Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json)
Hash identifier: EHWzA3dyYOK3l/GPszgK3zDAR84WH7m5SB57GxVmLhw=
Subject key identifier: A3:DC:B0:6D:46:8E:2D:8D:E6:8A:4E:F0:33:41:FD:19:87:31:B2:3C
Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9
Certificate serial: 4D580F409ED9450A1FD080756CCFE0BD23083B8F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
Manifest number: 0176
Signing time: Sun 13 Apr 2025 03:14:48 +0000
Manifest this update: Sun 13 Apr 2025 03:09:46 +0000
Manifest next update: Mon 14 Apr 2025 06:11:46 +0000
Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: nGPaoJsTa0iz1OKWgPTFsxZ5o789bs60P5bQmrEBxPY=)
2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: AJgcsQTUXmWhlRqA4IFj5pxeMXGfItSPf/llUG4VZFo=)
3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: tepnhtpStfx+iROmpj+cPwbcFtzKc4geGeglxL8Depc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:58:0f:40:9e:d9:45:0a:1f:d0:80:75:6c:cf:e0:bd:23:08:3b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9
Validity
Not Before: Apr 13 03:09:46 2025 GMT
Not After : Apr 14 06:11:46 2025 GMT
Subject: CN=A3DCB06D468E2D8DE68A4EF03341FD198731B23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:ee:ae:dc:bb:d4:44:b8:bd:c0:c2:41:b3:
d2:90:62:8e:9e:fe:33:34:2a:08:be:e2:52:ba:bb:
b5:95:34:48:e0:47:89:35:ce:65:af:29:5f:24:d4:
bf:80:e5:d4:eb:c1:93:34:e5:aa:95:4e:12:e7:2f:
df:d5:96:45:82:9c:af:33:55:a1:f4:4e:9a:92:78:
f6:75:f9:e1:6b:9a:a9:5a:d8:d0:bf:92:22:9f:e4:
33:bb:f1:45:ce:7a:ea:eb:b2:c4:e6:4e:3c:58:15:
49:aa:d3:20:45:a8:1a:3e:d0:81:a8:5a:4e:95:e0:
5f:2b:20:73:7d:c8:fa:ff:5a:4e:87:2f:d1:a8:5f:
f3:62:46:b6:41:3d:c2:11:08:32:2d:55:3a:60:20:
5d:4c:9e:5b:f6:b0:48:80:89:e8:d8:81:56:57:c7:
47:3f:e3:a0:fb:e9:fb:f1:0d:e8:7c:0b:bc:a9:81:
24:74:da:6f:55:85:07:2b:f6:3d:c2:9b:32:62:da:
a8:1a:64:a1:92:fd:b9:f5:2a:3d:29:50:c8:b2:48:
e9:38:af:e1:4e:ab:6b:68:59:27:4e:30:3d:9a:65:
3c:fe:47:27:e5:60:76:66:d8:91:a2:51:22:b1:d3:
3a:13:61:f0:ee:f1:c0:2c:c6:b7:ee:dd:d8:2a:ca:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DC:B0:6D:46:8E:2D:8D:E6:8A:4E:F0:33:41:FD:19:87:31:B2:3C
X509v3 Authority Key Identifier:
keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:c2:1c:86:d8:f4:df:fc:f8:d9:46:2f:48:6e:00:47:9f:
22:a8:a2:55:a4:09:ab:3f:8f:e0:5e:de:5b:55:98:a2:f8:83:
c9:41:e7:9a:df:8c:96:52:83:fc:38:f7:72:92:3f:18:b1:77:
87:a3:c9:70:da:59:1b:dc:11:06:56:8f:f3:9a:2b:4c:31:2c:
f6:55:bd:ef:01:c0:19:82:35:db:44:7d:97:6c:03:66:ed:57:
90:f8:77:82:eb:92:3e:41:26:c0:e9:54:c7:97:42:ad:7d:fd:
b2:3e:af:34:ff:bf:a4:b4:1b:2d:cd:29:a3:8f:84:ed:26:77:
c9:f4:ee:d0:95:43:38:36:82:15:d9:55:20:3e:ab:1b:91:5f:
dc:2e:a9:55:86:fd:58:cb:05:71:c8:dd:e0:5d:eb:36:1c:f5:
b8:3a:f8:be:e9:61:58:05:3d:28:6a:83:0c:d9:2b:26:3a:b5:
a8:6f:82:82:28:45:6a:8b:da:3d:de:5d:6b:27:60:33:25:87:
7c:b9:a1:13:af:b6:5c:51:9c:f3:15:4e:ed:47:94:62:03:42:
c9:1e:9a:58:80:2a:ef:43:45:71:04:b6:d9:7c:81:6b:27:d3:
b5:c1:39:73:fa:c8:d2:fb:94:67:4c:39:28:ff:39:d6:c7:4e:
5f:2e:d1:58
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUTVgPQJ7ZRQof0IB1bM/gvSMIO48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw
Nzk5NUVFOTAeFw0yNTA0MTMwMzA5NDZaFw0yNTA0MTQwNjExNDZaMDMxMTAvBgNV
BAMTKEEzRENCMDZENDY4RTJEOERFNjhBNEVGMDMzNDFGRDE5ODczMUIyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+O6u3LvURLi9wMJBs9KQYo6e
/jM0Kgi+4lK6u7WVNEjgR4k1zmWvKV8k1L+A5dTrwZM05aqVThLnL9/VlkWCnK8z
VaH0TpqSePZ1+eFrmqla2NC/kiKf5DO78UXOeurrssTmTjxYFUmq0yBFqBo+0IGo
Wk6V4F8rIHN9yPr/Wk6HL9GoX/NiRrZBPcIRCDItVTpgIF1Mnlv2sEiAiejYgVZX
x0c/46D76fvxDeh8C7ypgSR02m9VhQcr9j3CmzJi2qgaZKGS/bn1Kj0pUMiySOk4
r+FOq2toWSdOMD2aZTz+RyflYHZm2JGiUSKx0zoTYfDu8cAsxrfu3dgqykajAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUo9ywbUaOLY3mik7wM0H9GYcxsjwwHwYDVR0j
BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv
OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB
QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5
Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5
N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFr5whyG2PTf/PjZRi9I
bgBHnyKoolWkCas/j+Be3ltVmKL4g8lB55rfjJZSg/w493KSPxixd4ejyXDaWRvc
EQZWj/OaK0wxLPZVve8BwBmCNdtEfZdsA2btV5D4d4Lrkj5BJsDpVMeXQq19/bI+
rzT/v6S0Gy3NKaOPhO0md8n07tCVQzg2ghXZVSA+qxuRX9wuqVWG/VjLBXHI3eBd
6zYc9bg6+L7pYVgFPShqgwzZKyY6tahvgoIoRWqL2j3eXWsnYDMlh3y5oROvtlxR
nPMVTu1HlGIDQskemliAKu9DRXEEttl8gWsn07XBOXP6yNL7lGdMOSj/OdbHTl8u
0Vg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:07 2025 by rpki-client on console.sobornost.net