Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json)
Hash identifier: 1LBS9+PnqcAcPyokJmW6m63ITLmDDv2uiNzn1dbvdxI=
Subject key identifier: D0:9D:E6:58:D5:DF:55:56:08:46:16:88:0B:01:17:43:03:EE:40:20
Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Certificate serial: 144167CD753C1EF4885AF7076FEB624F805FE9F3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
Manifest number: 0114
Signing time: Fri 31 Jan 2025 06:58:00 +0000
Manifest this update: Fri 31 Jan 2025 06:52:58 +0000
Manifest next update: Sat 01 Feb 2025 09:35:58 +0000
Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: HHWoZt0fp+PxU0awwWgMUTop8+aBnXRkoIXNct7Dlqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:41:67:cd:75:3c:1e:f4:88:5a:f7:07:6f:eb:62:4f:80:5f:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Validity
Not Before: Jan 31 06:52:58 2025 GMT
Not After : Feb 1 09:35:58 2025 GMT
Subject: CN=D09DE658D5DF5556084616880B01174303EE4020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:13:e2:9e:4c:3b:37:5d:84:d5:39:32:32:
fb:6d:dd:d2:b8:7b:4f:27:c8:67:d9:d0:a0:89:bc:
ae:54:78:e1:c8:fc:4f:be:2b:eb:2c:3f:21:6b:c5:
8b:20:aa:e6:dc:30:16:7a:52:20:d1:c5:48:b9:5d:
77:f1:3e:1b:2b:b3:8e:8b:9b:e8:e6:d0:b5:5a:20:
a1:fe:fa:e1:62:a6:e7:a1:5c:ce:9a:14:e5:a8:03:
15:d6:f2:da:7b:84:2b:eb:32:33:d5:c6:ec:17:41:
17:da:3d:ea:4f:30:e7:55:e3:33:04:f8:e9:da:dd:
ed:14:bf:ac:c6:93:7c:e9:15:d3:54:a6:38:2c:e4:
7d:d9:85:1f:dc:ea:ae:5b:04:59:30:b4:87:60:e4:
f4:ef:67:0c:4c:7a:07:ce:65:e4:62:3d:a7:fa:7f:
1d:1e:b2:bb:1a:ad:8b:93:97:73:e7:20:37:3a:5f:
bf:ac:15:af:75:e5:34:e8:ec:a5:28:1c:c1:f1:7e:
2a:49:ed:81:0c:8f:3f:66:86:ae:8e:ba:a4:4e:76:
20:58:29:b9:4d:cd:fc:8a:a2:59:27:c6:ad:8c:b7:
7c:cb:46:e6:fe:11:fe:60:11:a3:e4:0a:c8:33:56:
88:08:65:09:17:17:89:b7:4e:cd:a3:9f:2f:41:ab:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:E6:58:D5:DF:55:56:08:46:16:88:0B:01:17:43:03:EE:40:20
X509v3 Authority Key Identifier:
keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:87:f8:bd:50:5e:45:48:ab:48:e9:bd:8d:cb:2c:45:85:01:
c8:87:a8:12:c3:2e:fd:71:2e:2b:26:ec:bd:40:22:24:56:8c:
16:0a:67:92:f7:b3:dd:f8:01:10:95:ed:d4:16:72:55:a3:43:
36:f6:c3:f0:a9:53:92:6c:4d:e5:e5:6f:a1:93:4a:40:60:ad:
fc:8c:69:55:01:3d:08:fd:71:ef:fb:0b:3a:38:54:97:c2:8f:
0f:32:40:15:03:6b:15:16:42:85:2e:e4:be:6e:7c:d5:93:cb:
fb:83:f4:7f:eb:67:ff:b5:0d:48:fe:7d:a7:ca:db:df:bd:fa:
72:0f:88:d4:9a:12:22:64:e9:68:2b:f7:10:08:fb:2f:e1:c8:
0a:d6:26:76:01:a7:f6:e5:c0:40:e3:61:ab:5f:53:4e:11:d9:
47:50:a6:24:be:96:99:ba:df:45:30:1f:81:67:2a:30:32:ea:
8d:9d:22:b9:be:49:e6:68:a4:2e:be:09:eb:61:83:cf:3e:20:
8f:c6:f7:7c:e8:3b:cf:65:6f:d9:62:48:51:49:88:45:a2:59:
04:75:0e:a2:b5:5b:8a:98:e3:b6:cd:20:78:f2:f8:78:40:87:
8a:40:7b:bb:2c:3c:b0:30:96:35:09:88:74:bc:f0:f7:ba:9b:
e0:cc:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:32 2025 by rpki-client