Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/4/A037D3C848FF71FE078D0949259D8717BB60B7C9.mft
File: A037D3C848FF71FE078D0949259D8717BB60B7C9.mft (raw, json)
Hash identifier: SiQKxbhjPCFap9gV9Hln308EL4vC99cBOMbfHiIi4Bw=
Subject key identifier: 24:E2:F8:E4:1C:1B:32:F7:2C:19:93:6A:81:84:3C:96:B7:45:41:C6
Authority key identifier: A0:37:D3:C8:48:FF:71:FE:07:8D:09:49:25:9D:87:17:BB:60:B7:C9
Certificate issuer: /CN=a037d3c848ff71fe078d0949259d8717bb60b7c9
Certificate serial: 58692F4F7E70A9692F425E2F4BA843936E3AD7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDfTyEj_cf4HjQlJJZ2HF7tgt8k.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/A037D3C848FF71FE078D0949259D8717BB60B7C9.mft
Manifest number: 81
Signing time: Wed 07 Dec 2022 10:13:14 +0000
Manifest this update: Wed 07 Dec 2022 10:08:14 +0000
Manifest next update: Thu 08 Dec 2022 11:10:14 +0000
Files and hashes: 1: A037D3C848FF71FE078D0949259D8717BB60B7C9.crl (hash: QCB8IfqaRY3ENBp/dBmrpQeD3JnwNlz8dFWCtDOU2oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:69:2f:4f:7e:70:a9:69:2f:42:5e:2f:4b:a8:43:93:6e:3a:d7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a037d3c848ff71fe078d0949259d8717bb60b7c9
Validity
Not Before: Dec 7 10:08:14 2022 GMT
Not After : Dec 8 11:10:14 2022 GMT
Subject: CN=24E2F8E41C1B32F72C19936A81843C96B74541C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:5a:8c:a6:9a:45:8e:e9:6e:df:50:a7:b7:
c5:f5:9a:aa:b9:4e:55:81:a5:81:7a:33:d8:4f:fe:
89:38:11:23:d6:dd:be:38:77:f5:be:24:ef:e5:9d:
c8:59:11:50:96:fa:6a:0c:4b:8c:03:48:8a:ee:ea:
4a:75:e0:f1:c4:3c:fa:e6:64:68:f1:c1:ba:69:24:
4c:02:e9:c7:e7:34:59:8e:d6:5d:64:d5:5d:bf:8d:
31:ee:61:7b:82:dc:63:36:8e:7d:db:ff:96:33:68:
de:4f:d5:ac:c4:dd:55:09:31:f6:fa:9e:20:82:d1:
6e:cb:8f:f7:50:ed:0f:a8:95:c6:76:55:93:6a:39:
73:47:cc:46:1c:26:80:9a:c3:d3:e4:9a:da:ac:01:
3f:19:ad:2d:72:93:41:51:86:01:b7:dd:ae:b8:25:
eb:ec:96:42:73:83:c9:46:b3:ab:e4:a8:16:48:81:
09:5f:0b:90:7f:cd:ac:79:7f:4b:c3:f2:fe:bf:d7:
da:18:20:b1:48:ab:f1:85:d1:b3:cc:be:49:6f:3b:
7e:58:19:8b:51:b7:a8:32:9a:b6:77:6e:d7:dc:86:
50:a6:10:75:9f:5c:75:70:40:a6:e7:6e:74:a1:cb:
8b:37:f4:23:1d:52:38:ab:e4:67:8c:36:58:fa:49:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:F8:E4:1C:1B:32:F7:2C:19:93:6A:81:84:3C:96:B7:45:41:C6
X509v3 Authority Key Identifier:
keyid:A0:37:D3:C8:48:FF:71:FE:07:8D:09:49:25:9D:87:17:BB:60:B7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/A037D3C848FF71FE078D0949259D8717BB60B7C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDfTyEj_cf4HjQlJJZ2HF7tgt8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/A037D3C848FF71FE078D0949259D8717BB60B7C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8f:48:fd:c7:cd:e5:eb:ed:9e:1b:55:42:da:00:12:39:f7:
a3:f2:ef:7c:9d:2f:84:c1:97:91:1a:cc:1c:d5:aa:5f:9b:ca:
76:72:f6:5d:64:d4:a0:19:7d:57:0a:64:aa:97:a5:af:c6:e5:
58:96:81:77:3a:18:47:e0:e3:d7:4e:8e:5f:e1:9b:f1:6e:aa:
a1:da:9c:db:12:61:c8:ac:ee:07:44:0e:7f:60:ea:2d:cf:ab:
eb:5b:c5:9a:6b:1a:63:14:55:80:37:c5:39:79:cc:43:a8:42:
65:f9:37:df:b1:13:e0:9b:0a:f7:06:43:5c:72:a2:aa:a7:aa:
a0:d4:8a:1a:14:c1:3b:95:34:cf:3c:3d:2c:45:9a:81:e7:fd:
8d:bb:ea:68:3c:65:80:a3:92:1c:0f:1c:5a:73:5e:0e:1b:be:
2c:13:56:97:b6:ee:66:10:63:7c:61:fd:25:5c:69:ed:dd:5b:
d0:23:e1:69:65:6e:8c:00:04:09:5d:24:49:8d:2c:df:00:fc:
83:2e:4c:ea:8c:e7:f2:1c:85:a5:a1:f5:d2:55:b1:80:ba:9a:
a7:1d:57:e7:33:95:67:2e:0f:b1:0d:c2:ac:0e:54:e8:2c:1e:
a4:2c:53:52:7c:34:76:4b:b0:fd:68:6b:3b:87:59:55:e4:68:
18:29:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 03:43:01 2025 by rpki-client