Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier: TqtzotGcWo+dN/hcwj48fJbeRVoLR4Bn/u7Q8GhPwq4=
Subject key identifier: 9B:42:78:EF:8A:F5:1B:01:22:CA:26:2E:22:E5:3D:DD:F7:54:3E:67
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial: 4A23CA90BE43800B233BDD1628FE7A9DE6436F28
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number: 0223
Signing time: Wed 20 Aug 2025 05:43:14 +0000
Manifest this update: Wed 20 Aug 2025 05:38:12 +0000
Manifest next update: Thu 21 Aug 2025 09:15:12 +0000
Files and hashes: 1: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=)
2: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: 7lsNmRYLR8ZxaaAKz+dTIKaajHwgoa8wEqSVxPQcDno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:23:ca:90:be:43:80:0b:23:3b:dd:16:28:fe:7a:9d:e6:43:6f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Validity
Not Before: Aug 20 05:38:12 2025 GMT
Not After : Aug 21 09:15:12 2025 GMT
Subject: CN=9B4278EF8AF51B0122CA262E22E53DDDF7543E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:42:4e:8a:d2:1e:74:96:b0:73:51:86:90:
4f:75:95:32:48:cc:15:33:7c:6c:46:7e:b2:a6:93:
52:44:84:ff:af:e3:6d:dd:22:ca:c8:cf:8d:fd:73:
e8:74:54:2b:e7:b2:8d:2a:9e:e6:08:56:ec:89:f1:
77:2a:37:bc:87:cd:a0:31:fc:8d:a2:98:25:df:d0:
11:19:0d:81:8d:94:3c:6f:e4:46:66:32:c2:28:30:
72:fa:47:dd:11:4a:2f:4c:a7:77:bb:a6:07:56:21:
2c:ac:18:d1:4f:4f:01:13:f3:95:d7:e4:6a:44:eb:
c1:7f:a9:bc:da:75:ff:3d:c2:d5:49:3c:93:87:9a:
5d:c9:2e:50:aa:5c:52:4b:9c:75:0b:7c:02:45:b9:
14:5f:e4:7e:80:82:8a:f8:66:1c:b0:58:3f:e0:f9:
53:a3:89:41:ac:bb:60:ed:49:2a:11:21:d1:29:70:
ac:9a:c8:8d:3e:83:a3:57:1e:29:db:94:56:30:41:
7b:f4:0f:1a:27:52:9a:f0:5c:b2:45:79:9f:e9:2d:
1c:cb:21:b6:9e:65:2f:b4:8c:74:cc:ac:39:fd:bd:
95:84:7a:2b:4b:22:de:af:ed:e7:bd:7f:42:53:35:
08:7f:7f:e0:d5:52:84:b0:de:af:4e:08:e8:54:e1:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:42:78:EF:8A:F5:1B:01:22:CA:26:2E:22:E5:3D:DD:F7:54:3E:67
X509v3 Authority Key Identifier:
keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:72:db:76:0e:1e:64:3a:95:96:e7:11:fa:d9:5a:7d:5f:17:
1c:3b:82:07:be:26:88:2e:fe:46:e1:f9:93:35:90:d9:50:da:
95:a8:af:3e:4b:d3:2a:37:f9:30:b0:7c:d2:18:a6:50:61:48:
0e:5e:f5:b7:61:91:83:29:b6:fd:80:64:84:4b:8b:e6:db:ad:
be:f6:28:63:d4:e8:28:5b:00:1d:53:ce:af:d1:5e:76:6a:0c:
22:6e:86:8f:da:06:41:1e:78:27:64:f9:83:12:c7:97:53:4e:
2e:19:ce:85:d3:95:4e:fe:d8:d1:ac:c9:f0:f6:dc:11:9a:cc:
56:03:de:9f:9d:e0:bc:3f:77:9c:48:12:ac:f2:a7:48:b5:b5:
53:b2:b9:e9:43:b3:7e:7a:c6:7e:a4:82:da:9b:6d:77:46:91:
b6:3b:24:de:ed:fe:db:b8:68:20:44:c8:6a:d4:6d:d8:84:b3:
c1:de:04:7a:b8:20:5d:5e:22:0c:64:cd:3b:9d:8b:eb:f4:28:
f1:29:b9:a3:f7:4b:12:26:a2:26:ab:42:88:5d:fb:5f:f7:df:
2c:6c:ef:0f:85:37:0f:50:80:00:92:c4:65:9b:70:9e:b4:47:
59:87:5f:03:e6:b0:79:7e:97:73:e4:e4:44:8e:9d:3c:f9:ff:
6b:3a:b8:2f
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUSiPKkL5DgAsjO90WKP56neZDbygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJB
NkI3RUY3MTAeFw0yNTA4MjAwNTM4MTJaFw0yNTA4MjEwOTE1MTJaMDMxMTAvBgNV
BAMTKDlCNDI3OEVGOEFGNTFCMDEyMkNBMjYyRTIyRTUzRERERjc1NDNFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQkJOitIedJawc1GGkE91lTJI
zBUzfGxGfrKmk1JEhP+v423dIsrIz439c+h0VCvnso0qnuYIVuyJ8XcqN7yHzaAx
/I2imCXf0BEZDYGNlDxv5EZmMsIoMHL6R90RSi9Mp3e7pgdWISysGNFPTwET85XX
5GpE68F/qbzadf89wtVJPJOHml3JLlCqXFJLnHULfAJFuRRf5H6Agor4ZhywWD/g
+VOjiUGsu2DtSSoRIdEpcKyayI0+g6NXHinblFYwQXv0DxonUprwXLJFeZ/pLRzL
IbaeZS+0jHTMrDn9vZWEeitLIt6v7ee9f0JTNQh/f+DVUoSw3q9OCOhU4QOxAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUm0J474r1GwEiyiYuIuU93fdUPmcwHwYDVR0j
BBgwFoAUGrsI1BpaaXQyDZeId2mhW6a373EwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2IzZGE1Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAv
MUFCQjA4RDQxQTVBNjk3NDMyMEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xQUJCMDhENDFBNUE2OTc0MzIwRDk3ODg3NzY5QTE1
QkE2QjdFRjcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2IzZGE1
Nzg1ZjBjODQxYWM4ZGQ4MTViNzM1NDYyM2RmLzAvMUFCQjA4RDQxQTVBNjk3NDMy
MEQ5Nzg4Nzc2OUExNUJBNkI3RUY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKpy23YOHmQ6lZbnEfrZ
Wn1fFxw7gge+Jogu/kbh+ZM1kNlQ2pWorz5L0yo3+TCwfNIYplBhSA5e9bdhkYMp
tv2AZIRLi+bbrb72KGPU6ChbAB1Tzq/RXnZqDCJuho/aBkEeeCdk+YMSx5dTTi4Z
zoXTlU7+2NGsyfD23BGazFYD3p+d4Lw/d5xIEqzyp0i1tVOyuelDs356xn6kgtqb
bXdGkbY7JN7t/tu4aCBEyGrUbdiEs8HeBHq4IF1eIgxkzTudi+v0KPEpuaP3SxIm
oiarQohd+1/33yxs7w+FNw9QgACSxGWbcJ60R1mHXwPmsHl+l3Pk5ESOnTz5/2s6
uC8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:01:32 2025 by rpki-client