Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: G13G4oUet9AJRTDDhhqv284MYUrA2Z6xDTNWoNErKVc=
Subject key identifier: B8:3B:C7:28:4B:D1:0A:E7:1B:DB:F1:85:5B:86:81:79:9B:8C:5D:21
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 685D61F9854C780A5B22E9D7079A6CC0DC94A4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0117
Signing time: Fri 31 Jan 2025 14:17:48 +0000
Manifest this update: Fri 31 Jan 2025 14:12:46 +0000
Manifest next update: Sat 01 Feb 2025 15:42:46 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: aDTBt7VX2t7KGFKtDhaS5nkayuAsjwjWyP0Oimz+1Fw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5d:61:f9:85:4c:78:0a:5b:22:e9:d7:07:9a:6c:c0:dc:94:a4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Jan 31 14:12:46 2025 GMT
Not After : Feb 1 15:42:46 2025 GMT
Subject: CN=B83BC7284BD10AE71BDBF1855B8681799B8C5D21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:31:94:92:23:44:0f:2e:a7:e5:b3:5f:2f:
c9:04:e4:79:8e:b9:ae:68:92:e1:6e:ee:a7:d4:06:
69:05:69:fc:f1:4a:c8:16:43:0a:54:c3:48:8b:95:
b2:7a:6d:ab:45:e5:33:0c:36:18:65:cb:fa:09:89:
27:04:35:c9:f6:ec:b2:e2:ee:a1:18:23:56:5d:5f:
fb:e9:ec:07:a7:dc:90:2b:c3:4e:1c:e8:85:d4:6c:
fc:59:77:7c:24:d2:9d:ea:66:bb:47:31:4e:6d:2a:
0d:50:1f:9e:01:cc:4b:a9:c9:6f:fc:8a:5a:bb:94:
08:3b:0c:40:32:53:0c:79:ac:06:93:b5:36:d5:6d:
49:1c:51:f8:de:0a:17:44:59:4b:72:ae:6e:72:dd:
7a:55:b2:47:61:00:af:6b:01:e4:89:e1:8d:5c:55:
81:ac:e5:95:79:63:a6:b6:a7:2b:96:b1:b0:20:f1:
2d:80:40:52:c0:72:19:b5:d2:94:31:7b:51:67:6e:
2d:88:28:32:6d:ef:70:08:9a:6b:4d:60:d4:77:1a:
a5:a1:5d:54:f5:61:61:01:c5:2d:5b:05:fe:ef:4c:
2e:94:31:10:05:21:ec:b2:44:66:04:f9:ae:2d:14:
3a:86:01:12:94:73:ac:05:5c:a8:6a:db:5e:24:3b:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:C7:28:4B:D1:0A:E7:1B:DB:F1:85:5B:86:81:79:9B:8C:5D:21
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:db:09:cd:c1:92:c5:fb:97:0c:81:43:0b:06:e7:b3:4b:
6e:0d:4a:7f:b9:f8:03:0d:f7:ef:c4:cd:f8:30:93:db:bd:74:
fa:23:30:55:0d:d5:98:a9:3a:75:58:a2:17:07:bb:50:95:94:
db:2d:24:ea:13:d8:61:b2:e8:57:88:6c:bc:f9:ac:ab:6e:45:
0c:db:7a:17:8d:38:b9:ff:19:ae:62:d5:d8:88:62:21:49:42:
f8:86:1b:80:28:82:7a:de:a5:8d:4d:43:e2:0f:89:e0:3e:5c:
f4:e2:36:ce:77:28:57:5f:b6:3f:fb:5c:d1:04:46:f7:58:f6:
34:26:b0:d9:0a:3b:e5:94:2f:a1:d3:3e:d1:25:21:a2:4e:99:
b3:ed:f7:77:7d:a8:f4:f5:0a:05:d5:c0:eb:b8:59:86:a9:7f:
22:dc:76:9b:d5:9c:8f:da:95:69:2a:70:b9:3d:92:bb:c7:92:
67:c5:5b:3c:eb:ce:b0:dc:1b:6c:04:0c:fc:7b:5a:f1:c9:a7:
a1:84:7d:26:fa:60:65:7c:03:d7:e3:1a:76:f8:ff:cb:72:19:
c6:4f:e5:6b:dd:ff:12:94:e3:b0:0c:d6:46:ec:11:df:fa:c9:
c6:59:e5:24:e9:e3:e5:b5:eb:74:c2:86:f7:06:44:f5:af:6f:
9c:02:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:57:10 2025 by rpki-client