Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft
File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json)
Hash identifier: qEfgzWfc6+P/RcxNPmv7LCevnFPQY5mWxrWReR3Wj0U=
Subject key identifier: 85:20:7F:34:E3:54:D7:D9:2E:8E:15:CA:00:D4:C2:BF:FB:91:AD:B7
Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Certificate serial: 0D983A93053157A9C8E14456C0BC1DEF59A6ADE9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft
Manifest number: 0229
Signing time: Wed 20 Aug 2025 08:15:46 +0000
Manifest this update: Wed 20 Aug 2025 08:10:28 +0000
Manifest next update: Thu 21 Aug 2025 11:12:28 +0000
Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: H/cmGuN+OgK6HzEfsDLk3+4hTZo1P2uL9LtxUS+jyHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:98:3a:93:05:31:57:a9:c8:e1:44:56:c0:bc:1d:ef:59:a6:ad:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Validity
Not Before: Aug 20 08:10:28 2025 GMT
Not After : Aug 21 11:12:28 2025 GMT
Subject: CN=85207F34E354D7D92E8E15CA00D4C2BFFB91ADB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:87:ab:59:25:03:ea:96:02:2f:51:31:e5:
47:8e:38:4b:1d:45:d3:64:1f:5c:b1:a3:f1:d4:f5:
72:94:50:f0:71:28:33:a3:ec:f5:80:ab:7a:e4:54:
86:39:26:c0:cd:97:bd:0f:14:5f:90:50:82:dc:3c:
09:c2:65:d0:89:37:ec:d0:2d:15:33:41:1f:a1:5b:
90:e0:56:b1:8d:49:7b:dd:c8:9d:24:14:36:ae:79:
46:ce:66:9d:5e:22:d8:26:2d:77:2e:b9:02:5f:af:
85:ec:a1:c3:2a:f8:a0:dd:9b:09:c0:9b:5e:b7:3e:
c9:c7:32:69:26:7e:f0:39:74:dd:94:b8:c0:4b:d1:
ca:19:da:c8:0f:bd:00:58:2f:71:06:ee:a8:82:be:
88:bf:3c:cb:71:82:54:0e:04:da:19:df:50:c9:b0:
2d:3d:39:d0:5f:49:65:a6:b3:79:d8:ef:8d:29:8f:
7c:c1:76:ab:3f:ea:b7:26:9e:72:02:f9:5d:5f:1b:
ce:99:f6:a3:02:87:59:5b:67:6c:fe:d8:af:5e:e9:
5f:6c:10:66:ea:22:1e:16:f5:71:1b:d9:f9:1b:30:
c6:81:d2:ee:68:e0:06:e1:dd:18:13:9b:88:d2:64:
3f:ae:c3:4c:b6:86:26:0e:52:9a:a3:15:cd:dd:48:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:7F:34:E3:54:D7:D9:2E:8E:15:CA:00:D4:C2:BF:FB:91:AD:B7
X509v3 Authority Key Identifier:
keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:24:03:18:7b:97:98:5a:a8:e4:01:82:49:02:57:c1:b9:57:
ae:4e:c4:9d:ce:50:b6:52:89:ce:ea:b2:da:ca:54:1e:eb:77:
28:19:d9:83:49:40:35:42:6d:36:6a:f1:4b:6c:bf:b0:b8:08:
43:3f:36:0e:65:ca:dc:80:22:e7:ec:6e:52:66:f7:08:0d:23:
e4:43:bf:28:76:82:6f:3b:88:5a:67:a0:3c:96:2b:9c:90:4a:
dc:89:29:80:00:b7:45:33:21:5d:3f:89:af:e8:dc:85:53:69:
7e:19:a6:89:08:95:0a:78:1e:57:08:c4:09:cb:38:cc:8f:8b:
ea:58:5e:ca:b4:a3:78:e6:9d:11:8a:14:aa:45:d2:cf:e5:cf:
e5:4c:6a:86:73:35:12:25:53:86:94:eb:47:e6:3d:de:e8:b1:
73:0a:7d:6f:18:59:f5:0c:06:51:72:a3:a7:d3:67:f0:92:7b:
05:a0:fd:d2:ae:45:80:40:ca:9d:7a:42:7f:77:f2:b8:7a:70:
16:58:af:25:a0:6a:d8:3c:b5:1d:01:70:29:97:8a:70:be:6b:
5d:2b:e0:1a:2a:53:99:09:82:0e:19:de:fa:0d:55:ab:f9:38:
b4:45:4d:2d:13:8e:62:b7:d0:2b:30:27:23:e3:36:3c:d1:42:
96:5d:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:41:49 2025 by rpki-client