Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json)
Hash identifier: MktQXzVuLTjho90HjZF2nh+m+3nlYV54Lba0LqQADGQ=
Subject key identifier: 67:78:8E:E9:5A:EF:E6:CD:69:77:09:DB:DF:80:E6:AC:04:DF:4D:8E
Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Certificate serial: 2C2A290F2AEAFF1C5DCC138857F4C73C5F074CD8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
Manifest number: 0115
Signing time: Fri 31 Jan 2025 08:49:01 +0000
Manifest this update: Fri 31 Jan 2025 08:43:59 +0000
Manifest next update: Sat 01 Feb 2025 11:29:59 +0000
Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: tAz1brs6GUknl3agYJuy0CUYix3hpoEMhdtqBK+1F3Y=)
2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: 3DuIOWLJO8NrLMIsuHapBMIFfNv6pqKViDwoNolMhc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2a:29:0f:2a:ea:ff:1c:5d:cc:13:88:57:f4:c7:3c:5f:07:4c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Validity
Not Before: Jan 31 08:43:59 2025 GMT
Not After : Feb 1 11:29:59 2025 GMT
Subject: CN=67788EE95AEFE6CD697709DBDF80E6AC04DF4D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:29:e1:13:d5:1e:b9:e6:e1:70:74:a0:98:
e4:cc:3c:b9:72:7e:c4:f5:5e:49:27:e9:3c:31:6d:
00:57:61:6c:85:2c:f5:37:69:c7:b1:2a:0f:44:3e:
b7:02:6b:db:4b:0c:0b:15:2e:42:94:99:85:a3:04:
db:6b:a0:9e:d9:af:d8:d5:de:cc:ab:25:58:cb:f1:
4a:83:d5:fb:ad:87:de:47:77:e5:62:f5:59:5c:9c:
e1:05:89:2b:84:52:99:22:6d:2c:16:df:66:b2:87:
c1:61:8a:36:66:13:6c:3e:f5:31:c8:3a:be:0b:60:
c0:17:67:cd:9d:ea:b6:55:38:6f:4f:36:49:56:8f:
85:f4:b1:39:f5:a9:6e:a5:b1:01:fe:bb:c7:3a:51:
f1:72:c8:5d:67:53:82:13:b8:ea:b7:c6:96:ea:4b:
4e:bc:86:4e:89:ae:14:fe:bd:c3:8b:68:b9:81:f5:
33:66:17:85:80:d0:84:bb:c6:a1:02:0a:e5:0f:a6:
1f:af:80:b1:22:1d:3c:5b:91:a0:a6:f8:7e:83:b4:
fe:1e:9b:50:95:a8:a6:4b:70:20:c7:63:6a:58:07:
5f:44:6a:34:e7:81:ad:3a:e5:d7:d0:99:9a:92:d7:
de:9d:51:46:60:88:99:8b:cd:87:7b:21:e3:a2:dc:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:8E:E9:5A:EF:E6:CD:69:77:09:DB:DF:80:E6:AC:04:DF:4D:8E
X509v3 Authority Key Identifier:
keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:80:8c:58:fd:d9:57:93:5c:bb:5f:7c:db:0c:f7:70:fd:53:
ef:99:91:fb:ee:23:83:91:4c:cb:90:a8:85:ae:b5:1b:76:b4:
9a:7b:d8:69:2b:db:01:b8:40:95:04:59:93:07:77:82:7c:c4:
91:d7:cf:8c:45:78:8c:2a:23:9f:6b:50:1d:21:75:75:d0:a9:
ee:0b:f3:4f:0e:c3:44:c5:f7:4b:00:7c:89:aa:ff:25:6b:54:
78:5a:39:ef:76:88:f6:f0:40:0f:b2:3b:62:a5:38:3a:5e:07:
46:42:04:46:89:bb:51:6f:42:4c:ba:55:76:b6:be:1b:e0:ef:
fa:87:11:24:92:ed:5b:c3:5e:e8:d7:17:b1:a0:1d:6d:87:01:
41:db:2e:48:d9:a2:e2:6d:24:0f:15:27:7a:0b:d2:23:81:09:
7d:e7:30:a8:81:3a:32:8a:3c:5e:83:ba:c0:93:02:0b:06:41:
25:39:6b:35:f9:f5:4b:e8:d2:f8:fb:79:c8:1f:b5:b3:ec:8e:
78:71:5d:e8:f3:f1:79:37:b3:87:11:d8:ac:f3:4f:f9:15:66:
14:84:8b:62:45:09:ac:28:64:00:4c:aa:d8:5f:05:b0:d5:64:
a6:a7:b5:20:ec:93:73:57:c4:55:6f:eb:b0:a4:e6:5f:47:1d:
7e:98:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:54 2025 by rpki-client