Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier: fIUWmLxdPaVnha0rn0iUXl8ucoAqL9QalSLl8tPKCi8=
Subject key identifier: 87:AA:69:DD:12:B4:C0:A0:42:68:B1:25:E1:67:CC:0E:17:C0:73:60
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial: 01728F0842488C47CB659E7B0A36183C6114753F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number: 0118
Signing time: Fri 31 Jan 2025 15:08:03 +0000
Manifest this update: Fri 31 Jan 2025 15:03:01 +0000
Manifest next update: Sat 01 Feb 2025 17:53:01 +0000
Files and hashes: 1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: x52AAXUYUYjUvosLcezGF/eyY3vKKLk7fNCVenLPq4g=)
2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: Z89FcbCrTMtBscw2h5W75CHunYRsXIbcHNYXASnkLN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:72:8f:08:42:48:8c:47:cb:65:9e:7b:0a:36:18:3c:61:14:75:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Validity
Not Before: Jan 31 15:03:01 2025 GMT
Not After : Feb 1 17:53:01 2025 GMT
Subject: CN=87AA69DD12B4C0A04268B125E167CC0E17C07360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:e6:85:5a:ea:89:1b:cd:d0:c3:09:1b:97:
43:be:55:78:26:1a:b4:df:24:da:a4:f9:2a:08:95:
fc:6d:ec:b3:44:10:36:a4:23:e5:9a:1c:1f:b0:cc:
8d:4b:89:82:b4:ca:24:55:76:44:55:39:16:66:7c:
b3:5f:e3:f4:74:92:7a:f3:6f:7b:4f:08:19:0a:3d:
f2:37:c7:c7:a1:ed:89:79:8f:48:4d:bc:2d:3b:5d:
bf:15:d0:42:29:e7:5e:5f:1c:9a:6f:31:e5:0c:cb:
3b:a9:8f:3b:dd:d8:71:01:76:f7:2a:66:c2:d0:54:
d3:ad:9e:22:db:9c:b5:37:4c:db:29:39:70:c8:27:
68:92:57:8a:1a:52:fe:bc:53:82:a6:f0:d8:89:08:
68:23:71:95:e9:d6:ab:3d:c7:be:28:f0:4b:c0:54:
10:29:cc:e6:d1:15:0e:d3:af:d9:78:50:a4:b6:6d:
74:7f:c1:99:bc:92:40:3d:bd:e7:d8:9e:70:f5:2c:
fc:7c:40:84:0d:15:8c:73:48:4f:f3:e3:ba:21:5e:
91:45:ff:0d:bd:7d:d6:55:38:12:a5:58:1e:c8:4e:
58:10:5c:96:b2:e5:90:6f:61:bb:48:11:fe:6e:8a:
23:60:4f:33:83:97:28:cc:95:1a:ed:3d:fb:fe:40:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:69:DD:12:B4:C0:A0:42:68:B1:25:E1:67:CC:0E:17:C0:73:60
X509v3 Authority Key Identifier:
keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:1a:9c:ea:dc:a1:1e:78:fd:ef:b5:ee:2c:fb:86:6c:a3:
90:cf:b5:d7:03:4b:a1:cc:2e:f5:e7:c6:62:6b:31:db:0c:60:
96:4c:70:da:d8:44:26:d0:df:60:06:59:a6:01:72:ee:60:84:
13:d8:00:93:20:e1:6f:6e:a7:6c:09:99:8c:a5:73:a6:0f:d4:
e9:a2:c2:f8:c1:6d:6e:ab:a1:f1:33:eb:db:99:4d:a3:89:10:
d0:d6:01:59:04:7c:9c:49:73:b2:a4:66:70:93:fa:57:b7:d6:
52:b3:7c:6a:bc:1b:44:90:66:ac:33:27:cb:58:34:4c:44:07:
b7:8b:07:39:51:7d:d8:6e:15:81:8a:c6:88:56:0e:82:27:de:
86:10:01:1d:50:a0:e3:de:41:38:4d:64:51:54:95:ec:d9:ac:
ed:72:a1:fe:83:49:d4:e5:1b:a3:23:47:9e:ad:f7:c7:22:d3:
3a:1b:ac:e3:de:14:c4:68:d5:07:7f:0c:39:ef:92:1e:b1:92:
c4:5d:2c:f7:45:a7:9f:bc:25:14:3f:dd:6f:fc:ed:a0:ca:1b:
52:fa:66:1c:ca:26:51:42:da:18:82:39:82:64:7b:66:85:56:
85:ec:05:9e:b4:1c:1f:2f:5e:3a:78:96:89:32:c1:22:f0:78:
dc:be:24:10
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUAXKPCEJIjEfLZZ57CjYYPGEUdT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD
NkJBNkE0MjAeFw0yNTAxMzExNTAzMDFaFw0yNTAyMDExNzUzMDFaMDMxMTAvBgNV
BAMTKDg3QUE2OUREMTJCNEMwQTA0MjY4QjEyNUUxNjdDQzBFMTdDMDczNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HOaFWuqJG83Qwwkbl0O+VXgm
GrTfJNqk+SoIlfxt7LNEEDakI+WaHB+wzI1LiYK0yiRVdkRVORZmfLNf4/R0knrz
b3tPCBkKPfI3x8eh7Yl5j0hNvC07Xb8V0EIp515fHJpvMeUMyzupjzvd2HEBdvcq
ZsLQVNOtniLbnLU3TNspOXDIJ2iSV4oaUv68U4Km8NiJCGgjcZXp1qs9x74o8EvA
VBApzObRFQ7Tr9l4UKS2bXR/wZm8kkA9vefYnnD1LPx8QIQNFYxzSE/z47ohXpFF
/w29fdZVOBKlWB7ITlgQXJay5ZBvYbtIEf5uiiNgTzODlyjMlRrtPfv+QPJJAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUh6pp3RK0wKBCaLEl4WfMDhfAc2AwHwYDVR0j
BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv
MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG
NEM2QkE2QTQyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2VjYjM0
YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEzMzlDNUJDQ0U3MDlD
QjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHAYGpzq3KEeeP3vte4s
+4Zso5DPtdcDS6HMLvXnxmJrMdsMYJZMcNrYRCbQ32AGWaYBcu5ghBPYAJMg4W9u
p2wJmYylc6YP1OmiwvjBbW6rofEz69uZTaOJENDWAVkEfJxJc7KkZnCT+le31lKz
fGq8G0SQZqwzJ8tYNExEB7eLBzlRfdhuFYGKxohWDoIn3oYQAR1QoOPeQThNZFFU
lezZrO1yof6DSdTlG6MjR56t98ci0zobrOPeFMRo1Qd/DDnvkh6xksRdLPdFp5+8
JRQ/3W/87aDKG1L6ZhzKJlFC2hiCOYJke2aFVoXsBZ60HB8vXjp4lokywSLweNy+
JBA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:18 2025 by rpki-client