Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
File: 42CC538CA37931CF39A85418E983E932F716DF8A.mft (raw, json)
Hash identifier: wksDIh8wDF9nQa3eo+r9i3yH6Rci945eHq6S6b6eEjg=
Subject key identifier: 88:1A:16:F2:11:92:7C:E0:35:A2:DC:A9:7C:9F:C1:C4:64:CC:7F:ED
Authority key identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A
Certificate issuer: /CN=42CC538CA37931CF39A85418E983E932F716DF8A
Certificate serial: 66BC713FF159866ADC1A2775CE3E114F616EF7C3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
Manifest number: 01F4
Signing time: Sat 01 Feb 2025 09:59:21 +0000
Manifest this update: Sat 01 Feb 2025 09:54:21 +0000
Manifest next update: Sun 02 Feb 2025 12:23:21 +0000
Files and hashes: 1: 42CC538CA37931CF39A85418E983E932F716DF8A.crl (hash: iNjvJ1nCaaBjTR6gfLGmn+UhLRhTJWy2ohuU8t2Psow=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bc:71:3f:f1:59:86:6a:dc:1a:27:75:ce:3e:11:4f:61:6e:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CC538CA37931CF39A85418E983E932F716DF8A
Validity
Not Before: Feb 1 09:54:21 2025 GMT
Not After : Feb 2 12:23:21 2025 GMT
Subject: CN=881A16F211927CE035A2DCA97C9FC1C464CC7FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:7c:10:1d:33:fa:3d:4f:0d:9d:41:34:72:
e4:9b:f2:01:ac:a1:a2:1f:5a:bb:47:0a:a3:c9:db:
60:8c:fb:90:52:07:5e:79:01:99:f5:88:3e:20:1c:
a6:ce:88:85:38:f8:74:3c:fb:88:21:67:47:9d:fd:
81:e0:36:a3:bb:e2:f5:cc:05:64:cc:25:11:59:17:
7b:42:2e:0e:71:69:68:af:0a:89:27:23:38:85:07:
26:5e:0b:62:df:2e:21:d3:8a:c5:c1:c4:86:32:02:
65:87:95:cf:a9:91:64:09:6d:e8:33:67:7b:72:df:
85:9e:96:91:52:d9:89:b8:97:44:2f:a8:ca:9f:d2:
08:57:7b:cd:b2:d9:1d:ad:a1:12:ba:de:4f:34:a9:
7b:60:12:42:03:e6:cd:fc:dd:65:4a:62:95:3b:ce:
80:eb:32:a4:f1:ad:77:22:6f:07:a3:17:75:f1:21:
36:d2:ab:4d:af:d4:e1:36:d3:d9:56:9d:11:d1:25:
5a:56:eb:0d:e1:05:c7:68:3b:ed:e6:4a:f9:0e:08:
14:81:d2:e0:87:e1:24:27:f9:47:4c:30:7b:62:41:
83:55:e7:49:9a:e7:d3:c9:e1:a2:01:59:c2:4d:dd:
54:89:fe:34:4b:d8:dd:ef:28:ac:9e:1f:b1:09:9d:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:16:F2:11:92:7C:E0:35:A2:DC:A9:7C:9F:C1:C4:64:CC:7F:ED
X509v3 Authority Key Identifier:
keyid:42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:80:67:0e:fd:16:04:61:97:86:22:7b:42:f0:bc:b7:a3:e5:
49:67:ba:0c:01:b9:9d:51:2e:26:98:66:2e:94:c6:8e:a7:77:
d2:f2:e3:5a:7b:2d:7f:29:f3:2b:62:59:e0:3c:d2:c8:e0:52:
93:46:9b:45:d0:13:84:19:68:6f:cd:0e:b5:d0:18:f8:34:91:
ed:2b:03:45:87:8b:11:7d:7a:de:71:5b:f0:45:43:0b:90:2c:
5b:1c:c6:77:10:0c:19:82:60:df:2a:44:a6:2e:59:eb:e5:21:
b3:7a:34:55:e9:28:75:5b:40:3f:56:ff:29:65:35:cb:a1:81:
3e:0b:9f:98:ef:f4:9e:b1:89:f5:b7:b0:37:14:a6:4f:5f:23:
01:79:af:8d:a0:70:2b:94:ef:dc:76:fd:f9:9c:bf:a2:94:4c:
47:a2:66:bf:19:ea:e3:c5:d2:63:1d:6a:6b:c1:d9:b0:2e:f4:
b1:6b:14:7b:75:a6:88:09:50:6e:c9:7d:b2:25:7f:b7:fd:a0:
bc:db:76:20:45:93:6b:e8:76:f6:3e:5a:e3:51:3c:d8:96:cc:
b9:6b:3a:72:1e:4d:6f:79:31:43:40:18:ae:31:31:69:99:0c:
c0:cc:74:ca:ce:df:88:f9:60:2e:70:7b:a3:31:58:f1:87:f7:
c1:11:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:51 2025 by rpki-client