Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json)
Hash identifier: yENuXou80rPmwz7HWeLyJRqABJdhg44uuuOg6uUFftA=
Subject key identifier: 2C:00:09:86:22:CC:B2:F7:A3:79:0A:19:72:4C:CE:65:47:A7:54:49
Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439
Certificate serial: 027E8886B4ABA07BB05524ED14458853E4F2732D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
Manifest number: 0113
Signing time: Fri 31 Jan 2025 09:55:59 +0000
Manifest this update: Fri 31 Jan 2025 09:50:57 +0000
Manifest next update: Sat 01 Feb 2025 12:37:57 +0000
Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: ZrnGKp52VwdIW6ADcyljrQKRdejSedsJmdCAWzqhtHs=)
2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: EZtdbuIeAlW2dqr5+wYF+H1bZXFUIlmIyR/auZCsW24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7e:88:86:b4:ab:a0:7b:b0:55:24:ed:14:45:88:53:e4:f2:73:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439
Validity
Not Before: Jan 31 09:50:57 2025 GMT
Not After : Feb 1 12:37:57 2025 GMT
Subject: CN=2C00098622CCB2F7A3790A19724CCE6547A75449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:f6:e7:f1:6c:47:93:20:41:4f:86:6a:dd:
24:8c:03:cb:28:ad:83:eb:2d:31:e7:35:b5:65:37:
80:17:6c:f2:14:ca:bf:b3:14:39:f3:fc:52:b1:73:
22:72:7a:99:8d:a5:b3:12:46:c4:13:ab:f5:8b:48:
ce:49:95:fc:8b:61:1b:60:c4:77:9e:56:d5:09:af:
d8:b9:b2:5b:4c:4b:9c:63:ba:3e:fd:7f:5b:7e:d0:
cc:e4:e5:8d:b9:84:0e:03:04:b1:cc:53:8e:42:b1:
0d:06:36:ae:e3:ad:19:6b:71:6f:5a:28:7e:cb:5d:
d4:20:ce:22:fd:83:0e:73:c3:bd:f0:b7:9c:20:46:
7b:4d:36:f9:e1:d2:50:44:19:56:02:e4:98:c6:6f:
d1:03:7a:ab:99:cc:23:cd:fb:10:ea:45:d6:dc:91:
56:39:2d:d3:98:ad:78:26:6f:1b:15:02:76:ae:6e:
88:b4:9f:bd:0b:c2:d0:4c:1e:24:84:73:01:01:94:
81:58:25:11:25:41:a8:1c:8f:7d:77:0f:f2:35:07:
13:99:6e:df:bc:66:af:f7:ba:85:9a:e7:f2:74:ce:
57:62:f4:af:cf:85:ee:ba:e8:7b:08:5a:2a:f7:a5:
5b:0d:b2:3e:5a:98:dd:f8:93:fe:8a:f8:c2:a3:06:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:09:86:22:CC:B2:F7:A3:79:0A:19:72:4C:CE:65:47:A7:54:49
X509v3 Authority Key Identifier:
keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:0d:3f:cc:5c:b2:c5:e6:17:ce:9e:4b:ec:e4:eb:e5:69:
54:f7:01:78:ae:a6:dd:36:01:fe:97:fc:3f:9f:f4:07:ea:48:
0c:8d:65:be:31:a9:92:86:0b:9c:4c:d6:01:bf:56:db:d5:08:
26:38:a1:7d:cd:52:17:e8:26:42:4f:54:44:05:16:99:c7:45:
2e:f1:ad:cf:c0:e8:67:12:27:f6:0b:b4:bc:54:91:8f:99:1a:
2e:2f:36:ac:94:7b:32:6f:b8:09:b7:b6:56:0a:04:b0:c8:ab:
51:8a:89:95:4d:59:44:66:92:d8:19:81:0b:41:bb:b3:0b:4f:
58:35:b3:a8:88:94:d9:d5:0b:24:5f:c5:17:9e:a3:8e:01:b4:
de:36:76:3c:18:c0:de:1e:4d:39:7e:df:bc:de:e2:fd:56:66:
76:a3:0c:93:4d:63:20:02:85:36:51:24:63:5f:2c:35:ad:5d:
7c:2d:31:ec:29:23:0d:0f:47:80:fa:d4:cf:1d:34:c3:67:46:
19:05:51:2e:07:13:43:11:ee:1b:2c:78:90:d6:89:af:9f:5a:
a0:e5:5f:c1:8e:97:bd:b1:dd:9b:df:6e:a2:3b:8a:4b:78:39:
a0:ad:55:1e:45:91:dc:8d:de:1d:93:ba:e6:af:54:da:de:d5:
2f:a6:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:27:09 2025 by rpki-client