Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: RKuNrMlU0Q51DJw1lCwb0sTD5avuVztKVSVzQEYBYDA=
Subject key identifier: 65:42:B9:D8:DC:44:8E:18:9F:DB:70:D9:BD:31:56:47:2D:8D:73:3F
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 7747A3068BFE80ADA8B5B79A48645FFDE4A9B2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 021F
Signing time: Tue 19 Aug 2025 21:25:10 +0000
Manifest this update: Tue 19 Aug 2025 21:20:08 +0000
Manifest next update: Thu 21 Aug 2025 00:07:08 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: r+PSOLV36QVZSUOmGo/kEgZ5vN0p7kQUOIVWrGAanTk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:47:a3:06:8b:fe:80:ad:a8:b5:b7:9a:48:64:5f:fd:e4:a9:b2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Aug 19 21:20:08 2025 GMT
Not After : Aug 21 00:07:08 2025 GMT
Subject: CN=6542B9D8DC448E189FDB70D9BD3156472D8D733F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:9f:6b:00:03:6d:14:38:6f:55:15:55:7c:
92:29:86:62:fb:46:bc:fb:e4:cb:b8:9c:fe:21:b0:
8a:77:aa:e2:d7:b3:c5:4e:82:ec:1a:0b:24:15:0d:
12:bd:f3:9c:21:9c:8b:83:1e:8a:c8:89:c2:e0:13:
78:a9:8d:dd:fc:98:4c:49:00:2f:2a:f9:ec:79:12:
0c:5c:ab:1a:ec:36:ab:d5:bc:93:30:7f:33:7b:ea:
09:c8:2a:09:89:05:98:e0:83:24:c8:22:9a:2d:41:
3a:68:63:dd:b2:de:72:58:82:0e:21:ed:e0:03:b6:
3d:db:8e:58:4b:b7:41:49:4d:66:06:e2:0c:8e:3a:
d8:cf:c6:e5:7e:0c:a0:43:15:35:5c:72:d2:7b:47:
11:39:b6:53:81:83:63:9d:02:8a:ee:86:4a:9c:e9:
9d:92:05:ce:1f:18:1f:3f:7a:2a:06:d5:33:2b:2f:
79:63:bc:ae:32:44:db:dc:cd:cb:b9:9a:b0:58:9e:
05:fd:40:d8:37:bc:45:3f:d0:18:26:5c:ca:cf:a0:
92:92:41:d7:2b:22:ba:21:70:2f:31:eb:68:78:27:
72:41:83:66:6c:d7:27:b3:27:a6:cf:81:64:3b:ab:
e8:7f:86:67:cc:6e:27:a3:3c:5d:3b:d2:de:32:59:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:B9:D8:DC:44:8E:18:9F:DB:70:D9:BD:31:56:47:2D:8D:73:3F
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:65:9a:47:b6:52:61:63:14:be:4d:b1:6d:a5:33:39:91:
49:ea:21:65:77:d1:b3:f5:74:47:42:97:ad:7c:25:63:88:b4:
9e:cc:6d:fe:66:5f:65:86:e9:60:ad:fe:77:e3:54:87:91:a0:
20:c4:61:6d:cc:43:c3:62:7f:57:4b:b2:3a:62:18:c6:8f:e9:
bc:6d:41:50:cf:75:a5:66:f2:9d:5b:31:85:6b:c3:f4:67:73:
b9:43:ee:69:4e:f1:55:ee:ac:ed:bb:75:e2:dc:50:af:17:d8:
6c:2c:04:71:67:7a:54:a3:a9:24:db:36:c5:75:a5:27:c4:bc:
0a:de:75:42:4f:e4:39:b4:53:c6:0f:5f:41:2b:bb:5c:5b:33:
63:c4:f3:10:2c:aa:21:9c:47:56:0d:1e:bb:05:57:27:f6:45:
17:ae:29:b4:77:8d:31:19:2c:fb:29:e2:e6:36:7e:9c:c9:85:
1c:f7:08:b4:24:78:26:0c:28:8c:1a:20:40:13:07:a2:a7:06:
29:1f:a8:a5:6c:b2:e6:07:f3:bd:e1:54:1e:51:1b:3a:a1:7b:
79:4a:d1:18:3d:e7:ca:96:f6:fc:aa:00:c2:51:42:88:3e:c1:
64:ad:5e:83:57:f8:b2:4e:e9:b1:ba:18:2d:6c:5d:22:00:ff:
e4:10:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:45 2025 by rpki-client