ee:d3:78:1f:fd:fa:22:
6e:3b:e5:ba:a1:21:06:77:6d:17:16:21:69:62:e7:d0:f9:00:
04:85:bb:fe:37:b1:df:53:ea:2a:8b:d8:5a:c5:ee:23:d8:7a:
b1:3d:dd:21:aa:2d:2a:a2:75:21:a5:49:7f:cb:88:35:fa:1b:
33:d3:81:2a:4c:d5:d8:0a:58:56:7d:9b:85:b4:43:f4:e1:e0:
68:02:51:b9:e0:a6:f4:53:0f:40:32:0b:db:3b:15:18:6d:2a:
18:1c:6f:6e:8b:21:9e:d9:c5:c5:9e:b0:87:ca:49:5f:8b:0c:
85:15:ad:89:5a:39:ce:d7:48:56:60:bd:bf:73:d4:f8:46:92:
ce:2e:5c:7b:19:ae:c0:3c:f3:34:15:ae:55:4e:9d:46:01:d9:
ac:07:6d:dd:56:1f:d0:68:be:92:2e:5b:ef:71:de:b0:3b:45:
54:a9:09:86:94:66:79:b0:83:25:9e:75:06:8d:37:37:fa:2d:
6b:ba:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:12:06 2025 by rpki-client