Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier: zhRNOZHqOVDhKMt1+gORi527PSeagLKbicjMP+aPHj4=
Subject key identifier: B5:14:F9:C6:AC:91:62:46:BF:1C:81:3A:34:6C:5E:8B:E6:57:93:4D
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial: 238CE9B81C6704145A583B1A3C0966B86AA2FEB6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number: 11
Signing time: Sat 03 May 2025 17:17:29 +0000
Manifest this update: Sat 03 May 2025 17:12:29 +0000
Manifest next update: Sun 04 May 2025 17:49:29 +0000
Files and hashes: 1: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: errQGPbuJ3BOCka7ImlZHBj4RtJ6bthFlNZZFpS61q4=)
2: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8c:e9:b8:1c:67:04:14:5a:58:3b:1a:3c:09:66:b8:6a:a2:fe:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Validity
Not Before: May 3 17:12:29 2025 GMT
Not After : May 4 17:49:29 2025 GMT
Subject: CN=B514F9C6AC916246BF1C813A346C5E8BE657934D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:87:be:15:34:02:d7:65:0f:fe:ca:7b:47:
d7:27:99:8b:b9:68:45:18:2e:40:4d:6c:b3:c4:52:
f9:72:e3:9a:bf:f9:9e:26:37:bc:14:a6:b0:f5:dd:
fe:fb:18:3d:69:d1:94:45:ef:dd:c6:7c:a6:e6:83:
2e:37:c7:8b:06:dd:f4:a7:f9:ed:bf:c5:89:c7:b8:
1e:ba:90:1a:ea:19:10:21:8b:78:02:81:8a:f8:bf:
3d:18:37:08:ed:a4:9f:b4:de:db:b6:1f:73:60:fb:
a3:4e:81:c6:90:98:49:30:dd:b6:f9:15:65:01:72:
5b:d8:df:b3:1a:c7:24:54:f8:85:c3:3d:aa:0f:17:
62:0e:52:ef:04:4c:85:fb:40:7b:12:82:52:31:9a:
3c:2c:24:b0:2c:b9:a7:24:2b:5e:3e:c9:54:19:ad:
cf:85:46:d5:c7:d0:90:ed:b7:53:a8:c1:95:75:f9:
81:7c:d6:19:07:d4:c4:ff:83:85:2e:51:c7:4a:96:
fc:1c:04:7b:c0:3b:f4:ac:2e:22:e0:59:3b:a8:0c:
de:4d:0c:39:5a:4d:bd:e8:17:85:13:db:e9:18:fa:
1a:08:09:d4:17:95:d4:1e:0f:28:d8:ea:c6:32:23:
c9:75:9f:d3:ed:b4:af:ee:df:c8:e8:59:c0:d4:a5:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:F9:C6:AC:91:62:46:BF:1C:81:3A:34:6C:5E:8B:E6:57:93:4D
X509v3 Authority Key Identifier:
keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e7:72:a5:f7:f7:37:81:77:80:50:59:13:9f:d3:e7:f2:5a:
3b:c5:43:6c:15:c1:59:8b:77:32:01:b3:be:06:09:d2:bb:3d:
ee:87:5b:e6:dd:7b:ec:8d:bc:9d:79:35:e6:ae:4b:b8:10:7f:
f4:ab:09:57:da:30:12:4e:aa:73:6d:d4:4b:86:10:1d:24:79:
5c:2f:14:25:3b:33:c8:a6:00:4e:fa:25:a8:f9:8c:ce:1d:31:
74:90:16:e3:a5:a2:ed:a7:57:fd:55:75:fe:72:52:82:1c:04:
90:bd:f0:54:33:5b:ca:71:ed:38:6d:4d:5e:6a:80:c3:be:74:
43:d5:9b:6a:2a:c2:00:d2:dd:8d:ab:98:b6:c0:10:9f:ca:6d:
08:ad:78:81:ed:27:66:7b:f7:0b:6f:18:6a:2d:f2:50:6e:84:
93:5f:72:b0:ec:aa:43:69:71:36:c9:5f:e1:d0:68:b4:ee:8f:
f4:d2:6a:16:f5:18:fd:eb:40:e3:6e:54:4a:44:4b:1f:85:1b:
8f:8c:b9:6a:10:13:e0:82:82:45:a0:ed:5d:2c:c2:79:ca:14:
ca:0c:92:df:a3:87:68:c1:93:74:75:4e:38:fe:1d:2e:fd:5b:
8c:b0:51:c0:2f:7c:95:fb:b0:dd:99:45:82:4c:3e:07:37:2e:
f6:38:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:07:04 2025 by rpki-client