Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: Ti5WF8rMxFjWeuig47kY+wf5KM/W6nsESS8qe05Kb7k=
Subject key identifier: E0:13:3F:CE:E4:01:3D:96:A7:F5:70:7F:76:1C:88:D2:DA:B5:9E:87
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 68E472FE0E1FD0CEDB7EF4044F4FABA3248FDB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0222
Signing time: Tue 19 Aug 2025 22:44:32 +0000
Manifest this update: Tue 19 Aug 2025 22:39:29 +0000
Manifest next update: Thu 21 Aug 2025 01:39:29 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: TugTjPci1H0RMJ2WKK+BOvhX9fAj3JyQqCOkLjWffzQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e4:72:fe:0e:1f:d0:ce:db:7e:f4:04:4f:4f:ab:a3:24:8f:db:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Aug 19 22:39:29 2025 GMT
Not After : Aug 21 01:39:29 2025 GMT
Subject: CN=E0133FCEE4013D96A7F5707F761C88D2DAB59E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:5d:a5:79:2b:98:33:ff:6b:8e:b8:2f:d1:
bc:51:04:84:49:09:ae:71:ea:4b:c6:81:7e:f8:eb:
6f:10:ab:06:68:70:ba:f8:fa:7b:80:0b:60:5c:e1:
1e:02:4c:3e:1e:f6:71:55:e6:8b:fb:b9:7a:df:5d:
50:c8:77:79:fd:70:31:ee:a3:15:28:20:d4:d3:b9:
45:a8:1f:c0:a1:e4:d7:4d:3b:43:3b:24:e6:fd:07:
01:eb:45:67:93:67:98:a5:4d:38:23:de:67:c0:13:
2e:9f:e9:f4:29:7c:8f:f6:2b:e1:8a:78:47:7b:ef:
71:8e:d8:e8:3b:9d:ee:ea:21:e5:94:5e:2b:0d:0d:
25:61:74:e8:3b:7a:cb:0c:ff:77:84:b1:37:60:23:
38:d7:72:d9:3d:c6:ab:1b:f9:14:d1:31:0e:a6:55:
05:2c:6f:37:96:f9:ab:b9:4a:a6:c6:fd:34:78:07:
ee:69:a4:61:4e:0d:36:c4:6f:43:ca:cf:c3:ce:02:
3a:c8:f2:0b:37:7c:60:d4:01:e9:83:fd:f2:67:0a:
ec:b7:64:39:e6:ab:e1:42:fd:1b:d7:eb:af:39:15:
ba:88:5c:8c:85:9a:04:b5:ab:3a:9b:af:68:31:81:
97:37:1c:de:d4:8f:21:a8:ce:a7:e1:70:48:0e:54:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:3F:CE:E4:01:3D:96:A7:F5:70:7F:76:1C:88:D2:DA:B5:9E:87
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9d:d9:b9:89:03:36:0f:3b:5f:38:59:a7:34:eb:e2:84:91:
8b:8e:16:8c:d0:c7:70:36:68:db:d7:a3:17:b5:d8:9b:b6:12:
a3:00:6f:3d:90:7d:8d:d4:ba:62:1f:8b:5c:f2:07:3a:42:78:
4f:1c:5a:0b:33:c9:b4:26:ad:34:54:25:ce:3e:94:4e:fa:77:
34:f1:f7:21:39:1b:6b:a4:08:9d:c7:38:39:ab:50:32:c4:37:
f8:f0:e2:26:6d:86:65:63:8e:35:6d:13:4c:b6:21:6f:c5:ad:
df:82:7a:84:1c:11:a5:36:35:91:45:40:b6:02:2f:d2:12:cb:
30:2c:31:9a:e0:05:93:b3:c5:9e:7a:db:d9:54:43:91:ed:04:
3e:1c:3b:fb:7a:f3:15:84:89:ad:35:2d:bb:5a:78:29:9b:85:
2e:8c:90:d5:b1:fb:22:02:08:f6:76:74:a2:ad:fe:a8:30:c9:
71:c4:c2:ab:6d:d5:f8:a1:52:eb:ff:f1:dc:83:08:f9:8e:bd:
a9:f3:3c:ab:d5:83:b3:61:63:f5:14:ac:50:40:77:97:4f:af:
c1:c8:5b:07:9e:b4:72:06:d8:35:ca:a3:b0:af:1d:ae:ab:34:
61:9e:0b:56:f4:c5:0b:3a:fc:a9:43:c6:17:6d:d2:c6:31:b8:
53:d2:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:06 2025 by rpki-client