Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json)
Hash identifier: A2tuQewtp6abVgsBmsQ/9/HOtCGcr1uXuDj4cg17vRI=
Subject key identifier: 8C:EB:3E:25:02:5F:01:7D:F2:38:6C:39:C1:F7:70:55:79:3E:5D:D6
Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Certificate serial: 3EFD10AE1306C48B095D27C12C8D1524476B597A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
Manifest number: 011A
Signing time: Fri 31 Jan 2025 12:15:14 +0000
Manifest this update: Fri 31 Jan 2025 12:10:11 +0000
Manifest next update: Sat 01 Feb 2025 16:05:11 +0000
Files and hashes: 1: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: i2iB6YVLT5JYbpw54S9VrpRYgnjxp0KAmu7VBiJDogE=)
2: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: bGVhhAjrSr3hrPp0uo7loREHTNsf8cdWrceDPcnFXQ8=)
3: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: K9EknQecR357zyEbt4Ik18qSt5faBYxt5/KQfQFvBXQ=)
4: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: JfPLPRAt2VAp3nl2F0n1tbo6w9Newb0Wr4PBuXgYvr8=)
5: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: C95ywb+lkDyY2oKJFrAV5C3Ws1ELTpp8HQp+6IXsVSo=)
6: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: ClVHvr7GojPar4zAMCD4eI2tBACybHPAaOLXDJDUg04=)
7: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: peEWNd0YL6h2f+IuETNQmau2DbuDTFrugtWV/YFAw0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:fd:10:ae:13:06:c4:8b:09:5d:27:c1:2c:8d:15:24:47:6b:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Validity
Not Before: Jan 31 12:10:11 2025 GMT
Not After : Feb 1 16:05:11 2025 GMT
Subject: CN=8CEB3E25025F017DF2386C39C1F77055793E5DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:30:51:d1:b2:b7:24:df:a5:45:24:83:a4:
67:fc:c9:05:6a:2d:94:b8:19:e6:20:5f:33:fe:fd:
8a:2b:b0:86:4c:08:e1:55:20:f4:35:0d:c6:a0:ba:
19:61:c7:e0:f3:2e:d9:b0:b5:14:60:fd:8b:54:a5:
0e:79:b3:1c:d2:0f:bd:dc:34:cb:e6:85:da:64:02:
e6:53:40:68:bb:83:56:a8:fa:6f:72:cc:f7:35:e8:
f5:03:02:fd:9c:ac:98:af:9a:cd:2e:24:b5:9c:cc:
0c:df:e2:d3:a1:37:04:fd:4e:65:ae:ea:51:0d:54:
7f:ba:6e:28:b1:7e:dc:9f:c6:fe:0d:9f:ad:29:42:
48:6d:c3:41:8c:d6:84:46:04:71:c6:b5:08:d6:36:
b6:89:c5:31:7c:bc:dc:fd:61:96:cb:7d:87:03:b7:
65:28:e5:2d:7e:97:07:2d:66:38:c7:4a:06:99:e1:
5c:c2:15:e7:f1:30:9b:d8:48:f3:2d:e2:8c:da:e2:
59:dd:08:0c:0c:fc:f6:bd:79:cc:a5:68:71:17:49:
b9:7c:68:7c:54:ed:c2:fc:3d:5d:48:29:62:0f:88:
5b:db:b8:41:84:7e:f7:f0:a8:2b:e7:58:30:34:e2:
2d:98:20:f2:0f:c7:ba:b0:6d:02:77:ed:a5:8e:01:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:3E:25:02:5F:01:7D:F2:38:6C:39:C1:F7:70:55:79:3E:5D:D6
X509v3 Authority Key Identifier:
keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:25:19:38:11:9c:c6:4d:e2:c9:cc:92:9f:ad:61:6a:74:19:
a4:e7:b9:e3:b0:6e:f6:bd:1f:03:1c:a4:c6:f1:5b:ab:12:0f:
4c:ba:17:83:2f:b2:17:7e:41:0f:5c:e9:80:5e:64:1c:f4:53:
97:bc:cd:cc:19:a5:2f:f7:0f:13:a3:46:cf:30:93:9f:16:e9:
de:80:11:78:41:6d:3c:b0:22:68:05:14:18:b0:eb:19:0d:c1:
56:65:42:1b:95:90:66:7e:ce:fe:7a:06:68:97:18:82:c0:6a:
33:a9:c2:5c:59:a3:04:1c:d5:12:22:56:7c:c7:dc:aa:f7:47:
71:4d:ea:cf:85:35:aa:28:26:01:a0:1e:14:85:52:e1:16:12:
07:79:61:32:a0:b5:65:d7:e1:df:2e:9a:62:b4:ef:57:39:78:
af:94:38:4a:f0:6f:e2:b4:c1:1e:58:71:1a:52:7a:83:bf:af:
92:c9:b7:eb:55:2e:29:6b:0a:a8:a6:6a:09:6b:9b:75:11:e2:
e3:5d:22:5f:72:b7:ba:27:04:73:19:d2:f3:a4:43:36:65:95:
77:93:12:fe:52:2b:39:ba:40:21:db:9e:67:73:dd:cd:48:fb:
d6:46:98:05:e3:19:14:b4:0f:00:0b:33:4d:4e:e1:0a:11:7a:
74:23:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:56 2025 by rpki-client