Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft (raw, json)
Hash identifier: YQUEzGhUkbJ0Kmc+xOLd5xyRGzKRLbYhLcS58yMxMzY=
Subject key identifier: 25:DA:B7:0E:21:ED:3E:77:5B:FE:01:D2:7C:C2:AB:2A:65:57:15:DC
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial: 199DE69E4D2B642C0AC3481DE51F0AD555BD2B73
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
Manifest number: 6B
Signing time: Sat 03 May 2025 00:51:20 +0000
Manifest this update: Sat 03 May 2025 00:46:20 +0000
Manifest next update: Sun 04 May 2025 01:53:20 +0000
Files and hashes: 1: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl (hash: fAIlhMxahM6xPCioIYoNgjIv2RYUKAotgNaRqX6Yl9c=)
2: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: QHn6tZLY5zwuhSPqOA8QQMb0D6GsyTP/mqBIqGqENAM=)
3: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: te+8Q1RQF+/El0aKCot2iG7DWX0UbXJkKUaUr9PfYwE=)
4: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (hash: McKOo0wjCF+L16RdYNwznvhAMt5vLhEjMFMiKNyOz1k=)
5: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: J8io8U0XPUuDsKGS242FyC3RGJyS4nfWqlR7rVI4fs4=)
6: 326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (hash: nMz8R5yRV0NhDshW9eqtH+q8ysKGUihhxh8s0gmqFl4=)
7: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: fR50iWKN91zeMKObuJZ1eZa1Tl9ML9P7Lc9Jyq3bDSI=)
8: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: 4Gi+kIIUqV5pUjirmODz+ut3Qk0c/1o7NqIqNMEHsSc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9d:e6:9e:4d:2b:64:2c:0a:c3:48:1d:e5:1f:0a:d5:55:bd:2b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Validity
Not Before: May 3 00:46:20 2025 GMT
Not After : May 4 01:53:20 2025 GMT
Subject: CN=25DAB70E21ED3E775BFE01D27CC2AB2A655715DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:05:e5:29:ad:55:8d:e8:09:a6:ab:ed:03:
25:4a:01:11:b9:9a:29:ed:4b:a6:02:3c:76:74:b9:
32:02:b2:ab:28:c6:8a:8b:e2:11:05:58:b4:87:b2:
1f:db:15:ca:1d:99:cd:67:65:26:67:e8:84:77:94:
74:85:94:04:3f:26:f7:dc:5f:ba:61:61:4c:b6:e9:
99:56:39:ab:8d:ca:26:c9:7f:98:3c:a0:5c:82:21:
58:92:78:11:4b:cf:90:94:54:88:9b:6b:e0:1d:1b:
f6:d4:82:24:f2:9d:01:bd:2c:a2:ba:15:17:c1:fb:
cc:bf:bd:94:fb:bb:ed:33:16:9d:8c:02:1b:61:78:
1a:75:8f:ea:4b:a9:36:02:bc:54:15:95:0a:29:27:
e7:94:68:42:db:3c:07:79:c7:6e:ca:7e:c0:c9:e0:
e5:3b:38:cb:83:bd:77:d4:27:35:db:c5:ba:a4:62:
56:23:c7:07:b8:52:ce:eb:db:40:da:98:b5:7f:84:
99:e0:a2:79:1b:be:bf:5b:3e:fc:23:f9:2a:1d:ce:
22:85:92:3a:3e:47:20:5c:c6:a6:0f:18:f4:8d:80:
95:c9:3b:95:1b:36:f4:8b:27:62:06:ab:de:10:21:
bd:05:cf:99:35:1a:c3:97:4f:5f:7d:3d:d3:cd:c7:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DA:B7:0E:21:ED:3E:77:5B:FE:01:D2:7C:C2:AB:2A:65:57:15:DC
X509v3 Authority Key Identifier:
keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:cf:8b:01:30:69:f7:02:dd:73:4b:ed:4f:19:90:77:9a:e6:
c8:b9:e3:0c:d1:90:ee:b2:64:c1:1a:d6:0a:4c:3d:dd:53:a5:
c2:ba:24:7b:9a:d2:49:cf:f5:fb:47:9b:6d:9a:9f:f2:05:a5:
a8:70:97:88:19:b9:95:76:ab:20:81:63:06:bc:7c:84:c1:2b:
96:12:5a:9d:6a:fd:51:5c:7d:32:49:1e:7b:36:46:9f:74:fb:
ba:3c:45:e2:1a:e0:ea:b8:05:0e:4b:d2:55:43:bf:11:16:0e:
e8:23:59:eb:fb:31:fa:b4:fc:8a:47:52:c9:e5:a4:70:1d:66:
8f:1b:11:8b:81:18:9f:1d:59:29:4b:e5:f3:e4:06:e0:b4:8f:
35:a1:74:bc:54:10:28:a7:41:da:0c:86:29:ce:18:9b:d3:ee:
c6:25:8b:4f:25:29:8a:84:f1:1c:21:8b:5f:6a:f8:f1:89:89:
dc:f3:45:30:c7:db:b5:d8:55:2d:ac:55:e3:0e:a8:bf:e2:40:
ca:ef:3b:7e:76:8a:36:b0:60:f0:ff:42:4d:11:07:65:34:c8:
64:06:a8:b3:63:6e:e1:6b:e9:88:b4:87:84:71:fd:ee:06:8c:
bd:ed:2c:68:57:73:62:bb:78:4b:ba:f2:7d:98:96:cd:d1:07:
b8:b9:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:35:12 2025 by rpki-client