Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: lmfOui9MOtPfNWCESBDuDA4dubF45aWZ2UJhY0icifw=
Subject key identifier: B5:19:59:AE:35:B9:77:70:AC:B4:AC:99:F7:EC:DB:88:5B:9C:07:48
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 0195E04641410F47BB431318464BDA5030CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 030F
Signing time: Sat 29 Mar 2025 05:00:55 +0000
Manifest this update: Sat 29 Mar 2025 05:00:55 +0000
Manifest next update: Sun 30 Mar 2025 05:00:55 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: hgelNTjd7BXnJ/pQhcdMWdbFpxvUVB9HnLA0xPTHheo=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:41:41:0f:47:bb:43:13:18:46:4b:da:50:30:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Mar 29 05:00:55 2025 GMT
Not After : Mar 30 05:00:55 2025 GMT
Subject: CN=b51959ae35b97770acb4ac99f7ecdb885b9c0748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:c1:ea:34:7d:7d:21:5e:46:df:c6:25:4c:
ca:cc:d8:79:7e:90:3e:9f:aa:8b:81:9d:de:31:c9:
3d:b6:e5:1a:4b:be:5d:69:f8:bd:f8:98:ba:88:ac:
40:04:4f:06:e2:4b:52:4c:eb:8d:f1:0b:df:c4:16:
33:f0:43:f5:7e:1d:8f:da:b8:cc:13:6a:56:4f:31:
80:2b:c1:f1:32:ba:f3:c3:df:21:6a:1d:74:f1:34:
1f:7b:48:99:35:df:ad:95:0d:56:1a:af:92:17:2e:
45:fb:ff:30:7f:0c:4b:4b:ed:c6:54:9d:a3:ff:e8:
71:63:e5:3a:3a:18:af:7c:6d:49:ca:e3:9a:b5:18:
30:39:5a:ef:ad:f1:c5:e4:c3:f1:1e:01:e1:11:21:
d3:da:fe:00:56:a9:a3:a9:de:a9:0c:b7:b2:03:3b:
d3:a7:47:d5:00:e5:36:1c:31:d0:a7:30:a3:06:1c:
eb:c5:e7:3d:fe:19:07:f3:35:f8:85:51:96:6e:b1:
50:69:c7:78:8a:87:a2:f5:c4:bf:5f:02:38:4d:b9:
4a:38:3a:6d:5d:56:9b:bc:1c:c9:9b:2b:a0:18:eb:
35:37:0c:55:6c:f2:6b:59:5f:e3:18:c1:71:e4:f6:
57:7c:8c:96:ef:78:bd:f1:e7:a5:64:5a:b0:51:93:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:59:AE:35:B9:77:70:AC:B4:AC:99:F7:EC:DB:88:5B:9C:07:48
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:61:f0:a6:9c:6b:98:5a:9f:b1:a3:df:7d:24:c4:a0:f1:00:
60:44:c8:a6:af:51:85:65:e1:b2:57:9b:0b:29:33:49:4e:f7:
27:36:54:ff:71:e3:c9:35:83:8f:51:cf:87:73:f0:17:2c:32:
b3:17:29:9d:8e:a0:c8:72:de:30:f5:3c:81:e1:14:0c:10:c0:
22:e6:3e:d2:fe:0b:0a:d8:35:1a:2f:20:9a:31:27:58:00:47:
23:7b:c4:49:cb:5a:e6:ea:bd:e7:5e:0e:69:ad:91:74:36:f5:
63:dc:57:5a:97:ee:9f:cb:5a:22:18:04:32:29:63:ff:72:87:
8e:53:aa:8e:6e:35:8c:61:30:eb:7b:ff:2b:05:5c:1e:e8:73:
cb:c7:49:10:54:d9:54:c6:4b:a3:0f:62:d6:b1:49:84:28:5a:
02:68:6e:83:b7:23:c7:12:5c:c2:06:4f:46:8f:f2:e6:c8:cf:
c9:32:61:de:6c:f8:13:00:2e:9f:59:1e:f5:14:71:80:03:f4:
38:fb:28:ce:57:76:19:c1:ce:15:44:51:b7:33:28:b8:20:20:
4f:2c:c4:fb:0f:24:44:34:38:d2:83:7a:5f:98:08:6d:80:28:
8c:5a:17:ee:bf:fa:8a:33:90:a7:13:e8:25:f4:c8:7f:ac:46:
12:81:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:24:54 2025 by rpki-client