Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
File: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft (raw, json)
Hash identifier: y9UvPlj/g+PYPFlhMbg21dlgzcl9E3LZBfxxeykCCUA=
Subject key identifier: 41:88:6D:C3:67:3D:F4:31:C2:35:26:7E:3F:67:3F:CF:91:D1:F7:94
Authority key identifier: 2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
Certificate issuer: /CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Certificate serial: 60F3222FD06F0642FA0CF24C6F442493AA083D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
Manifest number: 1E
Signing time: Sat 11 Jan 2025 20:21:19 +0000
Manifest this update: Sat 11 Jan 2025 20:16:19 +0000
Manifest next update: Sun 12 Jan 2025 23:01:19 +0000
Files and hashes: 1: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl (hash: MXNSU4KocG0Ps9K1QA9JJ6dkE3sVGt0GGdyC+UPT4jo=)
2: AS214757.asa (hash: bofgjpfgnGZClk8fivN3ntgMuj4/YJcdhOKAfl7ZNsI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f3:22:2f:d0:6f:06:42:fa:0c:f2:4c:6f:44:24:93:aa:08:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Validity
Not Before: Jan 11 20:16:19 2025 GMT
Not After : Jan 12 23:01:19 2025 GMT
Subject: CN=41886DC3673DF431C235267E3F673FCF91D1F794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:0c:8f:06:5b:3d:7b:26:0b:c5:ad:f2:28:
49:94:8e:bf:0c:ab:00:15:35:0d:37:ab:65:c5:e8:
0f:ce:1e:f5:0a:1f:e4:77:8a:f3:47:b4:5f:54:76:
40:86:73:49:9c:44:5b:2d:22:7e:5d:9c:e0:cd:80:
e8:b4:be:3a:b3:97:d4:07:b1:c3:87:08:54:c4:de:
bd:b6:c3:63:4b:22:90:23:66:1e:96:62:d7:a3:82:
11:9f:05:fc:06:d6:07:6e:f9:b1:8c:cd:dc:1e:ad:
e8:ca:8f:8f:f6:50:42:dc:6a:28:81:5e:15:95:dd:
e1:af:dd:ec:7c:24:b2:58:5a:12:fc:6e:55:ad:d4:
8e:1d:5a:d9:7d:25:29:38:02:ec:d7:5c:26:3c:68:
8e:85:d6:2c:22:63:05:e5:7e:dd:c9:13:c6:9f:b8:
ea:3c:2e:16:d3:f1:07:09:bd:d2:79:80:9f:d2:c7:
da:8e:ed:98:7b:32:ff:88:a4:f0:52:fa:5b:54:48:
5c:a1:b9:a2:a6:4f:03:f9:d9:bc:11:85:1d:aa:19:
e1:96:aa:c3:39:a2:1a:d6:ab:65:19:16:0b:eb:32:
d9:e3:19:02:5b:93:fe:f0:cf:d4:d7:d3:73:47:24:
65:31:44:22:39:a6:9b:d7:d2:7f:be:f7:d5:3b:e1:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:88:6D:C3:67:3D:F4:31:C2:35:26:7E:3F:67:3F:CF:91:D1:F7:94
X509v3 Authority Key Identifier:
keyid:2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8b:f2:14:ac:11:4c:cc:0d:ae:68:fe:05:af:b5:2f:e8:b1:
55:db:8e:d5:1c:e5:ee:3f:72:38:2a:16:d3:f9:da:14:77:62:
a4:55:b3:b9:45:d6:4b:a9:0f:97:78:a3:aa:8d:dd:ce:14:f9:
d1:bf:ca:d9:b7:40:1c:9a:55:84:b3:e6:e7:12:8c:7a:e7:4d:
24:c4:a4:d3:3d:ba:78:5c:41:2e:a6:1d:53:b7:c9:05:fb:55:
4b:37:d3:9f:e2:66:51:0c:6a:01:12:bc:06:00:d4:b0:c0:fc:
a6:71:45:38:09:82:25:00:3e:06:aa:db:6f:49:f8:4d:d2:fc:
c3:94:77:d8:74:87:a8:1d:65:e3:cf:b7:4c:4d:45:ca:e3:e2:
1e:72:49:e2:de:32:18:f2:51:1f:e8:c0:5c:e0:2c:9a:a1:ee:
d2:36:3b:50:a0:16:9b:9b:1a:64:7e:4e:a6:e8:e7:5d:4e:0b:
83:39:26:e0:39:fc:45:4e:b4:ac:9a:c4:e8:13:61:a5:8a:df:
bc:c2:68:c6:04:6d:05:e8:0e:0a:1b:02:e1:1e:6c:d6:b5:25:
86:e4:6e:b1:0e:e6:93:7d:b8:2d:75:88:c5:aa:00:f2:43:da:
83:ce:5c:8a:7d:8a:d2:bf:ba:c8:2a:0a:dd:9b:63:ae:da:a5:
eb:30:25:65
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYPMiL9BvBkL6DPJMb0Qkk6oIPY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmNhYmEwMjEyNzkyNWQ5OTg4NzEwZWVlNWEwYTU5YjAw
NGM2YjZiMTAeFw0yNTAxMTEyMDE2MTlaFw0yNTAxMTIyMzAxMTlaMDMxMTAvBgNV
BAMTKDQxODg2REMzNjczREY0MzFDMjM1MjY3RTNGNjczRkNGOTFEMUY3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOwyPBls9eyYLxa3yKEmUjr8M
qwAVNQ03q2XF6A/OHvUKH+R3ivNHtF9UdkCGc0mcRFstIn5dnODNgOi0vjqzl9QH
scOHCFTE3r22w2NLIpAjZh6WYtejghGfBfwG1gdu+bGMzdwerejKj4/2UELcaiiB
XhWV3eGv3ex8JLJYWhL8blWt1I4dWtl9JSk4AuzXXCY8aI6F1iwiYwXlft3JE8af
uOo8LhbT8QcJvdJ5gJ/Sx9qO7Zh7Mv+IpPBS+ltUSFyhuaKmTwP52bwRhR2qGeGW
qsM5ohrWq2UZFgvrMtnjGQJbk/7wz9TX03NHJGUxRCI5ppvX0n++99U74ZHHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQYhtw2c99DHCNSZ+P2c/z5HR95QwHwYDVR0j
BBgwFoAULKugISeSXZmIcQ7uWgpZsATGtrEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDJjNzJiN2MtZjU1YS00OTkwLWFjOGEtNjMzZWUxZjhl
OGUxLzAvMkNBQkEwMjEyNzkyNUQ5OTg4NzEwRUVFNUEwQTU5QjAwNEM2QjZCMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xLdWdJU2VTWFptSWNRN3VXZ3Bac0FU
R3RyRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMmM3MmI3Yy1m
NTVhLTQ5OTAtYWM4YS02MzNlZTFmOGU4ZTEvMC8yQ0FCQTAyMTI3OTI1RDk5ODg3
MTBFRUU1QTBBNTlCMDA0QzZCNkIxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEovyFKwRTMwNrmj+Ba+1
L+ixVduO1Rzl7j9yOCoW0/naFHdipFWzuUXWS6kPl3ijqo3dzhT50b/K2bdAHJpV
hLPm5xKMeudNJMSk0z26eFxBLqYdU7fJBftVSzfTn+JmUQxqARK8BgDUsMD8pnFF
OAmCJQA+Bqrbb0n4TdL8w5R32HSHqB1l48+3TE1FyuPiHnJJ4t4yGPJRH+jAXOAs
mqHu0jY7UKAWm5saZH5OpujnXU4Lgzkm4Dn8RU60rJrE6BNhpYrfvMJoxgRtBegO
ChsC4R5s1rUlhuRusQ7mk324LXWIxaoA8kPag85cin2K0r+6yCoK3Ztjrtql6zAl
ZQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:41 2025 by rpki-client