Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json)
Hash identifier: Ua2k8gskHYdxg+FHR5lNII3kUtXU07+39lVA/wTfd58=
Subject key identifier: 3E:7B:01:87:8E:A3:C4:5E:DD:C0:27:3B:57:0D:5B:5B:E3:30:24:E5
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial: 48AC5CB967EC1EDAEDD05078F816901D604E391D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
Manifest number: 0116
Signing time: Fri 31 Jan 2025 02:58:19 +0000
Manifest this update: Fri 31 Jan 2025 02:53:16 +0000
Manifest next update: Sat 01 Feb 2025 06:52:16 +0000
Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 3embhe3BHYbwCceKhjm+bWSJYmW8Fqazf5GxbsoaZSo=)
2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ac:5c:b9:67:ec:1e:da:ed:d0:50:78:f8:16:90:1d:60:4e:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Validity
Not Before: Jan 31 02:53:16 2025 GMT
Not After : Feb 1 06:52:16 2025 GMT
Subject: CN=3E7B01878EA3C45EDDC0273B570D5B5BE33024E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:a6:d0:55:86:64:41:4b:d7:eb:c3:18:f9:
1c:97:3a:19:c9:c8:fb:e1:34:00:86:db:7f:38:d5:
80:64:00:bc:11:2d:7f:01:bc:ba:7f:85:59:5c:ac:
ba:3d:60:72:cc:50:8e:67:8a:87:e9:b2:dc:91:81:
ab:5f:de:5e:7a:34:4a:bf:26:04:01:70:86:c9:61:
5f:63:9d:0d:1c:4f:bb:b2:11:30:81:a3:1a:70:20:
4e:4d:8f:f6:66:b3:3e:6f:f2:85:6f:0a:12:74:d2:
bb:09:e6:b0:70:43:16:84:df:df:c7:75:ff:8d:68:
9b:b3:f2:71:41:92:50:97:f8:0e:bc:81:51:58:e6:
a6:9d:b0:47:f3:5e:ce:b4:96:c1:05:0a:5b:66:87:
ce:31:54:98:08:15:fc:55:cd:58:5d:98:20:6a:94:
a8:32:b9:88:ab:0a:4e:8a:21:b6:5f:f0:d3:87:21:
bc:1e:86:97:b1:8c:dc:50:19:4e:bb:8b:ac:7e:cf:
52:a3:1d:6b:77:ad:1e:e8:3e:9f:33:6e:3d:aa:86:
74:dc:f8:c0:c1:7e:a6:f7:49:96:bc:2f:19:da:36:
97:dd:25:f3:7d:73:5f:60:b9:a4:d0:66:8d:d0:27:
18:52:30:a0:36:2b:9d:f9:4e:9d:8c:28:c5:1f:21:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:01:87:8E:A3:C4:5E:DD:C0:27:3B:57:0D:5B:5B:E3:30:24:E5
X509v3 Authority Key Identifier:
keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f7:e5:ae:0c:b2:28:14:3d:75:64:71:31:5d:af:5c:59:c6:
d3:fb:6c:6e:e9:58:ea:2a:f3:8e:96:be:76:43:57:70:d1:83:
3f:0e:c6:58:a5:6b:7a:fd:60:cb:ab:6f:73:29:19:c8:c9:67:
f5:90:00:5a:2b:2a:bb:05:51:70:0c:8a:36:e8:1b:bb:c6:be:
4d:ca:9b:7a:91:81:b3:06:78:48:e1:2e:3f:8e:aa:15:bb:ec:
e4:66:e9:e2:4d:ac:31:12:6d:6f:2b:49:c2:cf:38:ed:d7:29:
88:6d:fe:c8:61:10:e3:1e:37:67:35:43:1e:f4:75:43:09:1b:
2d:d1:3d:99:91:cc:52:50:41:5e:f2:9e:14:61:0b:7d:bf:99:
73:06:e2:41:3e:43:6b:a0:c3:a6:4c:70:a5:6f:ae:7e:41:c8:
2a:77:12:8a:fd:43:be:ee:ab:24:c8:b1:75:f8:f3:c0:b7:3b:
6a:6b:6b:00:50:c3:78:30:f7:4c:2b:b2:bb:47:b1:66:78:f0:
60:a5:e6:9c:7e:f2:2d:37:96:0f:c9:b3:3e:3f:d6:fb:bf:8e:
17:2a:9b:06:5d:d9:d9:e3:dc:4f:56:29:7d:bb:d9:35:eb:1c:
94:4c:41:cc:20:90:db:3e:90:01:37:8f:a0:5d:e4:69:74:f9:
28:f5:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:28 2025 by rpki-client