Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier: 7MHoKECMpiegT78KR12Eu+cMqSBmUilzAYhSmNOrYiw=
Subject key identifier: FE:8B:7A:2B:02:1A:9F:F5:69:C9:D4:8C:E4:07:46:1D:08:21:A5:EF
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer: /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial: 4B33819C9D21108C9495AFDBB2C46C4959357C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number: 0221
Signing time: Wed 20 Aug 2025 04:24:00 +0000
Manifest this update: Wed 20 Aug 2025 04:18:57 +0000
Manifest next update: Thu 21 Aug 2025 05:31:57 +0000
Files and hashes: 1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: gVxNK4skc9pIrFiaTJJ+OGt6TodEtq5PH82VPz+XIO0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:33:81:9c:9d:21:10:8c:94:95:af:db:b2:c4:6c:49:59:35:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Validity
Not Before: Aug 20 04:18:57 2025 GMT
Not After : Aug 21 05:31:57 2025 GMT
Subject: CN=FE8B7A2B021A9FF569C9D48CE407461D0821A5EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:64:94:dc:23:ba:df:76:6e:e5:cf:28:e4:
9f:94:d1:4f:6f:08:89:88:51:0b:dc:25:bd:db:19:
91:e3:62:7c:4d:a4:dd:ae:e2:78:a7:20:7e:1a:a7:
75:73:d0:6f:64:30:ee:9e:41:ca:77:4b:f0:46:9c:
f9:00:ad:a8:67:0a:a1:9f:17:b3:93:c1:67:98:8c:
7f:33:82:8d:61:c8:2d:8f:04:07:76:08:81:57:48:
3d:2f:17:a8:d3:f3:01:1f:68:b1:d5:a1:fd:fd:7e:
47:1c:64:04:cf:2e:c9:9f:f8:1a:c7:47:6c:ca:d7:
de:4e:54:e2:3f:d6:15:62:7a:36:8c:bb:f6:3f:d2:
2c:3a:66:c2:19:4a:f0:b8:fb:a0:85:77:0d:6b:68:
8b:6e:15:af:a2:7b:a0:b3:d8:4a:9b:05:2d:35:ee:
d0:62:50:4f:08:67:32:97:7e:63:ae:1a:14:7c:79:
b4:28:2e:27:75:46:c2:3e:ad:80:00:eb:cd:27:56:
bd:07:46:f7:6d:46:72:2a:c6:92:0f:2e:7a:7c:5a:
95:96:2b:2d:a0:4d:25:81:31:9a:71:91:22:26:bc:
a9:63:50:62:69:01:66:09:08:53:ce:e8:e1:71:fb:
7f:95:a4:0f:34:b7:34:7b:c6:89:cf:df:85:33:e7:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:7A:2B:02:1A:9F:F5:69:C9:D4:8C:E4:07:46:1D:08:21:A5:EF
X509v3 Authority Key Identifier:
keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:88:bb:a3:66:80:c2:17:ab:16:36:7a:01:a9:6e:fb:52:
10:7a:5c:ad:fd:07:04:4d:99:e9:f0:fc:56:77:2f:c6:c6:f3:
5e:51:39:25:8a:27:06:47:12:31:85:32:9d:b4:ee:e8:8c:3d:
e9:fc:6b:ef:ca:32:5a:2b:f7:ed:28:dd:29:6c:c5:2b:a3:36:
31:09:5c:b4:ec:f9:9f:2c:e7:77:e3:45:c5:b2:11:7d:28:5d:
cc:6d:04:83:fc:62:58:e9:f7:0e:81:3d:87:ff:f4:59:fe:62:
dc:bf:6f:60:b2:3e:b8:bd:71:c2:e5:f8:f2:ff:16:25:b2:c3:
b6:88:de:65:36:06:37:ae:2b:46:76:72:2b:ba:73:97:4f:c7:
45:34:75:af:51:92:e6:5f:72:6d:2e:cd:ef:13:44:71:3c:07:
76:88:04:8a:24:99:ce:ad:88:45:90:f5:15:12:fe:12:2e:a6:
5b:6b:50:71:59:48:d8:1e:25:8f:f0:75:07:f5:a8:dc:1a:9d:
78:29:19:e1:e1:4c:8b:d1:de:58:45:b6:54:5e:22:af:e3:17:
d3:1b:16:95:5a:a5:60:d2:3d:40:4e:10:3e:f9:3b:ad:d9:a1:
14:18:71:00:6e:a2:ca:a5:18:94:d7:39:f6:50:65:cb:54:6f:
20:b3:a7:70
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSzOBnJ0hEIyUla/bssRsSVk1fGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQxNjA0MDQwMDM4Y2RjNzdmOTBhNDBmZTI3N2M0YTBl
YjllOGRmODAeFw0yNTA4MjAwNDE4NTdaFw0yNTA4MjEwNTMxNTdaMDMxMTAvBgNV
BAMTKEZFOEI3QTJCMDIxQTlGRjU2OUM5RDQ4Q0U0MDc0NjFEMDgyMUE1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yWSU3CO633Zu5c8o5J+U0U9v
CImIUQvcJb3bGZHjYnxNpN2u4ninIH4ap3Vz0G9kMO6eQcp3S/BGnPkArahnCqGf
F7OTwWeYjH8zgo1hyC2PBAd2CIFXSD0vF6jT8wEfaLHVof39fkccZATPLsmf+BrH
R2zK195OVOI/1hViejaMu/Y/0iw6ZsIZSvC4+6CFdw1raItuFa+ie6Cz2EqbBS01
7tBiUE8IZzKXfmOuGhR8ebQoLid1RsI+rYAA680nVr0HRvdtRnIqxpIPLnp8WpWW
Ky2gTSWBMZpxkSImvKljUGJpAWYJCFPO6OFx+3+VpA80tzR7xonP34Uz58B1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/ot6KwIan/VpydSM5AdGHQghpe8wHwYDVR0j
BBgwFoAUlBYEBAA4zcd/kKQP4nfEoOuejfgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzEzNjA5ZWRiNjMwMzRiZTBiY2Y1MzlmMmRlZWZiZjI5LzEv
OTQxNjA0MDQwMDM4Q0RDNzdGOTBBNDBGRTI3N0M0QTBFQjlFOERGOC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2xCWUVCQUE0emNkX2tLUVA0bmZFb091ZWpmZy5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8xMzYwOWVkYjYzMDM0YmUw
YmNmNTM5ZjJkZWVmYmYyOS8xLzk0MTYwNDA0MDAzOENEQzc3RjkwQTQwRkUyNzdD
NEEwRUI5RThERjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCO14i7o2aAwherFjZ6Aalu+1IQelyt/QcE
TZnp8PxWdy/GxvNeUTkliicGRxIxhTKdtO7ojD3p/GvvyjJaK/ftKN0pbMUrozYx
CVy07PmfLOd340XFshF9KF3MbQSD/GJY6fcOgT2H//RZ/mLcv29gsj64vXHC5fjy
/xYlssO2iN5lNgY3ritGdnIrunOXT8dFNHWvUZLmX3JtLs3vE0RxPAd2iASKJJnO
rYhFkPUVEv4SLqZba1BxWUjYHiWP8HUH9ajcGp14KRnh4UyL0d5YRbZUXiKv4xfT
GxaVWqVg0j1AThA++Tut2aEUGHEAbqLKpRiU1zn2UGXLVG8gs6dw
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:15 2025 by rpki-client