Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
File: 889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft (raw, json)
Hash identifier: XxKoYc1S9WQVsrvsa9wm8Lvor5GAozwNgqH0zjmktGU=
Subject key identifier: 9D:23:06:BC:6D:70:45:4A:59:D0:B8:2E:A3:E0:8F:E9:1C:0B:DF:E0
Authority key identifier: 88:96:65:EF:0F:74:EB:E6:9A:BB:09:07:CC:94:71:C5:E1:3C:07:6A
Certificate issuer: /CN=889665ef0f74ebe69abb0907cc9471c5e13c076a
Certificate serial: 60DF11FEC062A40ED8C010730C02C71B87961EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJZl7w906-aauwkHzJRxxeE8B2o.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
Manifest number: DA
Signing time: Mon 16 Dec 2024 23:01:55 +0000
Manifest this update: Mon 16 Dec 2024 22:56:52 +0000
Manifest next update: Tue 17 Dec 2024 23:38:52 +0000
Files and hashes: 1: 889665EF0F74EBE69ABB0907CC9471C5E13C076A.crl (hash: 0fgVIXN5MD8Pn0zAltEZk8DYUD4WFeMTFSW1tAGJUjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:df:11:fe:c0:62:a4:0e:d8:c0:10:73:0c:02:c7:1b:87:96:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889665ef0f74ebe69abb0907cc9471c5e13c076a
Validity
Not Before: Dec 16 22:56:52 2024 GMT
Not After : Dec 17 23:38:52 2024 GMT
Subject: CN=9D2306BC6D70454A59D0B82EA3E08FE91C0BDFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:d8:17:55:f5:a7:af:49:b0:20:89:94:4c:
c8:11:20:b1:4f:ac:ab:70:c2:e1:7e:2d:8a:0b:2e:
93:e6:5c:02:d3:2b:12:00:04:26:47:98:b2:13:65:
40:6b:10:b0:cf:5d:76:a4:50:62:f6:21:21:f3:f6:
00:b6:8d:85:8b:da:4d:7c:08:cc:74:f5:a3:4f:70:
c9:f4:47:93:cd:7e:1f:99:7e:ae:18:f8:1a:db:ca:
3a:dd:38:96:c9:4b:9a:22:22:dc:d1:83:25:30:fc:
bf:98:0a:75:47:d7:76:b0:ad:00:30:62:90:10:22:
55:d9:0f:39:43:bd:15:67:0e:30:d1:e8:91:77:b3:
ee:34:4d:33:60:7c:17:93:54:fd:ff:68:e5:73:ae:
b7:9d:16:20:db:b9:6e:b1:1b:26:24:9f:55:57:d1:
61:f1:38:3c:9e:3c:61:a4:ab:1e:10:e5:8d:34:8d:
a9:6d:5d:83:51:eb:40:e6:5a:35:8d:f6:ee:be:7c:
8f:71:aa:64:9c:d4:42:8d:bd:3a:e8:9d:c0:e3:30:
29:4a:db:5e:45:b9:57:a2:20:37:ee:e8:a4:47:08:
69:5b:c5:e2:f9:65:80:8b:7c:09:4a:66:cf:6e:52:
38:b9:c7:70:b8:1d:33:e3:5b:c2:90:2b:3c:0e:85:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:06:BC:6D:70:45:4A:59:D0:B8:2E:A3:E0:8F:E9:1C:0B:DF:E0
X509v3 Authority Key Identifier:
keyid:88:96:65:EF:0F:74:EB:E6:9A:BB:09:07:CC:94:71:C5:E1:3C:07:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJZl7w906-aauwkHzJRxxeE8B2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d1:78:bb:a8:23:e3:89:60:1e:e3:ef:d3:71:fe:75:31:58:
e8:43:7f:55:4e:7b:bc:e2:9d:a2:51:70:a4:5c:d8:f1:79:64:
bc:f5:a2:0d:1f:bf:47:e2:73:67:74:fe:1f:76:12:e1:1c:0b:
d7:e7:79:00:a4:d7:83:a4:d0:72:f7:2c:f8:04:bf:de:c3:44:
4c:44:33:97:ee:a7:df:72:34:2a:12:9c:a9:59:2a:07:17:09:
78:32:e5:34:f1:fc:2e:21:de:44:ad:83:ad:a5:2c:46:ad:3b:
1a:aa:d8:ae:c8:dd:80:35:0e:48:e9:62:e8:12:53:4e:e6:d2:
94:4f:b3:da:b2:51:9c:47:59:9f:65:92:9f:c3:b2:6d:c2:11:
34:ab:3b:a0:de:78:fe:80:18:ce:db:61:7c:6f:32:fd:3e:fe:
eb:4b:9f:33:85:88:98:22:60:2b:f9:b0:82:27:3f:cf:d3:b1:
7e:11:ce:d7:10:7f:67:f3:57:92:0c:85:5f:2a:81:ac:00:2c:
cb:69:5d:0f:82:6a:d7:37:67:1c:5d:25:75:53:4a:69:91:b4:
d9:bf:4b:ea:80:14:55:c5:ea:f1:88:02:75:53:66:72:5e:39:
73:fa:66:ca:8d:3d:9f:29:c1:cc:8a:b5:6f:63:26:01:0a:80:
39:b6:c1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:38:09 2025 by rpki-client