Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
File: 165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft (raw, json)
Hash identifier: opFYCkQZslsiADdTk4nXLc5fZm1zF9wh3uzUQohZS6w=
Subject key identifier: 0A:0B:5F:B4:20:D7:7D:F9:4B:06:C5:B9:63:A9:E1:AD:DA:0D:C7:2C
Authority key identifier: 16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81
Certificate issuer: /CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
Certificate serial: 2BC461785EAFE732E3289F850728F3A90B5673D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
Manifest number: 0222
Signing time: Wed 20 Aug 2025 07:54:31 +0000
Manifest this update: Wed 20 Aug 2025 07:49:28 +0000
Manifest next update: Thu 21 Aug 2025 11:18:28 +0000
Files and hashes: 1: AS212245.asa (hash: Tl7AFn5qU0JzGSHvNhoFySTYThSVH7NiT4mJ+9GeULc=)
2: 165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl (hash: +5AzIL5RYfGquBELmqpFep68YOBTVdlEn4bdhiXF2vw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c4:61:78:5e:af:e7:32:e3:28:9f:85:07:28:f3:a9:0b:56:73:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
Validity
Not Before: Aug 20 07:49:28 2025 GMT
Not After : Aug 21 11:18:28 2025 GMT
Subject: CN=0A0B5FB420D77DF94B06C5B963A9E1ADDA0DC72C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:72:39:87:6d:cb:2b:f1:76:ed:80:37:89:
dc:3f:7b:15:28:37:fb:d8:7e:fa:f9:7f:28:d6:3a:
e1:53:6f:15:10:c1:2d:73:ce:12:f6:b0:c5:dc:41:
65:8c:83:47:cf:2c:9b:ad:47:8b:e1:bc:b6:bd:81:
4d:61:cf:7b:1f:49:b9:ce:78:ad:6b:33:5e:8b:ff:
7f:d2:de:c8:9c:f0:29:f6:21:d3:5c:e5:e4:11:e9:
b9:b8:57:32:ba:74:83:68:a0:99:83:0c:ff:f7:80:
c0:42:a8:d3:6c:1d:9f:34:7d:1c:0c:07:a5:52:a2:
4b:a6:a9:34:83:98:71:9d:8a:e4:52:3d:7f:5d:82:
3f:13:c9:fc:eb:b1:66:45:c3:09:75:d0:f5:54:88:
25:0d:5f:08:26:71:2f:ed:a5:a9:e0:21:91:27:00:
cc:88:fb:b6:2a:17:aa:64:5e:2a:86:f2:0f:35:8c:
cf:41:45:af:7d:02:b5:0e:3d:46:22:21:a6:25:ff:
a8:68:b8:69:72:1d:cf:9e:44:04:0f:fe:cf:82:da:
86:92:b4:03:92:17:76:68:5a:e3:98:b0:b5:d8:65:
75:49:ab:df:da:49:48:cf:79:92:2f:79:4f:9f:ad:
7f:49:52:e8:29:91:63:74:bc:31:ab:b9:31:e6:56:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:5F:B4:20:D7:7D:F9:4B:06:C5:B9:63:A9:E1:AD:DA:0D:C7:2C
X509v3 Authority Key Identifier:
keyid:16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cd:85:f6:25:af:0d:01:be:7e:af:ef:a4:40:15:ec:05:ef:
52:fd:5b:b2:70:a0:a2:3a:ac:63:b0:d2:93:f7:d7:ab:b7:a2:
5c:37:68:e9:0a:2b:6a:c3:a8:c3:80:20:5f:90:87:2c:aa:82:
77:37:d2:ed:dc:de:07:54:41:14:cf:9a:96:50:37:d7:ee:8a:
03:56:eb:e3:54:2c:32:88:26:f6:c6:1a:73:70:56:eb:7d:e7:
85:8e:89:09:90:0d:59:fd:d5:99:23:80:fb:27:e3:cd:32:38:
01:9b:43:79:96:11:db:e3:6e:40:cc:aa:f9:c0:26:e4:76:23:
ae:3d:90:21:3a:79:a9:cd:13:45:3e:71:b0:ee:41:82:29:38:
76:e7:af:0c:f8:82:1c:38:be:7b:0d:0b:e0:e0:ea:6b:98:ca:
46:78:17:2d:23:d7:36:92:62:68:e3:f8:cb:5c:b1:51:c6:69:
1d:6d:cd:ad:2f:f4:46:40:ca:b1:0c:5b:80:9c:8b:43:ff:cb:
95:bb:98:ec:f6:4c:f5:75:50:da:5c:bc:d7:77:5b:33:ef:e7:
d7:fb:46:8d:22:35:43:4d:c6:e0:1a:61:36:84:33:27:65:f3:
b4:3a:85:65:db:b6:1f:52:46:99:4d:6d:60:42:6e:2d:13:20:
39:e3:9e:3f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUK8RheF6v5zLjKJ+FByjzqQtWc9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1YWU5NmQ2YTJlOWE0MmI3ZmY3ZjFiMTk1ODQxM2Fl
NTkzZDE4MTAeFw0yNTA4MjAwNzQ5MjhaFw0yNTA4MjExMTE4MjhaMDMxMTAvBgNV
BAMTKDBBMEI1RkI0MjBENzdERjk0QjA2QzVCOTYzQTlFMUFEREEwREM3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbXI5h23LK/F27YA3idw/exUo
N/vYfvr5fyjWOuFTbxUQwS1zzhL2sMXcQWWMg0fPLJutR4vhvLa9gU1hz3sfSbnO
eK1rM16L/3/S3sic8Cn2IdNc5eQR6bm4VzK6dINooJmDDP/3gMBCqNNsHZ80fRwM
B6VSokumqTSDmHGdiuRSPX9dgj8TyfzrsWZFwwl10PVUiCUNXwgmcS/tpangIZEn
AMyI+7YqF6pkXiqG8g81jM9BRa99ArUOPUYiIaYl/6houGlyHc+eRAQP/s+C2oaS
tAOSF3ZoWuOYsLXYZXVJq9/aSUjPeZIveU+frX9JUugpkWN0vDGruTHmVqMXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCgtftCDXfflLBsW5Y6nhrdoNxywwHwYDVR0j
BBgwFoAUFlrpbWoumkK3/38bGVhBOuWT0YEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzEv
MTY1QUU5NkQ2QTJFOUE0MkI3RkY3RjFCMTk1ODQxM0FFNTkzRDE4MS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ZscnBiV291bWtLM18zOGJHVmhCT3VXVDBZRS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV85ZDgzOWNhMGE1NWU0MmE0
OWQxMGRlMDcxZjQ2NTk4Yi8xLzE2NUFFOTZENkEyRTlBNDJCN0ZGN0YxQjE5NTg0
MTNBRTU5M0QxODEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBszYX2Ja8NAb5+r++kQBXsBe9S/VuycKCi
OqxjsNKT99ert6JcN2jpCitqw6jDgCBfkIcsqoJ3N9Lt3N4HVEEUz5qWUDfX7ooD
VuvjVCwyiCb2xhpzcFbrfeeFjokJkA1Z/dWZI4D7J+PNMjgBm0N5lhHb425AzKr5
wCbkdiOuPZAhOnmpzRNFPnGw7kGCKTh2568M+IIcOL57DQvg4OprmMpGeBctI9c2
kmJo4/jLXLFRxmkdbc2tL/RGQMqxDFuAnItD/8uVu5js9kz1dVDaXLzXd1sz7+fX
+0aNIjVDTcbgGmE2hDMnZfO0OoVl27YfUkaZTW1gQm4tEyA5454/
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:51 2025 by rpki-client