Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier: X05jBEiVGFO7j3tLQ0rebxRj+3vDKYpDaMNTnWLQgaE=
Subject key identifier: 4E:0D:BC:71:0F:88:7B:E2:6C:DE:6D:28:C0:7F:9D:2A:CC:D0:84:ED
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial: 43CB69071D6E74E267C0C7099EB444F242C9DEA4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number: 0192
Signing time: Tue 29 Apr 2025 20:46:30 +0000
Manifest this update: Tue 29 Apr 2025 20:41:30 +0000
Manifest next update: Wed 30 Apr 2025 23:46:30 +0000
Files and hashes: 1: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: pcBpSLX6wjD10TMOktRdBOucXd2A5gfG7C3Lecbh8gI=)
2: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: 5jLn1tYtti5DJK9TqNkdMibH5mGLzDQe1BN0OVxqnag=)
3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: hRkxDQUQubYDTg+2XfAnKmyMdvjnU0el2gDOaYe1I6w=)
4: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=)
5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: Bu8eu+s1xKEjCs05/XkV2x0FQLM16iFsGrYGYNvS9M8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cb:69:07:1d:6e:74:e2:67:c0:c7:09:9e:b4:44:f2:42:c9:de:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Validity
Not Before: Apr 29 20:41:30 2025 GMT
Not After : Apr 30 23:46:30 2025 GMT
Subject: CN=4E0DBC710F887BE26CDE6D28C07F9D2ACCD084ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:17:bc:c4:17:96:2a:e5:a1:d7:81:ea:d6:
92:85:07:ef:80:90:80:42:0f:0b:62:ab:98:64:96:
c1:6d:c8:1e:d2:f7:88:28:c9:43:5f:d8:66:a1:54:
c0:af:0a:27:bd:1a:ab:14:be:be:42:db:aa:a9:04:
e9:ba:63:76:36:38:17:c8:53:6b:e3:e9:79:30:e6:
d7:bc:5d:ee:5f:b9:4b:9e:07:fa:27:7f:0c:08:a0:
29:52:bf:e7:53:46:8a:2d:c3:e6:89:ac:59:af:a9:
bc:e5:e9:cf:bf:98:90:7b:32:8a:b9:1c:bd:a2:90:
6e:90:a4:50:5e:37:51:a8:63:be:e5:6f:32:90:78:
20:4f:78:ac:4a:25:8a:13:50:46:a6:ad:f5:8e:23:
d4:c2:cc:ce:d8:5e:87:c3:85:a5:56:14:13:8e:4f:
d4:af:88:3f:0a:ae:99:d7:0b:b3:37:e4:d5:50:a3:
50:bb:40:7a:a1:96:ee:69:75:94:4e:2e:3c:dc:6b:
74:9c:b1:21:6f:5a:ca:9d:c7:dc:43:dd:52:8d:0d:
4d:8e:16:d9:5d:88:21:ac:d2:42:23:45:a9:bd:bf:
d5:35:cc:89:d3:5c:77:0b:2d:71:37:c5:f6:f7:c2:
bf:20:2a:2e:9b:f8:83:ad:b6:c4:06:bd:c5:e0:63:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:BC:71:0F:88:7B:E2:6C:DE:6D:28:C0:7F:9D:2A:CC:D0:84:ED
X509v3 Authority Key Identifier:
keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b5:a0:36:ad:a8:35:87:33:b8:65:27:7e:33:c8:74:4b:f0:
ba:81:b7:bf:ff:25:4d:5e:5c:36:a9:bf:da:eb:b6:f4:91:8a:
28:f6:09:54:40:cb:97:b7:dd:2b:75:55:e1:37:b6:38:ca:d8:
97:a8:31:f8:f7:9b:98:a3:5f:36:6a:9f:a1:b5:4d:12:aa:06:
7b:13:99:dc:7b:71:27:a8:57:9d:e8:18:49:05:94:5a:a2:8f:
a2:b5:f2:5e:af:01:71:76:03:e7:97:03:12:eb:d2:03:23:02:
25:9c:5d:02:67:fd:c3:fe:4d:29:4a:50:4f:2c:45:b1:23:51:
01:19:d9:66:00:4e:f7:ff:52:a0:ea:29:90:07:b8:47:f3:22:
82:70:ca:84:dc:df:1c:96:6c:06:62:83:e0:25:10:e1:ee:c0:
5b:6e:a0:84:b9:27:b9:8c:ce:bb:b1:a4:54:2c:d0:66:79:89:
88:ed:fd:c8:6e:53:61:f3:11:cd:91:bb:75:3d:4e:63:41:e5:
3e:e9:db:e1:c6:c6:14:b6:52:65:72:58:33:75:b5:03:f0:ad:
ec:f2:f8:bc:d0:78:f4:b4:fc:5a:7a:67:a0:fe:b5:d8:38:35:
5a:5b:ac:7e:65:be:b0:55:73:74:5c:f1:58:c6:df:f9:aa:48:
4d:d2:ad:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:41:35 2025 by rpki-client