Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft
File: 9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft (raw, json)
Hash identifier: tocKpQMpV8XiJn7vd0/EhR9D/Prl0SqJJpASJ9MusOY=
Subject key identifier: 27:65:77:55:4A:A9:13:41:28:D2:18:C8:66:D8:F6:11:A6:58:C1:CC
Authority key identifier: 9A:AD:F7:1F:F5:1D:95:2A:77:F5:64:D5:BA:37:3A:7D:55:BC:9C:0A
Certificate issuer: /CN=9AADF71FF51D952A77F564D5BA373A7D55BC9C0A
Certificate serial: 0CF91034EA9216EE59FCC2CC7D4FAC80FB484C51
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft
Manifest number: B1
Signing time: Wed 13 Nov 2024 08:31:25 +0000
Manifest this update: Wed 13 Nov 2024 08:26:25 +0000
Manifest next update: Thu 14 Nov 2024 11:39:25 +0000
Files and hashes: 1: 9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.crl (hash: kTzahAA8QzqTp7Pr8qC3HU5pQ+qfVLAnH1NyRda1nbw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f9:10:34:ea:92:16:ee:59:fc:c2:cc:7d:4f:ac:80:fb:48:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AADF71FF51D952A77F564D5BA373A7D55BC9C0A
Validity
Not Before: Nov 13 08:26:25 2024 GMT
Not After : Nov 14 11:39:25 2024 GMT
Subject: CN=276577554AA9134128D218C866D8F611A658C1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:74:2e:ca:41:ee:4a:1f:d4:6d:cc:43:8e:
ba:0b:7b:fc:60:53:15:d8:41:9d:ed:c8:d5:f8:0a:
1d:60:d5:67:4d:a3:f0:ee:97:4f:b2:0d:ae:8f:e4:
4a:77:45:d0:c9:9b:8d:f1:51:7c:10:f5:a9:54:82:
a0:33:53:ff:83:83:ab:ef:73:fb:e8:38:4c:92:8f:
59:76:af:6e:e6:6a:30:02:83:d3:97:0f:5b:0f:ef:
c5:a9:e5:79:ed:c6:cc:14:8b:d1:5e:d0:93:b4:ab:
bb:c5:69:4b:71:58:e7:c3:89:72:4e:21:da:8c:b0:
03:1d:d0:a3:73:70:6c:9d:49:cb:8e:30:c4:5b:11:
a0:95:6a:15:98:72:18:bb:56:fc:83:de:6d:0b:27:
a2:06:4b:d8:8b:2b:33:41:7a:34:c5:ac:42:f3:0b:
e3:f6:71:ac:36:79:07:83:27:21:6f:80:42:7a:42:
03:70:c3:94:e1:0e:f9:cc:ff:90:b2:0d:6c:91:2b:
3b:fc:51:08:6d:25:cd:74:0e:64:b5:fd:57:dd:0d:
6e:7c:a3:c7:ae:da:28:e8:fe:ea:67:99:c3:52:5c:
d5:de:b1:3f:10:36:3c:1c:3f:61:53:ec:bd:f8:8c:
13:6f:78:c1:e5:3d:7f:cd:b2:72:96:43:cd:ac:9f:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:77:55:4A:A9:13:41:28:D2:18:C8:66:D8:F6:11:A6:58:C1:CC
X509v3 Authority Key Identifier:
keyid:9A:AD:F7:1F:F5:1D:95:2A:77:F5:64:D5:BA:37:3A:7D:55:BC:9C:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:48:ac:e4:ea:a3:f8:66:67:47:d0:5e:5b:2e:1b:92:76:9d:
56:24:14:a6:ad:bd:97:d3:d7:2d:63:54:98:20:d7:73:a1:79:
bd:f5:63:82:b1:4e:d0:24:26:ec:8f:b0:af:fb:f5:ad:6d:52:
58:0b:c6:06:53:6f:ab:65:9f:19:40:12:95:d0:0f:9d:96:e1:
b4:cf:05:f5:be:b4:84:03:18:89:6f:a9:13:47:72:2f:4d:7a:
6b:e0:fe:1a:c8:af:34:71:37:ab:75:de:c0:75:70:7e:6d:16:
83:cc:e2:38:d9:db:22:41:dd:3f:1c:4d:33:e4:5b:cd:cf:79:
9f:9c:ee:4b:c4:73:c2:a7:19:40:67:03:75:8e:47:1f:6d:c1:
13:20:ee:6a:d1:dc:3e:0d:a9:92:a9:fd:65:f2:88:d0:67:0a:
06:6d:83:58:96:4d:43:71:fb:b4:f2:4a:48:85:d2:d8:f0:ad:
2b:34:f7:4a:db:c6:80:ba:16:f7:7e:06:a4:a4:b3:59:f1:36:
6a:89:ca:34:5c:b9:c9:87:f7:9d:19:fa:94:f6:b7:b8:f8:59:
44:d7:f9:8d:8f:32:cd:43:a6:61:a0:d3:91:d0:9e:83:7e:f9:
32:81:26:c8:f7:f7:81:80:2b:a2:a2:35:64:dc:5a:fc:f3:86:
e2:1a:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:46 2025 by rpki-client