Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json)
Hash identifier: wdr+Cm9zkznI1QcaEJ0BY564XDOns7LebBdTzMS2H40=
Subject key identifier: D1:03:A3:7D:BD:85:E3:52:A5:7F:2E:00:16:9A:1D:92:EE:44:4B:E6
Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Certificate serial: 122DC5710785AE0AD50D14477FBF70C595E6A7E9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
Manifest number: B7
Signing time: Tue 29 Apr 2025 08:54:08 +0000
Manifest this update: Tue 29 Apr 2025 08:49:08 +0000
Manifest next update: Wed 30 Apr 2025 10:45:08 +0000
Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=)
2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=)
3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: WlTVNhAoA2rr7+PQF7S6Y1HwuBEuvVDsXBBW5ZAUXJs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2d:c5:71:07:85:ae:0a:d5:0d:14:47:7f:bf:70:c5:95:e6:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Validity
Not Before: Apr 29 08:49:08 2025 GMT
Not After : Apr 30 10:45:08 2025 GMT
Subject: CN=D103A37DBD85E352A57F2E00169A1D92EE444BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:40:a2:0d:de:4f:61:f3:ee:94:43:81:b7:
de:e9:9f:09:b0:3c:12:9c:e1:59:8a:13:61:ef:96:
23:32:ec:60:c5:fd:84:54:76:7e:4b:5d:b8:04:d0:
71:c1:1c:78:72:8b:a2:3b:1c:5e:09:9e:05:83:ef:
31:04:73:a0:24:03:15:fc:e1:17:1d:cc:80:2b:eb:
ed:d5:27:58:c2:bb:c7:87:8f:e4:dd:6c:e5:14:3d:
4f:7e:69:2d:c0:68:59:05:f1:ad:27:91:3f:bc:3c:
41:e4:f6:da:55:f3:82:84:f5:80:51:3d:a1:66:36:
ab:b6:18:18:6a:b4:dd:07:92:08:6d:a2:3c:5a:91:
1b:2a:02:27:d4:c9:28:ab:2d:e6:78:c6:86:2b:b8:
3d:a4:09:2e:53:ee:c4:67:6f:5f:07:85:cc:93:58:
76:e2:d8:70:5c:7d:ed:bd:8b:91:b6:8e:8b:d8:0d:
90:c6:53:4f:8f:8a:74:7c:78:02:f8:49:f2:33:3e:
9e:0a:22:79:31:60:20:9c:70:64:3a:b5:65:13:c7:
b6:be:87:5d:38:fa:ea:53:89:9c:b7:ce:ae:a2:81:
3f:cf:a3:21:ba:10:aa:df:09:f0:dd:41:4b:90:44:
bc:73:09:78:63:96:9d:3b:62:84:e1:da:57:bb:11:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:A3:7D:BD:85:E3:52:A5:7F:2E:00:16:9A:1D:92:EE:44:4B:E6
X509v3 Authority Key Identifier:
keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:65:30:45:d5:b3:f5:2c:38:bb:c8:65:b1:ec:5c:63:57:
8e:1f:c3:99:d6:ca:1c:d7:86:f6:f2:ab:b4:45:af:c9:40:ff:
9c:ee:1a:f1:b1:88:12:cd:38:3a:64:30:ff:00:64:0a:52:77:
67:f8:0b:d9:26:18:b9:54:eb:ad:7b:46:e6:34:51:25:89:e4:
e3:e3:c2:dc:a7:f2:03:a2:19:45:89:72:b2:a1:aa:d2:ff:e4:
3d:3a:5c:01:7f:6d:95:cc:87:a3:83:10:a5:ae:cd:d0:c0:aa:
86:94:4f:60:ba:22:d4:3b:cb:02:c7:82:0e:05:ef:0d:92:a3:
1c:b3:93:fd:fc:d3:d7:c4:bd:43:b6:b1:7a:bf:c2:0e:82:b4:
c4:5c:09:40:72:db:f8:97:9d:86:90:eb:a0:79:87:af:67:0d:
d9:61:83:7d:c0:61:5c:1e:1d:4b:31:93:12:ce:22:91:59:43:
44:90:a2:9f:c4:10:25:9c:79:b7:e6:84:4d:1d:09:81:7b:55:
d2:5f:b1:d9:27:d1:7f:95:0c:58:c6:0d:d0:70:0b:8a:df:e2:
5d:d1:46:69:cd:65:81:13:06:ef:e8:16:2c:bb:5a:14:26:5b:
6c:0f:6b:58:c1:26:e1:97:c4:92:75:39:e2:fe:97:bb:4a:b7:
eb:b9:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:12:24 2025 by rpki-client