Manifest
$ rpki-client -vvf rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
File: C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft (raw, json)
Hash identifier: lNF0Qr8m7ctJR78gF42SQv9w6bi2Q5j/sG4U6XFiCmA=
Subject key identifier: D2:6C:BA:C1:8C:96:B5:14:0B:E7:15:16:B5:A0:60:8C:F7:BE:DA:64
Authority key identifier: C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46
Certificate issuer: /CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
Certificate serial: 4237BC6477454C81F643929033E5E19022FAF87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer
Subject info access: rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
Manifest number: 1E
Signing time: Wed 23 Jul 2025 10:31:16 +0000
Manifest this update: Wed 23 Jul 2025 10:26:16 +0000
Manifest next update: Thu 24 Jul 2025 13:09:16 +0000
Files and hashes: 1: C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl (hash: gMbM44o8wh0NeQMl++PxRux7/49Z7srMrYHmXozI2Bs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:37:bc:64:77:45:4c:81:f6:43:92:90:33:e5:e1:90:22:fa:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
Validity
Not Before: Jul 23 10:26:16 2025 GMT
Not After : Jul 24 13:09:16 2025 GMT
Subject: CN=D26CBAC18C96B5140BE71516B5A0608CF7BEDA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:df:eb:17:a5:ff:c8:dd:43:e3:1d:bf:fc:
6d:86:fe:70:e0:fe:c1:ca:e8:a8:66:03:1c:b8:87:
14:65:16:ea:dc:1b:3d:4c:5b:d6:6c:2c:a2:c2:6b:
39:ea:96:c0:7c:49:b2:a7:3b:4b:be:03:d7:82:10:
03:c1:d8:2a:6f:0a:95:4b:65:a6:27:b0:bd:17:32:
51:d2:02:c0:74:d4:20:3f:c2:3a:89:2a:ea:75:8f:
cd:0f:bf:ce:05:82:4a:8b:c7:64:7d:32:c6:a9:ce:
4f:52:fa:d6:ca:1e:46:d4:53:00:24:3a:5f:c6:80:
68:59:af:90:cf:a9:96:70:05:3b:42:58:9c:68:96:
10:f1:0a:63:ae:7f:5e:3c:45:16:bb:89:a9:70:79:
6c:8a:2a:b6:98:27:85:55:60:94:9b:24:11:0a:06:
e6:68:3e:19:2b:5d:7a:8a:cb:e2:6a:3a:5f:0f:83:
03:a1:23:a4:f9:1b:73:4c:21:79:1b:59:42:3a:e0:
7b:91:1b:be:d0:e1:bf:e9:14:21:d5:43:0c:e3:2d:
63:98:86:9c:c9:45:8d:47:8f:2c:48:40:0f:86:48:
a0:6e:72:ee:a6:e2:69:02:dc:e2:25:53:ab:ee:a4:
11:03:97:97:9a:59:4c:14:ee:b9:4e:0c:00:d6:4e:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:BA:C1:8C:96:B5:14:0B:E7:15:16:B5:A0:60:8C:F7:BE:DA:64
X509v3 Authority Key Identifier:
keyid:C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ef:04:f6:52:5d:b1:f2:8a:f3:fb:bb:d8:39:ad:59:4d:08:
aa:96:24:19:a6:47:43:9e:44:38:01:5c:ba:96:5a:c9:6b:4a:
48:17:62:35:6a:15:62:41:5f:a0:06:ac:b5:fc:9c:20:83:bc:
1a:51:05:62:56:09:91:d4:95:1c:ac:a0:fb:09:c9:9b:4d:a0:
56:49:87:53:9c:c3:b4:bf:b8:bd:43:db:8a:12:9b:65:a9:4b:
ef:d7:1f:96:1b:ab:c1:69:4f:1f:06:d7:d0:16:58:2e:40:52:
6b:3d:f4:2f:06:7a:ec:3b:ab:17:df:c0:e5:c1:b1:b1:8f:47:
39:16:04:b7:c1:63:a1:76:f7:99:3d:b2:09:3c:c4:ff:4f:0f:
1f:23:c9:92:8a:c0:90:da:da:55:94:02:f3:05:ca:f4:83:01:
f4:02:eb:fd:43:b9:21:72:36:6c:34:3c:82:0a:ba:6c:b5:71:
0b:d1:88:1f:76:dc:b0:eb:a8:96:7d:43:39:1a:54:b8:e8:33:
f3:5e:16:5a:d4:d1:00:58:d3:78:58:73:a0:c9:1b:b8:30:9f:
da:c7:c1:31:cf:31:e7:e2:e9:72:43:ea:1f:1b:41:83:cd:85:
1f:ba:ee:87:d1:4f:f2:30:38:a3:c1:4c:42:d1:44:46:fa:05:
78:29:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:03:52 2025 by rpki-client