Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json)
Hash identifier: n9/AxXve4dVhU5+ks44dBBdAY6q73MS2IAjK6vgbLnQ=
Subject key identifier: 6D:FD:63:F4:9A:BE:89:81:78:92:34:64:E3:87:F2:67:F3:41:F1:05
Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Certificate serial: 7D0CA1A83AB90CBA9A2F2C1E276F64AE67BE0C2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
Manifest number: 0224
Signing time: Wed 20 Aug 2025 06:17:01 +0000
Manifest this update: Wed 20 Aug 2025 06:11:59 +0000
Manifest next update: Thu 21 Aug 2025 09:15:59 +0000
Files and hashes: 1: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=)
2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=)
3: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: Znz7EFaYPNtA7IZqvzsptZ+L2tiKzw5X5ZAE0E67GaU=)
4: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=)
5: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=)
6: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=)
7: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0c:a1:a8:3a:b9:0c:ba:9a:2f:2c:1e:27:6f:64:ae:67:be:0c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Validity
Not Before: Aug 20 06:11:59 2025 GMT
Not After : Aug 21 09:15:59 2025 GMT
Subject: CN=6DFD63F49ABE898178923464E387F267F341F105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:5e:78:2d:a5:e1:9f:a1:92:5a:d4:0a:0b:
e2:ec:5f:a7:ad:c9:53:11:19:f8:61:76:a5:8d:fd:
9d:4c:03:3f:59:42:04:ec:96:47:42:b9:88:91:a5:
35:b0:1c:ba:a0:16:b1:c3:9c:6c:b4:d7:2e:76:7c:
74:d6:ae:6a:e9:96:f6:99:65:f2:9e:b4:85:16:be:
31:42:3b:77:79:c1:44:bc:da:63:a4:14:c7:b8:c2:
37:f5:e2:2b:b5:5a:3e:40:76:2a:f9:c4:1a:58:cb:
ae:31:4e:2a:78:ed:dd:c4:7b:90:fd:62:1f:8e:31:
66:74:45:55:49:e8:59:f5:48:3e:80:21:ce:ac:d3:
28:38:b7:1c:66:da:49:bb:78:df:ec:c1:66:38:c4:
43:c3:84:d8:c8:88:7d:62:e4:6b:b8:81:bd:e4:3f:
59:ab:25:82:5f:0f:45:76:b5:be:01:f3:ba:bc:20:
ec:a0:5f:6e:1a:e6:cc:62:cb:6c:59:e0:c1:91:1e:
28:0c:af:00:c0:30:51:52:bf:7e:13:77:39:f3:c6:
9e:50:01:94:8c:56:c2:dd:7f:6c:da:0a:f7:1f:ef:
04:98:45:f4:71:fa:2e:52:d6:84:46:22:45:1b:17:
6f:90:dc:ad:e9:65:c2:e8:20:2b:97:66:cb:b7:74:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FD:63:F4:9A:BE:89:81:78:92:34:64:E3:87:F2:67:F3:41:F1:05
X509v3 Authority Key Identifier:
keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:28:e4:b1:40:1e:1c:12:10:49:8e:3c:66:52:ff:70:ca:02:
42:47:11:49:9d:1c:6f:a8:66:bb:69:f7:de:26:e2:81:5b:f2:
fb:04:10:cf:ad:f2:33:64:74:3a:1a:32:2e:c7:10:ef:b9:59:
ee:50:53:8d:b9:1d:1a:78:70:9d:bc:16:5f:4b:80:d9:95:a8:
cd:25:43:43:fc:f0:65:13:5e:3c:d1:8a:05:a0:b2:8c:f8:3c:
49:15:2c:3a:b8:14:84:ac:fd:b4:46:17:86:88:13:98:af:a1:
93:f9:9e:e8:c4:53:9c:dd:49:fb:c7:ee:cd:b3:ef:14:16:f7:
3c:4e:af:a0:e2:b3:55:ea:f7:5a:19:e6:99:32:88:77:8c:2e:
31:76:bd:5c:a6:ef:29:aa:9f:1b:9b:af:b7:3a:b2:f4:5d:81:
2e:87:2e:83:24:0d:ab:51:de:31:cb:69:20:70:18:4c:6c:b7:
f0:86:a3:f1:21:1a:08:30:ea:86:0a:ec:f6:5d:4e:e8:98:22:
8b:06:b4:ff:73:8f:95:60:14:c5:e9:70:c3:5f:17:ab:69:55:
26:5d:ea:4a:00:58:85:5b:0a:f0:49:ad:a5:5f:87:7b:59:20:
58:8a:30:66:5c:f5:87:6e:e5:70:0e:ef:80:4e:cf:5c:bd:43:
e6:63:64:ac
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUfQyhqDq5DLqaLyweJ29krme+DCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx
MkQwQTU3ODAeFw0yNTA4MjAwNjExNTlaFw0yNTA4MjEwOTE1NTlaMDMxMTAvBgNV
BAMTKDZERkQ2M0Y0OUFCRTg5ODE3ODkyMzQ2NEUzODdGMjY3RjM0MUYxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RF54LaXhn6GSWtQKC+LsX6et
yVMRGfhhdqWN/Z1MAz9ZQgTslkdCuYiRpTWwHLqgFrHDnGy01y52fHTWrmrplvaZ
ZfKetIUWvjFCO3d5wUS82mOkFMe4wjf14iu1Wj5Adir5xBpYy64xTip47d3Ee5D9
Yh+OMWZ0RVVJ6Fn1SD6AIc6s0yg4txxm2km7eN/swWY4xEPDhNjIiH1i5Gu4gb3k
P1mrJYJfD0V2tb4B87q8IOygX24a5sxiy2xZ4MGRHigMrwDAMFFSv34Tdznzxp5Q
AZSMVsLdf2zaCvcf7wSYRfRx+i5S1oRGIkUbF2+Q3K3pZcLoICuXZsu3dNM9AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUbf1j9Jq+iYF4kjRk44fyZ/NB8QUwHwYDVR0j
BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv
M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1
NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1
Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1
Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKso5LFAHhwSEEmOPGZS
/3DKAkJHEUmdHG+oZrtp994m4oFb8vsEEM+t8jNkdDoaMi7HEO+5We5QU425HRp4
cJ28Fl9LgNmVqM0lQ0P88GUTXjzRigWgsoz4PEkVLDq4FISs/bRGF4aIE5ivoZP5
nujEU5zdSfvH7s2z7xQW9zxOr6Dis1Xq91oZ5pkyiHeMLjF2vVym7ymqnxubr7c6
svRdgS6HLoMkDatR3jHLaSBwGExst/CGo/EhGggw6oYK7PZdTuiYIosGtP9zj5Vg
FMXpcMNfF6tpVSZd6koAWIVbCvBJraVfh3tZIFiKMGZc9Ydu5XAO74BOz1y9Q+Zj
ZKw=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:33:16 2025 by rpki-client