Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json)
Hash identifier: sSvPhVD4+PPIx2H94yStPijsJIAUpgAPaTz3XsB07w4=
Subject key identifier: 9F:53:F3:B5:95:05:48:AD:01:D3:9C:D3:9A:A2:44:64:5E:A9:ED:4F
Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Certificate serial: 531A7A581694AFCE9010BD5C066B1608A76D7E17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
Manifest number: 0220
Signing time: Wed 20 Aug 2025 06:22:49 +0000
Manifest this update: Wed 20 Aug 2025 06:17:47 +0000
Manifest next update: Thu 21 Aug 2025 09:41:47 +0000
Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: 23qULMnM7Wv3b/f1IEfcrNr+492qZvxs7IMfJHBrafA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1a:7a:58:16:94:af:ce:90:10:bd:5c:06:6b:16:08:a7:6d:7e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Validity
Not Before: Aug 20 06:17:47 2025 GMT
Not After : Aug 21 09:41:47 2025 GMT
Subject: CN=9F53F3B5950548AD01D39CD39AA244645EA9ED4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:15:2d:24:1d:fc:66:a1:7a:44:c2:af:3a:
34:cf:9f:5b:cb:49:0b:20:e3:f2:e1:0d:02:0e:ca:
a4:dd:5d:9e:dd:98:0a:9b:c1:01:ba:a6:96:64:0c:
74:fe:63:43:b4:71:82:ae:8c:9a:bb:c3:a2:83:21:
08:da:80:0f:76:ba:46:ef:f3:cd:a2:f1:ab:27:1d:
a0:1e:bb:33:89:62:a0:15:15:87:3f:a7:0b:65:04:
6a:c5:06:61:d0:db:69:3c:44:1f:f3:3e:63:ad:6f:
8d:5b:27:2a:4e:a6:c6:83:bb:cf:d1:68:e1:42:65:
4a:52:51:67:e4:c2:8d:53:d1:bd:27:39:ff:4d:c5:
c0:ae:1c:d0:94:c0:74:81:c7:f6:b5:14:fb:18:37:
4b:64:39:07:b6:87:31:71:ae:95:6d:19:6f:64:1c:
82:40:24:0d:63:27:cc:38:0b:0b:ac:b0:2c:8c:d8:
4d:ec:fa:0a:c8:d3:50:b9:80:c3:07:3b:39:4e:bb:
df:d1:17:04:75:0f:7c:a3:73:b4:db:0f:22:42:56:
77:63:de:68:53:30:e4:46:19:8f:b5:3a:4d:27:5b:
8d:6a:5c:e5:3a:69:e1:22:35:33:d6:93:6b:74:41:
6f:9a:aa:64:c8:28:b5:04:d3:c1:61:8d:1f:89:93:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:F3:B5:95:05:48:AD:01:D3:9C:D3:9A:A2:44:64:5E:A9:ED:4F
X509v3 Authority Key Identifier:
keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5e:33:86:3b:77:b5:83:8b:65:43:27:37:34:5e:5d:0e:de:
ed:c5:22:59:14:cb:b9:94:28:f4:88:a8:97:13:85:f1:bf:a7:
3e:44:8c:08:cb:e7:42:93:1d:aa:04:07:23:2d:ee:02:f9:bc:
1a:68:d4:1a:59:da:42:2c:5d:98:28:8c:db:a1:2b:72:00:44:
d9:46:81:60:c7:25:01:45:4b:51:ac:7a:1d:dc:71:6b:39:74:
20:fe:46:a9:0c:58:76:33:5f:fb:f6:ee:20:37:12:77:c8:82:
a2:ae:c6:0c:2f:b7:cb:ac:1c:d2:97:60:ef:77:9c:a8:4d:4a:
11:5f:8c:c1:07:6c:33:dc:c3:13:b9:f1:8c:18:07:5c:02:3e:
75:c1:fc:60:65:19:8e:2e:00:bc:5e:c8:c7:58:47:b3:ee:a9:
1a:59:74:83:31:8b:1a:84:01:8b:af:61:83:5a:24:ec:6a:26:
73:34:aa:f2:b6:35:12:82:c8:f7:6e:bc:d9:2d:95:2a:5b:7a:
ba:07:8e:77:a5:da:c0:c9:d4:75:6b:93:2d:8e:36:14:13:bf:
1b:ae:c9:c0:0a:d4:a3:97:34:06:9c:d7:60:0c:63:4e:b9:ef:
fe:64:22:5b:e5:09:b6:ec:c4:f7:05:4a:58:cf:12:02:77:90:
b9:fb:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:53 2025 by rpki-client