Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json)
Hash identifier: WMeK40zw0ORA2sh3qWYxT8VeyTE9p1m3h6kB8SJrTR0=
Subject key identifier: 29:BA:6A:88:B8:B7:E3:E2:0D:E8:CA:42:0E:FD:3C:D0:41:CC:56:C5
Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Certificate serial: 26DC4DF9827ADC440E9CF52F8F0B7448651BB5F1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
Manifest number: 021E
Signing time: Wed 20 Aug 2025 02:14:11 +0000
Manifest this update: Wed 20 Aug 2025 02:09:09 +0000
Manifest next update: Thu 21 Aug 2025 06:05:09 +0000
Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: HVuZWCRvCmC/hL83mW/S+6Aot1hq3JEmNe9dl15QItA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dc:4d:f9:82:7a:dc:44:0e:9c:f5:2f:8f:0b:74:48:65:1b:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Validity
Not Before: Aug 20 02:09:09 2025 GMT
Not After : Aug 21 06:05:09 2025 GMT
Subject: CN=29BA6A88B8B7E3E20DE8CA420EFD3CD041CC56C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:67:fc:de:28:9d:97:15:89:29:e7:04:05:
7d:7c:19:e5:df:84:3d:c4:02:a2:9f:8b:a0:86:00:
4f:0a:2b:f5:9d:a7:f0:83:2b:5f:71:dd:a0:c4:9b:
9c:7b:32:a5:64:dd:60:8e:04:ee:ea:0b:60:fc:e6:
20:52:5e:dc:cc:58:82:fe:08:cc:09:13:21:45:97:
6c:fa:fd:c8:93:5d:c7:2d:4e:a0:ca:5f:32:c1:2a:
cc:03:6c:4b:45:5b:7c:de:2d:f3:1b:c4:19:33:cc:
87:8d:14:46:4c:bb:e8:15:69:f1:a2:36:2e:f9:be:
7f:b4:35:ca:6b:5e:db:0a:1e:38:79:f4:bb:2c:f5:
71:a2:53:87:11:ee:4f:2b:ae:66:4a:09:38:92:55:
28:c0:ba:5c:47:f2:e2:7b:56:4b:ba:0e:e9:16:79:
84:e2:c9:f4:fa:f1:92:9a:54:ef:b7:be:70:67:76:
d5:27:34:b6:1c:5e:27:fa:d8:37:8e:ef:69:a8:f3:
d7:80:8e:e6:6f:71:73:6c:17:41:dc:eb:7c:ea:dd:
9b:11:e6:d6:f8:b9:2f:cc:30:e2:cf:75:23:83:4d:
8a:b3:04:8f:c2:5d:5c:22:ed:72:0c:c7:34:29:d0:
60:ee:6b:0c:37:c1:c2:be:88:22:f8:64:40:90:8d:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:6A:88:B8:B7:E3:E2:0D:E8:CA:42:0E:FD:3C:D0:41:CC:56:C5
X509v3 Authority Key Identifier:
keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9a:89:8a:df:60:68:6c:56:6a:91:fd:22:4d:ab:98:c0:19:
67:07:a1:ff:51:97:c9:d7:f6:d0:ec:4d:61:51:c6:b5:56:a9:
b6:2f:69:70:c0:c6:46:38:01:31:a3:51:5f:ac:0d:4f:ff:28:
ab:a3:34:3d:f9:5f:0d:4a:21:d3:38:b5:b8:b3:8b:6f:ea:c7:
9b:c3:01:1f:07:d1:be:cf:2d:15:52:24:53:ce:5e:e4:be:ac:
ad:23:27:28:52:f2:33:a7:08:8b:d1:03:45:3d:65:45:dc:dc:
1e:e7:e7:c5:36:f4:65:6f:b4:59:25:86:d0:41:9e:79:e0:1c:
41:a8:6c:21:29:b7:e0:84:a3:b6:ea:9f:2b:a3:06:ff:a1:08:
18:fc:6d:6d:cd:73:ef:ca:84:40:ca:b8:20:87:dc:e1:ac:2e:
d4:35:30:d8:be:ba:23:db:75:6b:30:24:90:fe:6f:e6:e0:9a:
cd:98:71:59:0f:07:7b:66:39:b1:7b:86:4a:6b:c4:0b:a2:97:
d5:be:e2:40:73:d5:ab:b4:90:9e:e8:a5:c2:42:13:54:e0:34:
de:b4:c5:fa:e7:88:6e:2c:3b:a8:f5:e4:22:4a:73:33:b4:c0:
cf:1a:8a:c1:dd:2a:e3:c8:c9:4a:bb:1a:4c:7e:75:ec:c2:a5:
84:bc:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:09 2025 by rpki-client