
Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json)
Hash identifier: Fiqq9vdIe/+YflnM07azohmrYl3hgwHk8Q9gD3eazkc=
Subject key identifier: C6:9E:60:38:B3:D5:2E:37:44:D7:34:2C:13:58:9F:EE:AE:4A:06:9C
Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Certificate serial: 6AB20DF487224AFD49D2731FE52AC829C759B95C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
Manifest number: 0220
Signing time: Wed 20 Aug 2025 01:12:09 +0000
Manifest this update: Wed 20 Aug 2025 01:07:06 +0000
Manifest next update: Thu 21 Aug 2025 03:55:06 +0000
Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: oPuA7WR9tnFxDUEoSJNQb+OuwF9Rl0BoYXhj7jU1CPs=)
2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b2:0d:f4:87:22:4a:fd:49:d2:73:1f:e5:2a:c8:29:c7:59:b9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Validity
Not Before: Aug 20 01:07:06 2025 GMT
Not After : Aug 21 03:55:06 2025 GMT
Subject: CN=C69E6038B3D52E3744D7342C13589FEEAE4A069C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:c5:e1:ac:39:f9:13:9a:b9:22:a4:9c:cd:
fb:1c:1f:9b:98:45:d4:9a:77:3c:87:86:d4:39:fa:
7b:97:b9:81:5b:08:c8:f9:7a:e3:43:87:22:61:21:
49:64:e7:e0:00:de:75:32:4d:af:71:0e:51:ae:dc:
6b:12:da:7a:85:7f:ed:6c:ee:3c:8f:08:e8:69:12:
a7:4d:a4:fd:5c:91:1e:0e:63:95:d6:80:bb:78:d5:
6e:7f:a6:3f:c3:a8:63:d0:fc:26:cf:f2:41:d8:e1:
c0:e5:22:45:b1:14:89:8f:4b:06:bb:a1:c2:72:65:
46:dd:22:69:0d:b7:f6:34:73:39:80:ce:f8:f6:7b:
d8:2c:d4:04:bd:0e:c7:a8:72:58:ec:cc:87:3c:e9:
f4:b0:cf:f5:1c:27:e4:e6:f5:41:0d:3b:7a:ea:21:
16:5d:a8:d7:58:70:b7:7f:7d:a0:fc:5f:24:77:cd:
51:91:f7:79:c6:4c:87:10:7b:2e:da:ff:8a:35:18:
23:b5:cc:b9:49:19:f3:0b:08:de:6a:06:6e:b8:16:
55:bf:45:08:64:b7:65:9e:23:2e:ae:7e:e2:18:ae:
6e:fe:5c:4d:e0:0e:74:42:d5:c8:ef:dd:18:88:6d:
ce:81:06:6f:74:dd:d0:39:8e:59:c9:1e:33:29:d0:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:60:38:B3:D5:2E:37:44:D7:34:2C:13:58:9F:EE:AE:4A:06:9C
X509v3 Authority Key Identifier:
keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f1:83:7d:7f:81:18:5f:bf:9e:32:04:eb:b5:f5:f3:84:b1:
00:45:d8:3a:8e:ba:bf:ff:8d:29:9c:16:a2:3b:30:58:10:28:
e9:0f:3a:ba:65:70:c9:2e:62:e2:eb:b8:69:e8:ef:4c:83:20:
75:91:b5:40:a5:bd:da:e5:43:32:10:ff:dc:00:d6:77:a4:47:
f4:ed:c5:ef:88:ea:e4:e6:75:01:77:51:9c:eb:83:d3:82:65:
c7:53:34:a4:dd:97:ee:ae:52:43:26:fb:91:e7:c7:8e:44:e4:
76:33:1b:3c:2e:4a:64:65:c5:6c:65:ae:94:3d:ff:ca:58:68:
4a:59:8d:ec:56:ed:85:95:88:4b:95:99:9e:71:70:42:20:a3:
76:ec:9e:38:04:c6:1e:10:c1:7c:b7:7d:0f:f2:75:1e:3a:d1:
f4:9f:6f:fa:2f:c3:6e:42:3a:c6:d6:b1:58:2f:b2:75:76:76:
c2:80:1c:37:f7:3d:7a:67:7e:80:7a:a2:bd:73:d6:53:0b:71:
b4:dc:d9:41:3d:0b:29:c9:51:3d:8e:79:57:4b:d8:9b:62:43:
28:54:0b:7b:8d:bf:da:e2:0e:63:2c:da:36:7a:66:0a:99:00:
b1:09:f8:21:ba:b6:33:d9:cb:6f:c8:ac:0c:22:a9:48:b2:ed:
c9:98:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:34 2025 by rpki-client