
Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: F20htUQ+JtYY9kCnItOSE/wrdPCRI+EHP8vGdx5Cdj4=
Subject key identifier: 5C:2F:8E:2B:8B:AD:98:2E:F5:D6:5D:34:EA:E6:BE:D1:73:6E:52:BA
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 4854CE49DF5F06F6DFD70E284AA5EFF63207B717
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 0117
Signing time: Fri 31 Jan 2025 11:25:11 +0000
Manifest this update: Fri 31 Jan 2025 11:20:09 +0000
Manifest next update: Sat 01 Feb 2025 14:14:09 +0000
Files and hashes: 1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: jdn8mpQeFLQ1f8Wa8Uk7Z0vGFe+NcijNz7F4/b+mm0I=)
2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: k/wmSIsicW6bIEYBgom+wqdJSOY7iu6zbHSV4HudHUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:54:ce:49:df:5f:06:f6:df:d7:0e:28:4a:a5:ef:f6:32:07:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Jan 31 11:20:09 2025 GMT
Not After : Feb 1 14:14:09 2025 GMT
Subject: CN=5C2F8E2B8BAD982EF5D65D34EAE6BED1736E52BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:16:5f:9e:79:0c:16:16:57:3e:9c:10:85:
5e:3e:9d:e8:d2:9d:82:5b:b2:30:52:1f:9e:41:92:
18:0f:4d:78:12:59:33:b7:58:0f:0f:6b:94:7b:db:
fa:b3:16:83:02:eb:e9:99:99:06:2e:b5:0b:a4:ac:
33:b1:b1:b8:e4:db:7f:6c:86:f7:6b:56:c2:f1:ad:
1a:d5:f8:87:71:c5:21:82:00:d5:6c:51:84:de:9a:
f1:9f:83:38:67:40:7b:79:6a:b2:fc:6d:94:f2:20:
ee:7f:13:30:c7:b3:6c:5c:6c:ed:7b:15:95:f0:72:
c3:a6:9f:1a:ad:9a:7d:eb:f6:c6:b5:51:25:44:01:
c1:33:40:a8:8d:2f:4e:fa:69:58:dd:54:df:69:cf:
35:d9:46:45:80:17:d0:b6:c9:1a:fd:5d:71:b4:33:
11:72:fa:2c:1e:77:4d:47:1d:4a:c1:27:d3:db:02:
35:83:48:11:4a:ca:f3:28:6f:7f:b4:8e:99:10:65:
9a:59:4e:b9:0b:f7:a2:27:c9:96:95:22:92:08:bf:
62:b7:6b:28:47:77:81:6e:ce:3a:f6:d4:a3:64:f2:
73:29:88:3e:85:72:40:e4:45:8c:40:cc:25:6f:f0:
3b:f3:bb:87:b2:d7:5c:27:bf:97:38:e9:b7:91:1a:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2F:8E:2B:8B:AD:98:2E:F5:D6:5D:34:EA:E6:BE:D1:73:6E:52:BA
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:81:8d:80:e6:01:41:14:6e:0c:f7:4e:6a:7f:2c:4f:89:f2:
ce:76:9c:7b:d9:72:72:0e:fb:44:11:3d:40:ea:69:f0:91:f6:
e0:f4:d3:3e:76:23:8f:0a:46:15:7f:c7:d5:80:82:0e:26:ba:
c1:cf:52:cb:f4:a4:12:05:ee:00:d9:4f:24:6d:ff:a8:9f:cf:
83:39:a1:6b:39:80:43:45:47:a4:2d:e9:70:57:28:b2:0e:87:
cb:e4:d7:1b:48:af:58:03:96:49:c7:9b:75:8a:b7:64:2a:1f:
db:87:46:87:0f:13:fa:59:52:8c:c3:52:25:cd:bf:4e:46:51:
0d:9a:28:83:10:1f:a0:64:65:fc:01:7d:65:ce:bf:51:5c:c1:
79:a4:2c:bf:89:c6:30:53:01:26:62:8d:f1:60:19:5e:16:3a:
2b:f3:d0:2d:2f:a0:40:2f:f8:50:57:6d:f6:f3:1f:2a:f7:f0:
87:6f:65:27:ee:46:8c:c4:2f:09:fa:bf:56:9c:ce:b8:0b:5e:
49:a0:72:43:0b:55:47:63:e6:b3:f0:2c:30:76:57:89:69:61:
87:39:74:7f:27:80:a5:c2:34:e8:a4:57:a3:d0:af:9b:4a:43:
18:f7:1c:d6:53:d8:07:27:34:27:92:1c:3f:ff:1d:30:33:d7:
54:25:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:33 2025 by rpki-client