Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json)
Hash identifier: BUxZs+GeE2eVfg7B+wtlIdmG95bIOKzGP+Fh/dUZQLo=
Subject key identifier: 17:D7:2B:0C:2B:73:85:C3:E6:24:31:2E:C7:D9:D2:F5:01:C9:70:7A
Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Certificate serial: 218DB5657A1838192AD7908FC839217E2057D87C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
Manifest number: 012B
Signing time: Mon 17 Feb 2025 12:38:35 +0000
Manifest this update: Mon 17 Feb 2025 12:33:33 +0000
Manifest next update: Tue 18 Feb 2025 14:17:33 +0000
Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: FhIx7J4Fs3Q4QpytiRCsiLLr7mQpqqkkc2DAuor4SAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8d:b5:65:7a:18:38:19:2a:d7:90:8f:c8:39:21:7e:20:57:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Validity
Not Before: Feb 17 12:33:33 2025 GMT
Not After : Feb 18 14:17:33 2025 GMT
Subject: CN=17D72B0C2B7385C3E624312EC7D9D2F501C9707A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:86:e7:6d:cf:f7:c2:fa:47:ab:12:ed:0e:
f7:a5:45:bb:f5:fa:18:00:e0:ab:44:08:7b:97:ff:
9b:07:60:6e:93:06:57:94:2f:99:d6:de:a9:c7:fe:
cd:67:24:0b:ea:d3:a3:9b:80:8b:d1:95:df:d9:59:
04:bc:ff:76:b5:14:50:ec:0a:94:d8:38:46:d2:e1:
0b:9d:06:af:91:f3:8f:e6:f0:c0:31:15:79:8c:9d:
6a:ec:b5:62:f1:86:ed:a5:a7:7a:eb:9a:bd:e1:2b:
ed:9e:2c:42:b3:38:f2:83:a8:29:7d:a0:a9:b1:b6:
1d:2a:53:08:a7:c4:c4:1f:13:f8:c5:1d:fd:78:d7:
9c:79:c3:69:e7:8c:8a:f6:42:f9:43:08:38:1e:ba:
e8:88:bf:4d:98:fb:23:c2:94:8a:0f:be:c7:b6:13:
26:49:51:5f:12:46:6b:2a:3b:77:45:b8:71:f7:b5:
23:ab:fd:86:d6:27:00:35:b0:f7:07:a9:53:b9:fd:
8d:12:3c:5e:6e:db:2d:a7:00:81:43:ea:11:a0:28:
3d:6d:e1:69:87:40:1b:be:f0:2e:de:5c:27:98:42:
57:1d:ec:a4:98:af:e1:e1:f8:15:bb:94:6d:29:1e:
69:7e:81:5f:54:9a:72:26:6f:95:60:7f:fb:bb:48:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:2B:0C:2B:73:85:C3:E6:24:31:2E:C7:D9:D2:F5:01:C9:70:7A
X509v3 Authority Key Identifier:
keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:2c:c8:a2:b8:9b:cb:06:2a:6c:06:01:2c:9d:eb:61:23:
aa:5b:f5:6a:c7:82:db:c9:ff:8f:6e:df:68:b3:e1:ca:21:19:
24:2a:fb:e1:28:28:cd:4e:fe:76:18:c2:f3:0e:ae:da:86:e0:
05:b2:e6:39:c1:04:d9:f3:62:c3:b3:f9:c5:4b:0f:8b:1e:54:
2f:d3:1d:e9:c6:e3:4f:7a:b6:50:58:05:64:ee:db:26:8f:9a:
de:68:b1:fe:45:f0:53:00:3b:22:55:fb:c5:a3:70:e4:92:43:
93:66:13:af:08:85:b4:19:3a:fa:2c:85:a4:79:ad:78:83:34:
81:e6:7e:67:08:19:d2:a4:d6:50:d2:5e:82:0f:8b:ac:c6:67:
a2:a0:cd:21:cf:3d:2e:c7:9a:3e:34:4c:16:f5:f5:93:77:15:
9b:be:5a:b0:f4:73:02:0c:d8:8e:da:7b:1a:72:04:2f:ff:1b:
d0:74:12:ed:ca:e3:f6:ac:3d:ab:60:3c:fb:11:02:fc:d1:a2:
a6:ff:d5:9f:21:db:22:eb:fb:1d:1b:30:fd:6f:44:63:27:ee:
02:e0:f9:06:ae:e1:c5:fc:d4:99:e6:87:b0:51:cd:36:9d:57:
61:81:5b:e6:ed:dc:99:17:78:05:e6:ad:00:d7:c5:c3:c4:c1:
e5:0b:af:69
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUIY21ZXoYOBkq15CPyDkhfiBX2HwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERD
Q0Y2NEE5RTAeFw0yNTAyMTcxMjMzMzNaFw0yNTAyMTgxNDE3MzNaMDMxMTAvBgNV
BAMTKDE3RDcyQjBDMkI3Mzg1QzNFNjI0MzEyRUM3RDlEMkY1MDFDOTcwN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KYbnbc/3wvpHqxLtDvelRbv1
+hgA4KtECHuX/5sHYG6TBleUL5nW3qnH/s1nJAvq06ObgIvRld/ZWQS8/3a1FFDs
CpTYOEbS4QudBq+R84/m8MAxFXmMnWrstWLxhu2lp3rrmr3hK+2eLEKzOPKDqCl9
oKmxth0qUwinxMQfE/jFHf1415x5w2nnjIr2QvlDCDgeuuiIv02Y+yPClIoPvse2
EyZJUV8SRmsqO3dFuHH3tSOr/YbWJwA1sPcHqVO5/Y0SPF5u2y2nAIFD6hGgKD1t
4WmHQBu+8C7eXCeYQlcd7KSYr+Hh+BW7lG0pHml+gV9UmnImb5Vgf/u7SAm9AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUF9crDCtzhcPmJDEux9nS9QHJcHowHwYDVR0j
BBgwFoAUab3RCSrOmhDkyU+tiy2j3cz2Sp4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAv
NjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy82OUJERDEwOTJBQ0U5QTEwRTRDOTRGQUQ4QjJEQTNE
RENDRjY0QTlFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzMzOWJi
NGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQxMDkyQUNFOUExMEU0
Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE8lLMiiuJvLBipsBgEs
nethI6pb9WrHgtvJ/49u32iz4cohGSQq++EoKM1O/nYYwvMOrtqG4AWy5jnBBNnz
YsOz+cVLD4seVC/THenG4096tlBYBWTu2yaPmt5osf5F8FMAOyJV+8WjcOSSQ5Nm
E68IhbQZOvoshaR5rXiDNIHmfmcIGdKk1lDSXoIPi6zGZ6KgzSHPPS7Hmj40TBb1
9ZN3FZu+WrD0cwIM2I7aexpyBC//G9B0Eu3K4/asPatgPPsRAvzRoqb/1Z8h2yLr
+x0bMP1vRGMn7gLg+Qau4cX81Jnmh7BRzTadV2GBW+bt3JkXeAXmrQDXxcPEweUL
r2k=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:26 2025 by rpki-client