Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: pE23t22+dBgKIYXJU/r6B+vYb+h4fnHKFuY7Y4+chOk=
Subject key identifier: 3F:19:61:D7:5A:A8:C3:EC:ED:73:00:04:9B:C7:B9:81:30:79:DA:3B
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 4CF3A4844165B8B30E042B3C1B1F095D4E445319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 0221
Signing time: Tue 19 Aug 2025 22:16:03 +0000
Manifest this update: Tue 19 Aug 2025 22:11:01 +0000
Manifest next update: Wed 20 Aug 2025 23:40:01 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: gAtGR4J+NiH80SHUtFHv3J7uCHCecd/xetBiPjhUtbU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f3:a4:84:41:65:b8:b3:0e:04:2b:3c:1b:1f:09:5d:4e:44:53:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Aug 19 22:11:01 2025 GMT
Not After : Aug 20 23:40:01 2025 GMT
Subject: CN=3F1961D75AA8C3ECED7300049BC7B9813079DA3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:ed:fe:ab:8b:ca:f6:a9:f1:37:dc:44:ca:
c1:f5:c8:d7:b8:e9:28:47:88:33:3e:eb:21:e3:e3:
aa:e2:22:5e:56:b7:ec:f5:80:c2:c1:2b:72:0d:53:
fa:77:bf:72:27:d7:e4:52:40:de:78:02:95:0b:92:
03:8f:08:f5:e4:e1:4a:c1:59:0d:a4:b9:d1:92:31:
d3:49:cb:b5:65:59:ec:1f:8b:7e:76:0b:d8:4e:dc:
2d:7c:8b:e3:ef:bd:21:8c:93:1c:ee:f9:d8:6c:52:
76:f0:f5:e0:8b:7b:73:56:5c:54:5a:b3:89:34:8d:
31:32:9e:84:f5:7c:e1:75:eb:04:29:fe:de:91:28:
bb:cc:0f:26:72:be:3f:ee:4b:54:b8:e0:fb:2f:d7:
28:1d:46:5d:73:60:0a:be:4e:22:d0:a4:b3:ed:14:
06:4b:41:de:8b:3a:64:19:29:20:8d:44:88:62:37:
a7:4a:5d:13:b9:dc:2c:76:e8:30:d9:ec:6e:f7:6d:
80:b1:25:35:47:ad:12:51:5f:39:7a:49:e5:09:d5:
d4:94:a9:7d:32:67:70:b2:ae:d8:bc:27:c3:00:17:
28:31:61:7d:a4:34:82:cb:a7:6f:81:d3:b0:24:20:
63:bf:0c:0f:cd:f8:4a:a5:ca:db:c1:5e:61:e8:74:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:61:D7:5A:A8:C3:EC:ED:73:00:04:9B:C7:B9:81:30:79:DA:3B
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:d2:f6:f6:d5:ed:65:a2:a8:b7:55:7c:31:22:af:82:57:
17:db:9b:c0:45:58:e1:23:bf:42:ab:49:50:f0:4a:a0:5e:12:
df:10:7b:6c:57:c6:bc:c0:f2:ba:90:5f:04:90:eb:ad:24:65:
40:b4:bb:25:56:84:01:d9:61:48:6b:3b:75:a1:17:b8:9f:7a:
0e:6f:be:9a:73:64:48:5d:27:54:c9:c7:68:55:88:25:08:3f:
dd:11:05:fa:01:2d:3a:5f:67:f1:16:a6:d0:44:1f:ed:be:0b:
b7:8c:1b:69:33:38:0b:d7:75:8c:0a:a0:c5:a9:44:9e:02:09:
39:20:23:5b:67:3f:c4:7a:48:b0:a1:f0:d7:75:3b:17:1e:2f:
82:40:16:f0:f9:59:2b:04:1d:ef:91:bc:5a:00:8b:9b:99:f7:
3a:c5:68:95:fe:c8:58:c9:01:ff:43:97:45:d3:1a:1f:dc:9c:
bb:ae:b0:2b:25:91:ce:15:e4:ba:e6:50:eb:40:90:08:30:1f:
44:32:8e:31:0c:2f:f8:ef:04:5c:c0:07:37:32:54:6f:e3:fd:
29:0d:38:b0:60:eb:36:06:fb:99:9c:9a:76:ac:8f:d2:aa:15:
14:3b:f8:a8:bb:62:1d:5c:a8:2f:ed:f3:d6:a1:d2:05:56:52:
71:18:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:12 2025 by rpki-client