Manifest
$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
File: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft (raw, json)
Hash identifier: f1mPYOiY2YTfAPuuDr9JC9Gg4X96ZjE/jS0KBjSsA8Y=
Subject key identifier: AD:7B:81:15:4F:24:95:B1:68:D5:F5:E7:29:20:F6:C9:27:52:21:5D
Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Certificate serial: 46494ECEE5B45D34060EB01FF66015D3F005D41A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
Manifest number: 33
Signing time: Mon 20 Oct 2025 17:06:55 +0000
Manifest this update: Mon 20 Oct 2025 17:01:55 +0000
Manifest next update: Wed 22 Oct 2025 08:27:55 +0000
Files and hashes: 1: 326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (hash: cZs+7mqWYVEZ9ra2hDwyBP0f5EQYySDokYBR3RB7WbU=)
2: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl (hash: nZbgmRmEqyzaU+y9cAWXVJfzF3V+4XxJiF+0Oa66cJI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:49:4e:ce:e5:b4:5d:34:06:0e:b0:1f:f6:60:15:d3:f0:05:d4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Validity
Not Before: Oct 20 17:01:55 2025 GMT
Not After : Oct 22 08:27:55 2025 GMT
Subject: CN=AD7B81154F2495B168D5F5E72920F6C92752215D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:6f:4f:23:b7:f1:99:19:af:1d:62:d2:82:
f8:a9:dc:7e:6f:9e:a8:84:97:0e:af:82:fd:d5:77:
e7:c2:9b:af:59:46:47:51:dd:e7:db:c4:b3:e0:f9:
13:e6:3d:6c:97:ee:18:cf:73:9a:2a:6b:c8:6b:6a:
48:ba:e8:bc:d3:ed:8f:13:16:21:0a:c3:a5:64:20:
c3:fd:03:15:8d:52:2b:2b:5d:68:87:6e:86:87:e8:
0f:1b:1f:a5:97:a6:80:7e:74:6c:c8:b9:00:ad:9f:
2f:29:88:70:16:e5:10:41:04:55:e7:f3:b6:64:a7:
d5:91:3b:52:cb:06:64:67:b7:c2:7b:40:1d:54:07:
ee:5f:2e:02:0c:14:91:5f:06:ba:76:ab:5e:7e:da:
39:29:7f:4a:d2:53:b7:81:c0:4d:1f:db:d3:57:00:
80:99:a9:af:eb:c2:b1:cb:3d:23:49:ad:70:66:d7:
17:3a:38:39:dd:ac:a1:b3:ee:cb:40:d4:0b:f0:64:
cb:48:57:e5:12:71:13:54:af:82:09:41:d9:96:ab:
76:cc:73:2e:21:8b:e9:44:61:0d:89:9b:64:d0:b8:
61:f5:80:3b:3b:01:1d:5a:07:d6:f0:26:0f:bc:6b:
0f:6d:1d:e4:46:92:4d:9b:a2:64:45:d9:a0:a6:2b:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7B:81:15:4F:24:95:B1:68:D5:F5:E7:29:20:F6:C9:27:52:21:5D
X509v3 Authority Key Identifier:
keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject Information Access:
Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:22:82:14:99:0e:bf:20:ed:48:3e:3f:7e:ef:b8:e0:0d:f2:
4b:ce:48:f4:17:ff:33:6d:47:6e:4c:8a:33:9c:fb:b9:a6:70:
04:46:fa:18:4e:3e:93:f2:02:a5:6f:7b:f0:c7:98:13:5d:a1:
a3:56:4f:73:fb:e5:fd:3c:c6:5b:6e:6c:6c:24:d2:84:10:58:
9d:03:4e:10:5c:9f:ba:44:91:ea:0e:56:5d:99:cf:63:c2:b4:
e1:d4:bc:ef:f5:d5:fb:1d:81:1c:32:9e:30:77:ba:9a:85:75:
d6:8b:20:43:80:16:7e:33:72:1f:e8:8f:3a:ab:ce:d9:da:f1:
fb:8c:0b:8b:87:41:94:bf:e6:cb:8d:56:4f:db:88:5e:c2:95:
bc:89:e4:73:4e:11:27:7b:e8:7d:3a:10:04:9e:d6:c2:b2:0b:
d0:f8:e4:fb:bb:1d:9a:7b:03:12:e1:b3:45:98:63:65:00:f6:
8a:e3:81:b2:ad:7e:b6:d1:93:4c:77:b6:93:c2:1b:6b:c9:02:
03:db:21:1b:6a:b3:6d:d8:d0:06:12:f6:0e:f1:a8:31:d4:6f:
3b:c6:6a:f5:60:d2:02:31:13:45:78:31:0c:a2:18:fc:9d:26:
33:96:93:ab:42:a0:f5:14:4b:c6:df:42:2e:7e:8b:63:f1:58:
2e:a0:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 04:26:58 2025 by rpki-client