
Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft
File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json)
Hash identifier: oUzAFW3uZvelAe0+vBqapipByLhQlT3nCTuTxBhiyKs=
Subject key identifier: 19:F4:82:0C:0C:3D:79:A3:73:A6:C3:5C:37:72:78:45:A1:7E:5E:17
Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E
Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E
Certificate serial: 2F01704CAB4B39447A053A50A413CD3C8503562B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft
Manifest number: 0114
Signing time: Fri 31 Jan 2025 18:29:09 +0000
Manifest this update: Fri 31 Jan 2025 18:24:07 +0000
Manifest next update: Sat 01 Feb 2025 18:36:07 +0000
Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: 0F+KpVRqop+Bapw2FgaOdA0EGUJ54/Xl0ohjhVqWM/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:01:70:4c:ab:4b:39:44:7a:05:3a:50:a4:13:cd:3c:85:03:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E
Validity
Not Before: Jan 31 18:24:07 2025 GMT
Not After : Feb 1 18:36:07 2025 GMT
Subject: CN=19F4820C0C3D79A373A6C35C37727845A17E5E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:a6:a9:b8:bc:03:04:b6:d5:e6:61:0f:84:
58:67:53:2a:c5:28:7d:31:29:e5:25:a1:6c:d3:63:
f2:1a:a6:25:51:56:c0:a2:5e:4a:f1:79:fe:9c:da:
d3:69:ad:12:7d:cb:e7:6e:c1:1c:72:28:86:64:20:
04:d5:ad:ed:1f:5f:88:65:49:19:56:16:38:76:9e:
60:1d:0b:72:11:ed:35:39:cf:81:c7:12:74:05:58:
cc:ba:33:34:3f:2a:9e:c0:a1:a4:36:f9:0c:82:e5:
d5:1e:d1:15:6e:2f:df:77:b1:9a:b8:39:57:fb:f4:
32:e2:86:c9:ef:bc:08:fb:25:16:84:09:ab:8d:42:
b2:6e:82:94:0f:9a:fc:1f:64:b5:19:de:a0:d7:24:
51:a7:ea:ae:4e:58:82:bb:87:da:ae:5d:1a:d9:b7:
39:29:58:cf:a7:09:0b:3a:f3:3b:9c:57:76:8b:7b:
9e:ee:34:4f:75:9c:01:0b:4c:69:1e:1a:8b:ed:ef:
72:7e:d3:b9:97:70:e9:dd:73:74:68:ab:51:19:56:
83:25:04:0e:a7:fb:4d:29:d7:c3:cf:05:44:e8:cf:
a9:39:35:da:c9:a0:f4:26:e7:a3:ba:ec:3b:40:e1:
8f:67:d4:20:f2:6b:02:95:82:6d:90:18:ad:42:fe:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F4:82:0C:0C:3D:79:A3:73:A6:C3:5C:37:72:78:45:A1:7E:5E:17
X509v3 Authority Key Identifier:
keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:74:d3:fa:58:7c:63:17:23:f4:6f:8d:6e:1b:44:60:e0:
8b:9d:0b:5e:64:1c:da:08:2f:8f:79:d9:9e:31:03:ef:db:73:
9d:01:39:fc:ca:50:98:17:ee:bc:fc:ba:15:ce:3f:6f:e2:cd:
8c:92:fe:b6:18:06:30:c7:1c:36:e5:70:43:ae:5b:88:c8:73:
2a:b2:5f:e5:01:1a:4a:4b:2c:23:34:50:a8:34:35:1c:1b:ae:
fe:f6:9f:e2:40:51:3f:28:65:23:de:03:59:55:f9:cd:3d:3b:
2c:ce:68:4d:43:72:80:02:21:fa:31:e9:e2:2e:5e:21:10:bf:
ff:15:76:b1:2a:d5:ed:b2:a8:ab:93:56:a4:7f:68:36:ec:2d:
37:72:85:25:fd:c6:d7:66:4e:9e:6a:8c:6f:6b:a1:60:78:55:
19:74:5d:db:18:19:c9:ba:10:59:5c:b3:ad:45:47:2f:2f:1d:
1f:54:5e:92:cf:bb:4c:5d:f0:e6:41:64:fa:fe:40:b2:ce:ee:
b7:c0:85:bc:fa:b2:4f:92:9f:e7:eb:9b:03:a0:88:7b:ab:74:
5b:f9:29:36:1c:79:a2:52:97:4d:ef:63:a5:99:a8:32:44:0d:
43:10:14:49:73:1b:99:f7:69:65:4c:98:1f:a9:6f:cc:52:14:
98:3d:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:44 2025 by rpki-client