Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/2/CF88C32795224CB308CE6E3FC45CE07D9508E938.mft
File: CF88C32795224CB308CE6E3FC45CE07D9508E938.mft (raw, json)
Hash identifier: NoYI97N8+BUeXa6UjRs1Mbt2/l2PLWrNBx0q8UJVvBc=
Subject key identifier: 74:69:5C:BB:BC:F3:BB:24:9F:44:10:24:36:86:B3:3B:18:68:8E:72
Authority key identifier: CF:88:C3:27:95:22:4C:B3:08:CE:6E:3F:C4:5C:E0:7D:95:08:E9:38
Certificate issuer: /CN=cf88c32795224cb308ce6e3fc45ce07d9508e938
Certificate serial: 30A6B965F0EFE83972063545AF9CDC18F6090075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4jDJ5UiTLMIzm4_xFzgfZUI6Tg.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2/CF88C32795224CB308CE6E3FC45CE07D9508E938.mft
Manifest number: 0245
Signing time: Tue 06 Sep 2022 02:00:00 +0000
Manifest this update: Tue 06 Sep 2022 01:55:00 +0000
Manifest next update: Wed 07 Sep 2022 03:27:00 +0000
Files and hashes: 1: CF88C32795224CB308CE6E3FC45CE07D9508E938.crl (hash: K7UlhLitMmc60NyPqcq/JES+ZQKNp22AeIeyT0TMCOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a6:b9:65:f0:ef:e8:39:72:06:35:45:af:9c:dc:18:f6:09:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf88c32795224cb308ce6e3fc45ce07d9508e938
Validity
Not Before: Sep 6 01:55:00 2022 GMT
Not After : Sep 7 03:27:00 2022 GMT
Subject: CN=74695CBBBCF3BB249F4410243686B33B18688E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:78:8d:43:d2:22:d4:79:8c:2c:ea:02:c1:
06:64:b8:ba:96:57:94:33:23:62:02:49:0b:e6:e8:
9f:4e:6d:74:e9:87:c7:97:6d:41:7f:4b:a7:dd:83:
55:9b:1d:3a:ac:64:9b:5c:10:3e:70:72:ff:96:2e:
b1:28:99:46:e9:11:3a:fa:6e:3e:63:ff:f2:98:a7:
fd:08:9f:2d:9c:a3:fb:a4:cf:8c:1b:d9:d5:77:e1:
d5:4b:d4:ca:1b:96:f3:4c:98:7f:1c:09:06:f0:50:
25:2a:bd:09:b5:3b:bf:af:e5:ea:38:de:eb:96:c1:
f4:b9:98:b1:fb:29:83:9d:7c:68:0c:c2:12:96:43:
ab:7b:ba:1e:ea:2a:2a:ea:36:76:79:b4:61:45:eb:
99:c2:53:71:e0:7c:fe:19:f5:02:a3:5c:73:ea:f0:
a6:2c:ff:b9:67:f3:05:fc:19:17:81:f1:f5:4e:e3:
3a:cb:67:96:79:4c:d9:96:e5:f5:5e:59:92:c9:c9:
d6:34:45:25:25:7d:ec:c6:15:e1:41:08:17:32:2e:
a0:ab:d2:7c:20:80:24:94:84:f8:a7:a8:ba:4f:50:
5e:92:50:8f:63:b6:37:14:92:14:2f:25:49:a9:63:
38:40:5f:2f:c0:ab:fd:05:c1:68:b3:16:b3:6b:7e:
a0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:69:5C:BB:BC:F3:BB:24:9F:44:10:24:36:86:B3:3B:18:68:8E:72
X509v3 Authority Key Identifier:
keyid:CF:88:C3:27:95:22:4C:B3:08:CE:6E:3F:C4:5C:E0:7D:95:08:E9:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2/CF88C32795224CB308CE6E3FC45CE07D9508E938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4jDJ5UiTLMIzm4_xFzgfZUI6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2/CF88C32795224CB308CE6E3FC45CE07D9508E938.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:df:df:03:da:07:c2:d0:1c:e0:d4:b7:ad:44:d5:be:4d:89:
db:c5:02:7d:30:d0:ca:d8:e7:05:88:8e:a4:57:f7:9a:1e:73:
f9:4c:d0:da:b0:39:a5:77:6c:b5:ef:09:a9:6c:fe:d4:aa:99:
18:89:d9:49:48:1e:21:1b:a5:29:d5:7c:04:97:81:95:c1:ec:
f9:da:96:31:71:bc:06:35:33:a4:b4:59:93:01:58:fa:55:e7:
18:76:9d:aa:ee:6b:3d:c6:71:f0:83:ee:ce:0c:5e:1b:8a:4f:
ee:13:78:aa:d6:dc:be:d6:a4:d0:63:39:bc:4b:90:d2:ce:08:
ce:5d:aa:3e:5e:3e:45:30:36:75:c5:25:60:e6:4e:28:42:91:
78:d7:32:fc:20:ee:82:35:8f:af:3a:d5:00:cb:f6:1c:24:48:
4a:12:44:7f:c8:12:82:97:21:c8:9e:86:b8:be:81:bf:e7:cc:
7a:88:c6:55:e3:6c:76:9b:ea:db:c5:07:85:c8:48:56:40:e0:
af:ed:e2:aa:b3:17:ae:63:09:10:af:4f:60:bf:a6:56:ff:61:
ed:b5:27:0c:78:3f:0a:53:57:dd:89:7a:2f:e3:e6:75:be:f5:
a5:31:4f:18:09:c1:fe:18:4d:f8:db:d8:5c:fe:bb:02:9d:48:
fd:06:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:43:10 2025 by rpki-client