Manifest
$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
File: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft (raw, json)
Hash identifier: /+U0mNCVcHaCfG4K86RQJe86aVWir5xsJt/tJLDyFAo=
Subject key identifier: 96:DB:87:02:D2:58:48:49:37:5A:46:86:6C:EE:88:03:B4:E9:D1:4F
Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Certificate serial: 23DC9927302C148E656CBA100C50589F933E30B4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
Manifest number: 11
Signing time: Tue 30 Sep 2025 08:11:37 +0000
Manifest this update: Tue 30 Sep 2025 08:06:37 +0000
Manifest next update: Wed 01 Oct 2025 21:24:37 +0000
Files and hashes: 1: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl (hash: onC/9YF6lzgFpk6a4dPEIiyjXE6kp4FPErFpiV4/tp0=)
2: 326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (hash: cZs+7mqWYVEZ9ra2hDwyBP0f5EQYySDokYBR3RB7WbU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:dc:99:27:30:2c:14:8e:65:6c:ba:10:0c:50:58:9f:93:3e:30:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Validity
Not Before: Sep 30 08:06:37 2025 GMT
Not After : Oct 1 21:24:37 2025 GMT
Subject: CN=96DB8702D2584849375A46866CEE8803B4E9D14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:06:60:4d:44:f1:d2:10:3e:b1:ea:b2:e9:
09:d2:5e:99:88:4c:76:8c:b5:98:34:b7:1f:1a:55:
db:08:53:94:53:32:72:79:b7:a9:9d:db:a7:7c:26:
7f:8f:e5:58:1e:5d:f9:1f:03:13:37:38:bf:33:02:
e4:a9:d3:73:87:01:b1:3c:7d:07:65:d8:e8:ec:f5:
36:77:6d:7d:53:ca:7f:b4:05:00:d9:8f:20:e8:4c:
71:3d:29:cf:93:4e:f8:0a:fe:76:10:23:00:85:f4:
be:75:59:a1:30:4c:b2:68:98:2c:a6:e4:7e:5c:17:
ed:5e:ff:f2:ff:fa:d5:b1:4d:d1:55:ac:71:c4:63:
65:09:a9:18:c4:ff:a7:33:b1:c1:09:15:58:b9:7d:
37:d4:3e:22:84:3e:70:cd:fa:f6:1d:08:13:c2:27:
44:88:59:11:fd:ba:1c:db:7e:77:57:a9:d3:1a:3d:
61:d6:16:ac:e7:96:22:8d:7d:10:d0:59:2f:df:08:
07:b0:74:9b:e3:3f:72:3a:c8:51:f6:ad:f1:16:2d:
9b:6c:ae:f7:53:66:aa:f6:d5:a3:dc:1a:40:e6:4f:
d4:d2:fb:d2:e7:85:ed:ed:d3:9b:a3:90:92:eb:73:
2c:84:66:50:9d:62:88:14:5f:5a:4f:35:75:93:1a:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:87:02:D2:58:48:49:37:5A:46:86:6C:EE:88:03:B4:E9:D1:4F
X509v3 Authority Key Identifier:
keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject Information Access:
Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dc:c7:24:10:ae:e7:84:f6:39:dd:e7:4a:95:75:07:18:83:
a1:50:67:53:fa:60:41:82:f8:81:59:1d:8a:6c:5e:da:a2:49:
da:48:a9:f6:27:a2:48:96:56:fe:37:36:60:46:6c:14:97:4e:
ec:14:e1:57:bf:94:2f:45:75:9a:b4:a9:d0:94:44:ae:f2:e8:
9f:e7:11:16:97:68:9b:94:4e:af:b1:d4:69:ba:cc:ca:96:40:
dc:ed:93:74:ef:13:fa:56:58:0e:ab:4f:4a:93:67:7f:b4:d6:
36:56:70:ae:57:3e:c6:da:aa:58:d8:cd:37:d3:84:6a:0d:60:
3f:a7:0d:3f:5b:48:92:d8:57:ad:7a:1a:ca:74:be:97:e7:8e:
26:50:75:4f:45:ed:dd:d7:0b:4a:44:0e:db:4a:32:f2:71:7d:
9c:86:f2:9c:28:7c:4e:dc:f1:74:d6:34:d7:5c:8e:e8:66:27:
a9:e8:e4:3e:bb:4b:49:21:8c:1b:58:21:24:13:c9:d2:c5:0e:
b1:e4:78:2c:ab:df:f6:ca:b9:fc:c8:8e:2e:e2:e1:5c:64:e5:
ad:54:81:cf:cb:dc:ea:dd:85:8b:82:f8:a8:f5:60:22:cb:7d:
07:ed:50:5c:fd:17:c2:3e:06:18:25:5d:ef:48:6c:36:f3:96:
f3:be:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:34:28 2025 by rpki-client