Manifest
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
File: D4606AE6F18838E2257D55ABB500636F509236E3.mft (raw, json)
Hash identifier: X7NlZBIYWDRihYe4XxAHg9YdG8n0ncD6KD1jxRU/4tQ=
Subject key identifier: 5D:97:28:26:91:EA:D2:6B:72:B4:13:07:62:44:76:75:36:7A:96:E9
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Certificate issuer: /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial: 55423F0AD60D48C3AB1B2EB422F8D0E91FFC701B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
Manifest number: 477F
Signing time: Sun 22 Jun 2025 08:23:44 +0000
Manifest this update: Sun 22 Jun 2025 08:18:44 +0000
Manifest next update: Wed 25 Jun 2025 08:47:44 +0000
Files and hashes: 1: D4606AE6F18838E2257D55ABB500636F509236E3.crl (hash: b6lxe4+JvtnulsdN+S3ssTdQyX4vNE5a1xvymaA8AYM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:42:3f:0a:d6:0d:48:c3:ab:1b:2e:b4:22:f8:d0:e9:1f:fc:70:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Validity
Not Before: Jun 22 08:18:44 2025 GMT
Not After : Jun 25 08:47:44 2025 GMT
Subject: CN=5D97282691EAD26B72B4130762447675367A96E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9e:2c:be:15:bf:6c:29:07:67:da:11:f5:e3:
25:57:82:9b:e6:a6:39:a4:dd:d9:e1:cd:eb:2d:54:
df:a7:25:b4:c4:b3:93:2c:65:e1:49:9c:99:96:76:
0b:5a:8e:ca:61:78:44:02:91:7a:89:d6:0f:e0:ec:
dd:ae:98:39:05:ca:ed:46:dc:c2:5e:a3:02:ab:0f:
2f:3f:eb:c8:d9:d3:1d:5e:81:d4:18:07:7f:8f:53:
d5:2f:20:90:5a:ff:d8:23:b0:2b:ba:78:9f:64:a8:
ab:f5:f1:4f:84:2f:e0:94:51:0f:d6:bd:b5:18:f1:
47:2c:65:f6:dc:1b:0a:3e:01:af:c2:52:e5:8a:8e:
0b:c1:85:5f:af:9d:49:ea:1f:40:5a:20:0c:f2:eb:
36:6c:fb:2f:1c:d3:d0:cc:36:08:c4:f1:8f:c9:af:
d6:02:4c:f6:77:47:30:80:4d:63:ee:0a:c5:fe:cc:
61:76:27:f8:ee:d2:67:03:55:e8:27:76:46:d2:0e:
7a:09:0c:fa:e8:6f:e0:f3:20:ff:8d:bd:29:f3:58:
11:a0:90:25:48:6d:49:1c:a9:fe:b1:5f:1d:df:50:
86:c8:58:a0:c9:fe:8f:f7:e2:d7:cb:68:41:9c:41:
89:2d:7b:c3:02:93:c3:a9:0e:7d:01:bd:38:22:1b:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:97:28:26:91:EA:D2:6B:72:B4:13:07:62:44:76:75:36:7A:96:E9
X509v3 Authority Key Identifier:
keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:29:f3:2f:c9:8b:18:fe:d9:97:6f:78:bc:77:33:88:78:
ac:55:eb:c7:b3:fa:97:7b:47:ea:23:b1:53:e2:18:d2:12:44:
e5:51:85:cd:ab:52:b5:4f:0d:10:70:87:34:50:0e:62:f2:e5:
60:b3:d5:53:ce:a5:08:d0:b6:b4:5e:9b:bf:f6:5b:b1:c3:d1:
53:f5:30:c7:1f:ca:13:03:f4:6c:72:d7:55:32:32:fb:5c:28:
81:67:e8:cb:31:8a:74:4a:1a:a4:70:47:0a:64:92:44:35:e0:
2b:30:4e:31:c5:ac:d0:54:b3:ba:02:f6:ec:2a:e5:90:6f:9a:
6d:c8:f4:ca:8d:9e:7a:d5:cd:29:f3:9d:4a:58:ce:ec:88:6a:
d2:09:96:f0:b0:25:36:ce:b2:e7:71:42:cd:7a:1f:25:8b:57:
14:92:71:a9:e4:0f:ab:0a:72:4a:f6:a1:ae:5a:3e:83:a0:66:
63:6c:11:1f:fe:e5:cd:e4:df:c4:12:a0:53:ad:d1:5c:b4:f3:
9d:60:d2:3e:fd:6b:fe:15:27:c7:05:7a:93:3f:08:82:d7:98:
11:f1:6a:c6:48:f0:f5:75:00:20:eb:06:10:71:ac:05:cb:38:
03:46:9f:27:fd:37:2a:3f:e4:03:fe:f7:fe:1d:0d:ee:db:0e:
71:0c:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:36:11 2025 by rpki-client