Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5390d8-2d74-4e04-a342-6889763ebf7c/1/lV3GifBUpdpazRjnF64P2hzggPg.mft
File: lV3GifBUpdpazRjnF64P2hzggPg.mft (raw, json)
Hash identifier: lH0Uy3t74CR1r3UjYkFNk+5MT0BiDNOfE1yBZwHgw10=
Subject key identifier: F8:91:7E:FD:FF:E9:AA:56:3A:12:E6:54:62:64:EB:BD:CD:0B:17:2E
Authority key identifier: 95:5D:C6:89:F0:54:A5:DA:5A:CD:18:E7:17:AE:0F:DA:1C:E0:80:F8
Certificate issuer: /CN=955dc689f054a5da5acd18e717ae0fda1ce080f8
Certificate serial: 0A9C9B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV3GifBUpdpazRjnF64P2hzggPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5390d8-2d74-4e04-a342-6889763ebf7c/1/lV3GifBUpdpazRjnF64P2hzggPg.mft
Manifest number: 08F3
Signing time: Thu 14 Apr 2022 07:49:50 +0000
Manifest this update: Thu 14 Apr 2022 07:49:50 +0000
Manifest next update: Fri 15 Apr 2022 07:49:50 +0000
Files and hashes: 1: lV3GifBUpdpazRjnF64P2hzggPg.crl (hash: UWyw0J9bfFghJu9IOYSaR3g4cFzGQQ5SsPUi+xDPmv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178035546 (0xa9c9b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dc689f054a5da5acd18e717ae0fda1ce080f8
Validity
Not Before: Apr 14 07:49:50 2022 GMT
Not After : Apr 15 07:49:50 2022 GMT
Subject: CN=f8917efdffe9aa563a12e6546264ebbdcd0b172e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:5b:b6:9e:7a:98:37:72:e4:ae:b0:0d:86:
87:bc:1e:36:be:8d:11:cf:da:ec:63:51:b9:f3:a3:
b1:5a:86:32:e8:3a:2b:60:3e:86:ae:c5:5b:80:08:
d5:6c:c8:b8:f1:a8:55:e8:e9:3b:4c:d4:78:35:63:
d8:03:61:d7:9b:4c:4f:2b:52:42:cd:79:d1:ea:3b:
09:ab:7e:e2:06:b9:6f:ea:08:a0:68:90:78:73:52:
aa:10:59:51:55:81:bb:7c:78:ff:d3:c8:c9:b2:67:
19:0e:27:30:d6:b2:af:57:f3:7f:02:35:57:6c:85:
9f:ef:23:83:84:99:3d:3a:20:9b:6d:f7:37:74:12:
2b:ec:10:30:a8:d7:26:b2:ef:40:25:43:19:1d:41:
4e:31:51:4a:0b:4c:7b:81:93:5c:8d:ee:a3:0a:a0:
38:e0:88:b1:a1:4b:a6:b0:ad:bb:96:b2:79:94:f1:
b8:45:60:44:7d:15:d6:ce:e4:20:a5:f7:f2:2b:4a:
6c:df:f4:39:e8:6c:58:a0:51:c9:65:98:78:e1:92:
33:65:cc:69:55:7f:c2:a6:8f:40:6e:98:98:cb:47:
12:41:4a:2a:e4:b9:34:c4:f0:6b:e2:26:22:4d:c8:
28:9f:43:7b:b3:32:42:86:56:96:e4:8b:aa:26:ca:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:7E:FD:FF:E9:AA:56:3A:12:E6:54:62:64:EB:BD:CD:0B:17:2E
X509v3 Authority Key Identifier:
keyid:95:5D:C6:89:F0:54:A5:DA:5A:CD:18:E7:17:AE:0F:DA:1C:E0:80:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV3GifBUpdpazRjnF64P2hzggPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5390d8-2d74-4e04-a342-6889763ebf7c/1/lV3GifBUpdpazRjnF64P2hzggPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5390d8-2d74-4e04-a342-6889763ebf7c/1/lV3GifBUpdpazRjnF64P2hzggPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7d:20:03:da:b9:83:51:e0:00:d7:13:95:51:f3:6e:d7:8d:
6a:c8:31:47:2b:53:1d:a0:dc:e1:b5:2e:86:ed:5a:d9:1e:80:
61:f6:cb:0c:86:a1:0e:ba:81:62:fc:1c:04:a0:e6:39:8d:a2:
50:46:46:d6:b9:6f:b8:a8:db:16:4c:3f:bf:83:a5:59:0a:f6:
b6:3e:39:67:95:91:d4:a8:e1:ea:06:84:5e:85:93:79:07:c6:
f7:e6:cd:b1:f5:84:e1:7a:04:a0:b6:52:6e:18:97:07:6f:fb:
ff:ef:91:88:21:3c:90:4d:30:5c:0b:b4:6a:ea:3d:6a:4e:ee:
b3:83:23:e1:5d:cf:c1:1f:c1:5f:19:25:dd:77:fe:a5:ff:eb:
94:49:9e:95:13:75:63:47:23:0e:bf:64:4d:4f:30:33:1b:a8:
4a:e8:40:74:d8:04:1b:a8:28:31:9d:9b:e3:f1:26:3f:59:36:
c7:f9:b7:95:9e:b8:f8:dc:93:d9:2c:af:5e:e8:93:b5:8d:92:
af:1d:1d:f9:f4:ca:75:48:99:3a:ea:74:7b:d4:8d:ee:a4:45:
9c:6d:64:b9:09:c3:e8:09:23:b5:3a:3a:d2:a6:67:f2:46:40:
8c:22:30:1c:04:08:fd:f4:d8:37:5a:8f:5f:81:5c:fa:eb:78:
70:59:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:37 2025 by rpki-client