
Manifest
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json)
Hash identifier: nGzw3ZE+qSMAmvGWitRkXUP5PC01brXYigiXt5SiFcg=
Subject key identifier: 6B:C4:F9:71:7B:D4:6E:69:5C:9D:3C:84:A3:BD:BC:7B:06:30:AD:E5
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial: 0A0CCCF236A3F1F3D137CF841A88DEC7721C8348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
Manifest number: 01F3
Signing time: Tue 03 Jun 2025 08:35:00 +0000
Manifest this update: Tue 03 Jun 2025 08:30:00 +0000
Manifest next update: Wed 04 Jun 2025 11:01:00 +0000
Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: 6F2iIglBe6Ove9s1p171E93nrzXL+wOMW8/kXPymkPQ=)
2: AS51396.asa (hash: LPntScnqKTV0B/ca4ayh0Ad7plN1tSxen2CVMDLBZ+E=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0c:cc:f2:36:a3:f1:f3:d1:37:cf:84:1a:88:de:c7:72:1c:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Validity
Not Before: Jun 3 08:30:00 2025 GMT
Not After : Jun 4 11:01:00 2025 GMT
Subject: CN=6BC4F9717BD46E695C9D3C84A3BDBC7B0630ADE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:5f:19:42:e2:38:8c:0d:7f:91:41:63:cf:
20:16:00:14:b1:13:d0:e1:24:0e:93:27:7d:f9:f5:
36:f7:0a:90:95:45:5b:9b:af:9d:e3:67:45:ef:cf:
99:cb:f9:92:b0:e8:8e:0d:bf:f4:76:a1:cd:dd:33:
90:2d:b3:ef:d1:c6:7f:0b:62:1e:16:fc:07:89:08:
37:a0:df:e8:0d:41:dc:43:d9:72:7c:64:ea:8a:25:
e2:4a:1f:91:85:8c:5b:33:59:0d:9f:df:b8:21:a8:
2e:5f:8a:4c:8a:bb:56:47:82:44:26:fa:82:c6:8c:
76:02:e9:69:7d:40:65:d3:3e:fc:fb:1c:5f:88:61:
71:d6:e3:51:19:2e:b5:ef:8b:c8:ed:73:cc:43:d8:
4c:5d:23:08:cc:94:b6:77:68:47:71:bd:81:33:00:
43:36:ef:a2:e6:9a:ec:25:af:83:96:41:66:2d:1b:
c6:73:3b:28:e5:d2:30:b6:ea:e6:ef:a5:ea:ae:28:
87:d7:fa:94:aa:12:88:70:cd:5c:e7:9f:83:7f:e9:
e6:70:e9:60:54:3f:3e:49:6e:95:b4:a7:e8:20:89:
b9:84:0f:b5:17:b2:1d:c7:91:bf:c2:64:dc:ef:96:
0e:11:5f:a5:25:f4:f5:47:30:63:0b:2d:e5:0b:a1:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:F9:71:7B:D4:6E:69:5C:9D:3C:84:A3:BD:BC:7B:06:30:AD:E5
X509v3 Authority Key Identifier:
keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:f8:87:af:c1:b4:b1:2f:43:78:fd:80:4e:a9:ac:a0:37:
c3:ad:b9:8e:07:3c:6e:d3:8a:ba:12:0f:6c:3c:cc:f4:99:8b:
de:cb:22:a4:7d:70:ad:65:42:11:9e:44:a9:4a:85:45:7f:5d:
e6:9d:a1:3f:91:09:67:9c:34:c6:0f:8e:f4:ed:2a:1f:b8:1c:
9b:80:52:4a:95:a4:22:2b:11:5b:22:92:fa:3e:73:7f:be:80:
d4:e9:c1:47:f2:b2:9c:55:cd:a9:51:0f:3d:2a:e3:a0:34:9d:
ce:99:75:9a:5b:e2:23:80:ba:01:2f:6a:7d:3d:6d:e9:1b:c4:
44:79:6c:2a:94:63:9e:8a:1f:e6:bb:57:df:87:07:4c:b3:b1:
0d:03:5f:47:2b:7e:95:9f:9a:5d:72:f5:92:76:42:34:85:87:
8b:1e:36:08:1a:1a:5c:de:00:aa:24:a6:53:19:e7:b5:4d:03:
64:18:e4:da:77:12:21:04:30:b6:c0:b4:f2:9f:52:de:a1:33:
83:1f:ed:1e:6c:4e:65:9b:69:8a:35:a5:bf:4d:c3:34:c7:7e:
07:d5:77:2c:e9:87:48:8f:19:34:00:ac:53:9a:39:1f:d8:66:
fe:d0:34:fa:cd:c8:5e:e2:13:6c:40:83:96:1c:c7:23:5c:0d:
62:f5:fe:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:36 2025 by rpki-client