Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: ct3qCr6duLIhsRnA+k5HAgvGwJvy4l/RgpiMi5PSpt0=
Subject key identifier: C9:B1:0F:66:2C:63:66:90:94:36:0E:B5:DF:F9:B7:80:CC:CB:89:4C
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 0194BC72DF08C2F4FE6C05E4EDDCEA8B0C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 0FFA
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: lKptYmjMFeX9jK77ays1xS+5uCLH5SqPWHMDccUHGA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:df:08:c2:f4:fe:6c:05:e4:ed:dc:ea:8b:0c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=c9b10f662c63669094360eb5dff9b780cccb894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:7e:0d:f3:09:80:97:09:c7:87:65:aa:27:
41:8c:7b:b3:99:a0:8f:9c:15:78:43:73:df:4e:78:
c9:6c:84:41:2c:73:82:70:18:d1:d8:b9:b2:79:20:
33:6d:83:e0:11:d5:a4:1d:c1:8d:2c:b1:ba:7a:2b:
16:df:27:60:7a:8d:bf:75:e1:2f:c9:0b:59:49:4d:
2d:8b:b4:d3:d5:55:be:dc:04:10:00:b9:64:d2:46:
e5:fd:e9:a1:60:d3:3c:f9:ea:4b:b1:8c:17:80:56:
7d:71:45:bc:26:70:cd:d6:2b:b4:bf:d9:2f:bb:66:
78:98:44:a7:de:d9:9e:63:90:2c:12:89:cc:13:8f:
68:51:43:15:85:60:9c:48:99:bc:9e:f0:21:1d:7c:
b9:c1:ec:d8:a1:c1:d7:af:30:9d:40:81:f2:87:16:
b3:43:2a:20:4c:4a:17:17:fd:12:a0:3a:96:46:87:
a5:21:26:21:48:e8:1d:d5:f9:29:10:5e:74:22:5c:
b4:9b:02:dd:a2:42:8f:d0:83:fa:48:2c:d1:a4:9c:
05:f6:7d:f9:09:57:4d:9a:eb:70:ac:69:b4:f4:2b:
42:a0:fa:f1:52:19:4d:e0:42:98:9c:41:73:2a:7f:
4d:aa:68:03:6d:9d:70:51:71:64:91:76:93:ea:4c:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:0F:66:2C:63:66:90:94:36:0E:B5:DF:F9:B7:80:CC:CB:89:4C
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:2e:5e:4c:41:a5:2b:bd:89:79:e6:bc:0a:5e:5e:b7:ea:
00:d1:e1:d8:a4:45:44:ab:f3:35:44:1b:72:fb:a9:b5:e8:b8:
bb:81:bb:b8:99:ed:0e:02:dc:c5:a4:50:ad:4d:16:a2:ec:2f:
80:dd:80:d2:16:c7:89:72:c0:1e:b9:f2:97:36:db:1b:1b:5e:
7e:a9:94:08:d3:32:9f:b4:57:78:b9:a8:31:c0:1c:6b:bb:0f:
08:b3:88:b2:59:c2:f4:20:48:48:3e:5e:f6:57:41:fe:95:91:
6d:66:73:99:9d:e9:f8:d8:54:5a:84:90:d4:d4:00:72:6c:6c:
8b:d8:c5:dd:c8:40:ee:b0:5e:db:1b:58:0e:7c:ba:4e:45:ac:
a6:4c:76:ed:e4:e6:08:2e:9e:7f:76:51:b5:e8:54:5a:5c:eb:
09:b4:ce:85:c4:91:9b:a3:c7:04:80:33:4a:f9:92:50:bf:0e:
32:06:e1:26:ea:70:6e:cb:b1:a4:df:20:70:33:6a:d1:38:69:
76:81:0f:3a:15:2d:46:f2:1b:6f:b3:b3:4d:b7:03:a8:a6:d1:
61:e7:e8:28:a8:9e:46:f1:1b:8f:51:14:01:26:fe:0a:b1:8f:
e1:0f:c2:d5:fe:45:46:2a:d4:31:1f:7a:d9:bf:e6:d5:6d:0b:
b1:61:f9:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct8IwvT+bAXk7dzqiwyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YzE5MjA2NzE2YzVjNzlkMzViZjE1OTI0ZGIzMzIzYTRl
YzE4YzgwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
EyhjOWIxMGY2NjJjNjM2NjkwOTQzNjBlYjVkZmY5Yjc4MGNjY2I4OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4F+DfMJgJcJx4dlqidBjHuzmaCP
nBV4Q3PfTnjJbIRBLHOCcBjR2LmyeSAzbYPgEdWkHcGNLLG6eisW3ydgeo2/deEv
yQtZSU0ti7TT1VW+3AQQALlk0kbl/emhYNM8+epLsYwXgFZ9cUW8JnDN1iu0v9kv
u2Z4mESn3tmeY5AsEonME49oUUMVhWCcSJm8nvAhHXy5wezYocHXrzCdQIHyhxaz
QyogTEoXF/0SoDqWRoelISYhSOgd1fkpEF50Ily0mwLdokKP0IP6SCzRpJwF9n35
CVdNmutwrGm09CtCoPrxUhlN4EKYnEFzKn9NqmgDbZ1wUXFkkXaT6kw3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmxD2YsY2aQlDYOtd/5t4DMy4lMMB8GA1UdIwQY
MBaAFJXBkgZxbFx501vxWSTbMyOk7BjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5Yjkt
YTRhOWNjNDcxNTk5LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zZmVlZDktY2U1Zi00YTIyLTk5YjktYTRhOWNjNDcxNTk5
LzEvbGNHU0JuRnNYSG5UV19GWkpOc3pJNlRzR01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSIuXkxB
pSu9iXnmvApeXrfqANHh2KRFRKvzNUQbcvuptei4u4G7uJntDgLcxaRQrU0Wouwv
gN2A0hbHiXLAHrnylzbbGxtefqmUCNMyn7RXeLmoMcAca7sPCLOIslnC9CBISD5e
9ldB/pWRbWZzmZ3p+NhUWoSQ1NQAcmxsi9jF3chA7rBe2xtYDny6TkWspkx27eTm
CC6ef3ZRtehUWlzrCbTOhcSRm6PHBIAzSvmSUL8OMgbhJupwbsuxpN8gcDNq0Thp
doEPOhUtRvIbb7OzTbcDqKbRYefoKKieRvEbj1EUASb+CrGP4Q/C1f5FRirUMR96
2b/m1W0LsWH53w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:56 2025 by rpki-client