Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft
File: 99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft (raw, json)
Hash identifier: 8fzmLCgfx6Lu02Xn4zMmReY5/nryuC0vB7BqUBmfqhQ=
Subject key identifier: B8:53:0A:C1:D5:26:A4:40:F1:44:54:14:C2:FB:AD:2A:29:59:90:9E
Authority key identifier: 99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26
Certificate issuer: /CN=99a77347a7d39f37f04eb4f585fb6dfcdb2e6d26
Certificate serial: 68120118A3EFBBCBE169B8563594E827199FD508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft
Manifest number: 0223
Signing time: Tue 19 Aug 2025 15:17:59 +0000
Manifest this update: Tue 19 Aug 2025 15:12:57 +0000
Manifest next update: Wed 20 Aug 2025 17:35:57 +0000
Files and hashes: 1: 83027A47466EFA0ED200A7CA6EE9CF229F431C1B.cer (hash: WQvsmLEKqfbHrQEO+iV0pJ/m689HzCWOL5Ik+jKYGAA=)
2: AS210561.asa (hash: j3o216xHh8dX56XKNzUIsgYSu63NbojTIxdW19uHUno=)
3: 99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.crl (hash: nQT44rIhreTKqL2axiuI0M9xDj4wLGhy3m0q7r/YOU4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:12:01:18:a3:ef:bb:cb:e1:69:b8:56:35:94:e8:27:19:9f:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a77347a7d39f37f04eb4f585fb6dfcdb2e6d26
Validity
Not Before: Aug 19 15:12:57 2025 GMT
Not After : Aug 20 17:35:57 2025 GMT
Subject: CN=B8530AC1D526A440F1445414C2FBAD2A2959909E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:77:10:6d:9f:60:a8:81:5a:c2:41:89:52:
d6:14:07:4e:a6:c4:25:e7:6d:c1:43:9f:da:8c:09:
d4:c4:ba:92:59:64:aa:71:b7:eb:35:33:74:fc:c2:
22:77:15:d1:f0:24:3d:01:69:aa:fe:f5:f0:2c:a3:
7b:4c:37:dc:8f:24:8e:31:ea:c2:51:f9:46:d6:19:
8e:92:14:aa:3f:55:41:01:a1:e3:8a:a5:f2:a9:c7:
0a:de:56:da:cc:47:d1:8a:8c:4c:17:52:08:09:64:
57:e9:4d:b7:36:b0:78:a8:1a:90:99:ca:a7:4a:7f:
6a:78:09:e2:a8:f5:0e:24:9d:53:8a:79:e7:6f:88:
cf:92:4c:86:41:af:a9:ab:1a:a9:10:ec:5b:61:e6:
b9:d4:03:46:c3:51:c6:8a:5b:0c:ff:77:51:df:a2:
8f:f9:c9:7f:5c:34:cc:17:8e:53:ff:b6:c6:42:44:
75:27:82:08:84:8f:73:07:f1:0e:10:03:4d:78:af:
c1:7e:c7:5d:f1:c7:cb:11:84:f2:ff:98:2a:61:7c:
56:ea:ce:11:ab:ee:54:9a:f4:40:cc:30:dc:d2:08:
8e:f0:8e:8b:d1:3e:0d:56:18:4e:1c:2a:93:59:c8:
32:05:da:e3:54:55:80:e8:ff:d8:60:12:b5:ca:36:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:0A:C1:D5:26:A4:40:F1:44:54:14:C2:FB:AD:2A:29:59:90:9E
X509v3 Authority Key Identifier:
keyid:99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f1:09:64:39:5a:f0:83:7b:97:ac:54:0e:b4:28:37:1c:ea:
db:f0:f7:f4:31:2d:76:4c:d9:5a:d7:76:c5:ff:27:59:55:1d:
ac:94:00:3f:01:b3:34:5d:93:bd:5b:c8:cd:b2:c2:1e:bc:97:
e0:20:c6:1f:a4:82:a1:3b:fb:25:da:8a:0a:55:fb:68:71:ab:
18:8e:38:a7:5d:b3:71:fe:45:48:67:87:67:19:90:c4:6d:43:
4e:de:f2:5b:c7:8a:39:2d:82:a1:4b:1d:8e:5b:bc:0f:8e:a5:
bb:35:75:ae:bb:13:99:57:c2:3d:37:52:2b:82:e0:98:7e:cb:
5b:df:80:de:11:05:fc:af:84:21:b6:34:04:8c:2c:76:53:27:
39:6d:a0:ea:51:a7:7b:52:8d:fa:bf:19:80:47:ad:6c:e0:d2:
02:75:8e:6e:5a:00:ca:d3:a4:7f:a6:8a:4e:c8:64:08:49:61:
50:cc:40:73:35:79:4e:e8:3b:85:97:09:0b:dc:a0:2c:ee:19:
77:16:50:0f:56:6c:db:2d:90:76:a3:5d:82:d2:e6:79:14:6a:
a8:3b:bc:7a:b1:20:53:35:77:50:45:d5:f2:b6:e7:b0:7f:0d:
e8:34:5f:93:e4:1d:e8:90:96:6c:54:e8:36:fa:bb:91:f3:75:
b0:2b:b3:66
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaBIBGKPvu8vhabhWNZToJxmf1QgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlhNzczNDdhN2QzOWYzN2YwNGViNGY1ODVmYjZkZmNk
YjJlNmQyNjAeFw0yNTA4MTkxNTEyNTdaFw0yNTA4MjAxNzM1NTdaMDMxMTAvBgNV
BAMTKEI4NTMwQUMxRDUyNkE0NDBGMTQ0NTQxNEMyRkJBRDJBMjk1OTkwOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6HcQbZ9gqIFawkGJUtYUB06m
xCXnbcFDn9qMCdTEupJZZKpxt+s1M3T8wiJ3FdHwJD0Baar+9fAso3tMN9yPJI4x
6sJR+UbWGY6SFKo/VUEBoeOKpfKpxwreVtrMR9GKjEwXUggJZFfpTbc2sHioGpCZ
yqdKf2p4CeKo9Q4knVOKeedviM+STIZBr6mrGqkQ7Fth5rnUA0bDUcaKWwz/d1Hf
oo/5yX9cNMwXjlP/tsZCRHUnggiEj3MH8Q4QA014r8F+x13xx8sRhPL/mCphfFbq
zhGr7lSa9EDMMNzSCI7wjovRPg1WGE4cKpNZyDIF2uNUVYDo/9hgErXKNsDfAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUuFMKwdUmpEDxRFQUwvutKilZkJ4wHwYDVR0j
BBgwFoAUmadzR6fTnzfwTrT1hftt/NsubSYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzEv
OTlBNzczNDdBN0QzOUYzN0YwNEVCNEY1ODVGQjZERkNEQjJFNkQyNi5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL21hZHpSNmZUbnpmd1RyVDFoZnR0X05zdWJTWS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9kMGYyZGI5OWZlMWQ0YjM2
YjkzMDFjODIxMjIwZmUzYS8xLzk5QTc3MzQ3QTdEMzlGMzdGMDRFQjRGNTg1RkI2
REZDREIyRTZEMjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCF8QlkOVrwg3uXrFQOtCg3HOrb8Pf0MS12
TNla13bF/ydZVR2slAA/AbM0XZO9W8jNssIevJfgIMYfpIKhO/sl2ooKVftocasY
jjinXbNx/kVIZ4dnGZDEbUNO3vJbx4o5LYKhSx2OW7wPjqW7NXWuuxOZV8I9N1Ir
guCYfstb34DeEQX8r4QhtjQEjCx2Uyc5baDqUad7Uo36vxmAR61s4NICdY5uWgDK
06R/popOyGQISWFQzEBzNXlO6DuFlwkL3KAs7hl3FlAPVmzbLZB2o12C0uZ5FGqo
O7x6sSBTNXdQRdXytuewfw3oNF+T5B3okJZsVOg2+ruR83WwK7Nm
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:49 2025 by rpki-client