Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json)
Hash identifier: rgPAjUbKiSdE0iIlOBuTZ5Fo3h74vbVSa+/hb/yQ7ag=
Subject key identifier: F1:FA:0C:63:C0:96:F4:95:CB:42:87:9A:15:CE:A6:F7:C1:A0:7F:8F
Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9
Certificate serial: 21BA442DBA675110EEBCE73B978D7492D2AD339D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
Manifest number: 0117
Signing time: Fri 31 Jan 2025 08:54:48 +0000
Manifest this update: Fri 31 Jan 2025 08:49:46 +0000
Manifest next update: Sat 01 Feb 2025 09:54:46 +0000
Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: DuURsXz8f3EDH+Fj/SyNEKU4fjyyuyj+wNGHtyPFMVM=)
2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: nGPaoJsTa0iz1OKWgPTFsxZ5o789bs60P5bQmrEBxPY=)
3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: tepnhtpStfx+iROmpj+cPwbcFtzKc4geGeglxL8Depc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ba:44:2d:ba:67:51:10:ee:bc:e7:3b:97:8d:74:92:d2:ad:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9
Validity
Not Before: Jan 31 08:49:46 2025 GMT
Not After : Feb 1 09:54:46 2025 GMT
Subject: CN=F1FA0C63C096F495CB42879A15CEA6F7C1A07F8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:bf:1c:e7:63:67:21:95:c6:d5:d5:66:50:
3f:82:0b:47:3f:57:b1:4e:6c:fa:4c:36:7e:87:a1:
95:2a:64:fd:6e:05:f5:a0:bc:ee:f0:d7:17:f9:c6:
47:64:e3:b4:3c:46:65:50:4a:87:ad:9a:4e:6f:0b:
5f:90:4d:85:16:b2:08:d0:12:ca:d2:9f:55:b1:f9:
73:c1:34:2c:45:b2:57:be:86:47:38:23:c2:a0:44:
87:bb:03:47:e8:5a:ef:2d:f6:61:cb:1d:d2:70:9d:
97:4f:73:b5:71:3c:20:43:df:22:a3:06:6e:ff:53:
53:4d:35:b7:e8:16:c6:16:f1:b2:29:03:89:87:91:
1e:44:ee:6d:db:b7:97:0c:e9:ea:77:2d:dd:fb:8f:
bd:52:11:7f:fa:6c:f6:db:77:0d:60:9f:ab:fe:fe:
88:b6:5e:8e:41:04:0c:c7:95:41:6d:76:b1:97:a8:
62:94:77:74:5d:b3:e8:3c:f3:2b:24:4b:34:9f:e6:
1d:e4:76:52:4d:17:75:a3:df:f6:fa:0e:f7:f0:78:
bc:8a:b1:34:48:50:d4:fa:22:29:4f:25:5c:b9:c4:
a6:1a:1b:c3:66:62:3b:00:59:2d:a1:17:df:14:b1:
60:8e:48:39:e2:60:0c:8e:98:b4:b2:59:1f:10:6d:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:0C:63:C0:96:F4:95:CB:42:87:9A:15:CE:A6:F7:C1:A0:7F:8F
X509v3 Authority Key Identifier:
keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:74:5d:9d:a1:12:cb:08:6b:97:12:17:36:02:8e:bc:93:3e:
d4:fc:f1:33:f7:ee:d7:25:3d:68:c4:af:46:68:ae:71:fa:fe:
c8:78:f5:cc:fe:ba:0b:64:9d:c0:92:da:1d:ff:88:4d:ee:7d:
61:f3:89:f6:a0:c5:f4:f3:25:15:78:ea:db:58:43:af:a1:e9:
db:86:21:9e:4b:45:50:c3:6b:9d:46:15:19:e7:07:4c:41:4d:
67:72:53:52:68:a6:b7:ae:d0:a5:dd:73:ba:cd:57:ff:78:fa:
e6:50:ed:b7:de:19:0f:41:28:ae:be:d9:08:7a:6d:44:4d:8f:
56:f8:35:2f:d3:10:e8:93:22:61:09:4d:7d:27:7c:81:5a:d9:
b0:90:a6:c0:66:12:19:7a:a9:01:95:0e:a8:8f:06:36:af:d5:
01:c4:2d:f6:f1:e7:d1:d9:96:76:2e:17:5c:50:ce:9d:bb:e8:
d7:2e:35:d2:03:2c:0e:33:77:aa:1d:7b:52:d3:81:f2:e3:66:
29:48:c3:bd:d9:7a:18:d2:43:0a:84:7a:ea:9a:ef:86:c2:6a:
5a:0d:2c:b7:be:fb:13:a8:ae:0a:f6:8a:db:39:ea:be:55:fb:
72:0c:0a:8a:d0:7f:1b:ef:dd:8e:e1:85:a1:ab:03:4f:75:87:
da:a3:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:13 2025 by rpki-client