Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json)
Hash identifier: UxnAN2kSGVHe4CNtuO72qK658DbQvHMOIP/uBx1vD28=
Subject key identifier: 9E:AA:D7:BB:23:02:EF:E8:19:F0:D3:6C:7F:26:5C:49:17:79:58:37
Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9
Certificate serial: 63AA5542EAA04C2E557E864E145B671B82E33275
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
Manifest number: 0223
Signing time: Wed 20 Aug 2025 04:46:47 +0000
Manifest this update: Wed 20 Aug 2025 04:41:45 +0000
Manifest next update: Thu 21 Aug 2025 05:27:45 +0000
Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=)
2: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=)
3: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: LoXwXkWX4B4Okua1juUzoSuIpWQznOFDxxR1RzIFJV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:aa:55:42:ea:a0:4c:2e:55:7e:86:4e:14:5b:67:1b:82:e3:32:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9
Validity
Not Before: Aug 20 04:41:45 2025 GMT
Not After : Aug 21 05:27:45 2025 GMT
Subject: CN=9EAAD7BB2302EFE819F0D36C7F265C4917795837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:85:f2:ba:fd:a3:29:d5:80:50:e0:28:98:
6f:64:42:07:15:e5:69:a3:32:00:9b:5c:04:12:db:
c1:74:46:29:ee:56:65:d9:34:f3:79:4b:d0:1c:1f:
ad:e3:81:29:77:7f:c5:1a:50:be:d1:02:bb:5c:c6:
3d:34:6f:8c:22:f6:74:6b:5a:44:9a:74:d2:47:82:
56:23:32:5b:f5:11:ca:ec:92:f2:9a:2d:d4:dd:57:
c0:35:29:3b:6a:8e:7f:6a:08:a4:ed:d7:6e:f4:33:
6a:b0:ce:79:c0:29:80:cd:51:28:22:d4:38:3c:5c:
79:89:ec:62:41:f9:a9:9f:b9:30:fe:ec:b2:fa:a2:
49:53:6e:83:15:78:73:22:d8:3c:49:f6:1e:29:a5:
2f:93:fa:1a:c3:79:dc:2b:4e:35:cb:f4:c4:de:b4:
a0:ab:c7:ef:2f:aa:fa:22:3f:11:97:98:4b:9f:01:
06:61:62:0f:88:7c:f3:b4:f6:eb:05:5b:a3:f8:e5:
89:87:59:58:11:8a:50:09:9e:7d:ea:8b:28:11:4e:
fc:25:06:c5:91:7b:97:17:57:fd:2d:08:30:ba:90:
84:72:c0:e3:e6:21:59:ce:ed:3e:69:e8:d9:5d:43:
4a:98:80:d6:af:0b:b2:ba:9c:73:f8:83:36:fd:e6:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:D7:BB:23:02:EF:E8:19:F0:D3:6C:7F:26:5C:49:17:79:58:37
X509v3 Authority Key Identifier:
keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c2:50:e1:a3:36:ba:b2:13:75:95:39:5b:4c:65:75:48:d1:
ce:c9:a1:17:9e:ad:63:44:e7:a3:41:7d:96:12:e4:a9:22:dd:
b6:ad:f3:e3:9c:65:49:ef:81:2d:b6:44:ba:3b:81:a3:8b:9f:
43:8e:14:94:79:4d:01:67:9a:bd:01:2c:35:8d:60:73:e3:2d:
4e:13:31:42:bc:a1:0d:ce:ef:f1:e6:05:1b:9e:09:98:e9:33:
84:a5:cc:32:2b:0c:1c:ed:00:82:d7:51:11:03:dc:46:96:64:
cb:3e:a2:53:9a:49:79:13:d8:46:2a:5e:12:6c:82:14:49:ce:
d5:57:5a:79:fc:71:90:e0:c5:8b:53:c1:04:29:f4:a2:d1:c3:
ad:e1:6a:c6:14:3f:7a:b8:e6:7f:ed:89:46:9f:c6:cf:8a:ab:
e1:94:e0:8b:df:5c:c4:46:49:7b:6d:0a:73:88:a2:1a:d6:c0:
28:84:16:0c:bf:05:c0:4d:cc:34:0e:b2:3e:ef:12:28:77:51:
27:42:c8:5d:31:fe:ea:f7:fb:55:95:75:81:db:90:11:d7:7d:
d3:a0:35:76:f9:37:09:c7:69:3c:3c:c4:f8:93:fc:5a:e2:66:
66:b9:a6:56:1f:7b:66:c7:29:7b:13:c0:19:8f:6b:24:c7:d2:
6f:5a:77:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:33:31 2025 by rpki-client