Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json)
Hash identifier: ZMjLPcSGmxweyU9Ll3aKU7ha3fqQrdblO1E9XgOdaLc=
Subject key identifier: 04:F3:58:82:D3:71:16:B8:64:E1:E3:86:B5:4F:24:D9:A3:0C:87:57
Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439
Certificate serial: 09A5C2D5B1CFF400A7E759BEBE7C03604F05D1AE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
Manifest number: 0220
Signing time: Wed 20 Aug 2025 05:54:26 +0000
Manifest this update: Wed 20 Aug 2025 05:49:24 +0000
Manifest next update: Thu 21 Aug 2025 09:16:24 +0000
Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: SRuF4pDpOLzx0xjyiDdSUXCX+EMPSOieUSJNFV9TdZ0=)
2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a5:c2:d5:b1:cf:f4:00:a7:e7:59:be:be:7c:03:60:4f:05:d1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439
Validity
Not Before: Aug 20 05:49:24 2025 GMT
Not After : Aug 21 09:16:24 2025 GMT
Subject: CN=04F35882D37116B864E1E386B54F24D9A30C8757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:bb:a2:bf:39:d1:7b:2b:2b:4d:6f:56:bb:
a4:56:cf:f8:84:82:67:9a:f3:78:b5:cc:81:f8:92:
3a:2e:5e:01:0a:9f:d1:d4:0f:20:e2:d1:ef:9d:a8:
49:5d:d2:af:40:ef:b2:af:2c:90:1b:0f:8a:0a:d2:
aa:bb:af:e8:e9:fe:8e:91:dd:65:a0:88:52:e6:a5:
de:be:06:7b:5a:3e:8c:1c:9a:96:5d:46:4b:95:c0:
fe:8d:7c:95:9d:7f:79:ad:51:79:1d:6d:87:70:fd:
88:9b:e8:c5:a8:44:c4:73:ff:08:72:ac:2f:df:dd:
46:e5:74:f7:e1:fc:3c:45:3e:8a:55:3f:55:d1:0b:
22:da:23:76:4d:d3:c2:d6:cd:63:bc:f4:a5:e3:d8:
7d:46:86:f6:d0:fe:18:ec:b9:70:ce:69:05:39:35:
16:db:ae:e5:0d:f2:22:90:b6:55:08:ea:ad:82:03:
9f:b5:b5:21:eb:c8:1b:3c:0c:34:a9:84:cd:31:e3:
25:a9:dc:07:9a:54:50:9c:0c:e2:1d:f3:aa:9d:b4:
67:22:4e:6b:c5:6c:dc:6d:bf:90:9b:44:cb:13:f8:
0e:4d:96:8a:d8:45:9a:47:19:4c:9f:0b:96:e1:ed:
05:07:2e:01:81:4b:0a:43:e0:fc:be:70:9c:19:06:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F3:58:82:D3:71:16:B8:64:E1:E3:86:B5:4F:24:D9:A3:0C:87:57
X509v3 Authority Key Identifier:
keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:be:fb:78:1e:e4:23:dc:b3:d6:83:17:24:12:4f:03:d9:34:
d8:63:b1:2d:71:5f:b7:aa:a2:b4:8b:cf:80:50:e5:9f:e5:af:
05:f3:ac:9a:42:95:96:04:c2:cb:f5:4f:63:a9:71:8e:c5:fa:
89:cb:de:f6:f1:f0:3f:85:99:0f:14:f9:3d:f1:c1:47:99:ac:
98:0d:da:6c:66:37:b1:4d:bd:41:14:63:6e:87:67:15:29:8d:
58:0d:19:0e:c9:9d:24:8d:1f:13:15:53:44:bc:fa:2d:66:76:
89:4d:03:19:c3:b6:34:bc:f6:e7:24:f0:f7:12:12:33:72:5c:
3d:fa:ad:fb:53:51:35:5b:f8:d1:48:ad:09:df:8f:23:24:7f:
76:40:7a:23:0b:5c:c1:ab:e9:fb:17:bf:5f:0f:74:77:26:d6:
48:18:7e:c2:b1:c3:8a:bd:36:74:87:1f:87:07:49:d6:0c:d4:
10:28:d8:d4:72:1c:ac:9d:b4:87:b5:12:73:68:0b:23:90:71:
8c:26:5f:54:c3:2b:3e:1f:c0:10:d6:57:68:1f:90:e8:d7:89:
d6:53:2a:0d:16:d0:31:e1:90:9e:41:6e:76:e3:86:18:e0:dd:
df:90:91:ad:ec:0d:b8:50:e0:9d:27:8a:bb:d5:e5:8d:b7:08:
f9:d8:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:45:26 2025 by rpki-client