Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File: B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier: 52VLMK1rHK89GKKltDvkXAeIrRJKx26SpQW4eWkCCeA=
Subject key identifier: AA:1F:BD:42:86:04:18:45:79:CA:B8:60:BB:8D:52:48:C4:88:76:FA
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer: /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial: 5B5A2740189283DFC6B4D8BB4193B93D3A4C529B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number: 0114
Signing time: Fri 31 Jan 2025 06:02:11 +0000
Manifest this update: Fri 31 Jan 2025 05:57:09 +0000
Manifest next update: Sat 01 Feb 2025 08:12:09 +0000
Files and hashes: 1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: vYLqWsD7J38U78pGKHpIhhF5viAQHE2+LXPNf0ppszQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5a:27:40:18:92:83:df:c6:b4:d8:bb:41:93:b9:3d:3a:4c:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
Validity
Not Before: Jan 31 05:57:09 2025 GMT
Not After : Feb 1 08:12:09 2025 GMT
Subject: CN=AA1FBD428604184579CAB860BB8D5248C48876FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:64:a1:35:1c:4e:62:ad:3f:3a:9e:9c:53:
71:b5:58:b0:a3:c0:30:85:e9:dd:bd:14:9c:68:4a:
d6:36:0c:83:03:f3:79:d8:96:4d:de:02:40:ea:e5:
f5:c9:ee:1f:9f:fa:f9:60:a9:82:87:ad:ad:9f:ff:
e1:81:da:86:d1:08:2a:f6:ab:f1:34:12:c2:9b:4f:
de:99:11:7f:f1:50:ce:52:e7:6a:d9:da:bb:1f:fd:
28:14:18:42:0a:b5:7c:79:af:cd:ab:b7:22:63:b3:
27:7a:82:fe:69:d4:ff:31:85:25:f7:79:80:c3:72:
17:4b:bc:62:b8:92:02:77:c1:37:c0:2a:4f:c6:56:
45:68:a8:27:c9:01:15:bb:46:4a:be:41:e1:3b:5b:
01:e7:fc:82:e9:0f:4d:fe:4c:59:93:12:4a:bd:c8:
00:79:3d:92:b1:cc:7e:f1:e7:57:85:52:1e:17:06:
3a:5f:2b:5f:74:30:d7:db:93:97:d1:34:a4:38:6f:
65:bd:8f:cf:d3:c8:f6:bb:46:22:8d:ae:aa:5c:fa:
0a:ec:9a:a7:9c:8e:2e:8c:4b:4d:f7:44:1f:21:a6:
76:a8:95:07:b7:6e:07:83:53:5a:69:c0:db:67:e1:
52:a9:c6:56:d6:74:b4:b8:83:63:69:0e:7a:d2:b9:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:BD:42:86:04:18:45:79:CA:B8:60:BB:8D:52:48:C4:88:76:FA
X509v3 Authority Key Identifier:
keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:df:56:00:14:23:6a:09:6f:97:2e:01:be:64:7f:4f:d0:
6c:81:cc:37:b7:86:48:da:f5:c4:85:09:9c:d5:9a:01:05:50:
b9:31:9b:ae:9e:69:02:c3:fb:cf:29:a7:2f:2e:53:46:99:d7:
9e:8c:0c:ea:43:47:a7:4b:f7:85:bd:43:8d:60:7b:db:e3:cd:
a6:77:ee:f7:90:cd:0b:3a:e3:4f:8a:e2:16:31:04:33:e5:42:
ed:4c:61:22:b0:e1:f9:32:20:06:ae:98:b8:e7:ab:ae:b9:38:
d0:8d:6b:28:6a:1c:52:0c:51:f3:23:07:24:e0:9b:5d:f4:43:
47:3a:4e:37:0e:73:39:d7:eb:8f:84:20:68:8e:cb:90:6f:cd:
0f:62:f9:50:d1:e5:8a:ce:ba:c7:f4:e5:60:a6:83:c0:0f:14:
f0:80:09:82:59:7b:79:d5:75:2a:26:2c:4f:94:52:e4:f6:e8:
e5:a6:9a:15:33:1c:41:6e:b9:96:8f:f0:3f:3b:c4:b2:4c:23:
a7:f8:0b:30:14:0d:0e:56:88:65:6b:49:23:0f:e2:f4:86:ce:
87:c1:7c:af:38:f0:51:13:93:30:77:4f:81:92:34:f9:04:7d:
d1:ff:05:63:48:7e:14:02:10:42:12:c7:4d:52:bd:57:27:a8:
31:c7:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:56:36 2025 by rpki-client