Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
File: F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft (raw, json)
Hash identifier: L8E5Tms9ZHGjU2/73xUyH0xMPieMdx3hR8xNftoeMBw=
Subject key identifier: 5C:7D:0C:6A:45:38:59:86:83:DF:52:07:43:0C:EB:D4:A1:28:09:48
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 5FA3F95EE03988586E3D920D5B16FF221A05F1FD
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
Manifest number: 04DA
Signing time: Thu 06 Feb 2025 02:39:32 +0000
Manifest this update: Thu 06 Feb 2025 02:34:32 +0000
Manifest next update: Fri 07 Feb 2025 04:24:32 +0000
Files and hashes: 1: 326130353a646663313a393161663a3a2f34382d3438203d3e20323033363836.roa (hash: YQo0TjcPu+Em3BVoDjLJhW1AEQJ1FP5qfZ9t5gA0Dqs=)
2: 326130353a646663313a393138633a3a2f34382d3438203d3e20323135323830.roa (hash: SR7XrQx3p3SosQYaDLORUu1Ba3qDV69RZH6Q+bd7ckQ=)
3: 326130353a646663313a393161303a3a2f34382d3438203d3e20323030323436.roa (hash: Fqfb2rBJMD6Q69G0R/3ria7ckhlk5qxOnkkuYg56aXo=)
4: F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl (hash: o0P8y3vYVV2wzYMmXYaYxxaDuOvAfQfD7sUDr9C+IRU=)
5: 326130353a646663313a393137303a3a2f34382d3438203d3e203531323534.roa (hash: 0EAZ2NFbwuGWl6CNH5AGsOtZjzsc6LwCa4kExjYyEJo=)
6: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer (hash: JrP9Yj9+GylzB9vk0aiJi9Dd+braOBZrvEH4EsNnbUc=)
7: 326130353a646663313a393137343a3a2f34382d3438203d3e203537343833.roa (hash: v9dmjrzFnV5b2A6xdAui+Q4gF3ELLt9FJDdHXMck0Pw=)
8: 326130353a646663313a393139343a3a2f34382d3438203d3e20323135333836.roa (hash: awyK23REAgC5OF3FSXK6T6lPv/Y9OPv1M2gCMFucc/g=)
9: 326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa (hash: KNGSB+cQzjns5f9eTaOdtd1wrmRLgRW49MUBloto0aU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a3:f9:5e:e0:39:88:58:6e:3d:92:0d:5b:16:ff:22:1a:05:f1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Feb 6 02:34:32 2025 GMT
Not After : Feb 7 04:24:32 2025 GMT
Subject: CN=5C7D0C6A4538598683DF5207430CEBD4A1280948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:c2:9f:d3:2a:03:ad:5a:7f:4a:79:a3:6f:
2a:f4:d2:be:54:38:87:49:b8:87:4a:97:95:fb:a9:
88:97:45:86:be:96:b6:cc:62:ee:9e:df:44:56:d2:
7b:25:5e:4f:45:d7:5a:73:08:a6:75:c5:2a:f0:84:
33:1d:a4:cb:b8:78:b3:65:fe:a9:c1:70:0a:5d:93:
af:81:b6:77:39:24:1d:6b:f1:6f:d9:67:dc:3c:c8:
d6:e8:c3:81:a1:b6:3e:60:cf:1e:04:bd:7e:04:f9:
01:21:67:ce:fd:ba:42:08:50:f2:7f:e8:c3:de:c3:
d1:5f:fd:97:a2:27:74:07:86:65:52:06:e5:73:93:
ca:f0:2c:8a:7e:04:4d:25:0c:57:31:14:43:72:ee:
30:a0:05:ac:e7:e0:8e:ae:2e:c9:c6:d1:1f:1b:15:
9e:4f:19:cd:f9:df:93:0f:38:79:57:12:bb:85:84:
a1:7f:a2:07:07:36:bf:20:d4:1c:ab:95:c8:22:41:
95:90:95:e4:75:dc:e2:11:1b:b5:0c:38:02:67:f5:
30:69:2d:43:d2:e3:ca:43:a2:54:03:da:0a:4c:26:
61:d5:55:96:52:5e:b2:4d:91:8b:4c:c4:58:61:d1:
04:25:66:ae:e2:29:da:52:bf:56:06:f0:ca:aa:cc:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:0C:6A:45:38:59:86:83:DF:52:07:43:0C:EB:D4:A1:28:09:48
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:22:19:3c:89:ad:24:31:55:45:bd:ab:b4:ac:f4:5b:27:
9d:9b:02:66:8d:36:c0:de:26:6f:67:5a:0e:27:bd:1d:a2:03:
d0:a3:5d:27:0e:6c:3d:b9:a2:c5:1d:c3:99:92:e1:74:ed:29:
a4:86:2a:c8:39:cd:d2:1c:eb:64:14:58:d9:49:2f:5e:58:38:
45:40:be:66:6f:cd:ee:05:b1:06:a9:74:fe:72:04:66:74:75:
c2:fc:6a:ce:12:3a:ed:8b:e7:e1:fa:a1:39:cf:41:0c:9c:6b:
9d:fd:27:7f:36:97:df:f9:2d:a8:8e:d3:ed:08:fa:89:34:ff:
e8:09:8b:ba:b4:fd:8e:92:97:74:ca:62:a8:5c:a2:b3:2f:17:
6c:0f:9c:f8:18:dc:89:fe:be:48:0f:ea:d1:d4:4f:f5:ee:05:
17:05:27:ba:68:d6:9b:d6:07:c0:d2:a9:72:11:61:cd:b5:27:
a3:31:6d:d5:09:4f:b2:8e:0b:c3:43:dd:85:6c:0e:af:78:36:
25:23:b5:21:03:9c:9d:82:5d:8b:08:9a:c1:5b:2d:ba:56:00:
3b:2e:ff:d1:a0:09:fe:32:68:85:50:15:c5:79:84:d4:24:0b:
06:ba:8f:9d:3f:70:6f:1d:53:57:50:0d:10:1d:ef:63:51:0f:
d9:c5:71:30
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUX6P5XuA5iFhuPZINWxb/IhoF8f0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF
MDVFN0I3NjAeFw0yNTAyMDYwMjM0MzJaFw0yNTAyMDcwNDI0MzJaMDMxMTAvBgNV
BAMTKDVDN0QwQzZBNDUzODU5ODY4M0RGNTIwNzQzMENFQkQ0QTEyODA5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwsKf0yoDrVp/Snmjbyr00r5U
OIdJuIdKl5X7qYiXRYa+lrbMYu6e30RW0nslXk9F11pzCKZ1xSrwhDMdpMu4eLNl
/qnBcApdk6+Btnc5JB1r8W/ZZ9w8yNbow4Ghtj5gzx4EvX4E+QEhZ879ukIIUPJ/
6MPew9Ff/ZeiJ3QHhmVSBuVzk8rwLIp+BE0lDFcxFENy7jCgBazn4I6uLsnG0R8b
FZ5PGc3535MPOHlXEruFhKF/ogcHNr8g1ByrlcgiQZWQleR13OIRG7UMOAJn9TBp
LUPS48pDolQD2gpMJmHVVZZSXrJNkYtMxFhh0QQlZq7iKdpSv1YG8MqqzMm/AgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUXH0MakU4WYaD31IHQwzr1KEoCUgwHwYDVR0j
BBgwFoAU9zfYG/vv/e7J7DK3uGQRLeBee3YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y3MzdEODFCRkJFRkZE
RUVDOUVDMzJCN0I4NjQxMTJERTA1RTdCNzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1Yzdk
LzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABuZIhk8ia0kMVVFvau0rPRbJ52bAmaNNsDeJm9nWg4nvR2iA9CjXScO
bD25osUdw5mS4XTtKaSGKsg5zdIc62QUWNlJL15YOEVAvmZvze4FsQapdP5yBGZ0
dcL8as4SOu2L5+H6oTnPQQyca539J382l9/5LaiO0+0I+ok0/+gJi7q0/Y6Sl3TK
YqhcorMvF2wPnPgY3In+vkgP6tHUT/XuBRcFJ7po1pvWB8DSqXIRYc21J6MxbdUJ
T7KOC8ND3YVsDq94NiUjtSEDnJ2CXYsImsFbLbpWADsu/9GgCf4yaIVQFcV5hNQk
Cwa6j50/cG8dU1dQDRAd72NRD9nFcTA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:58 2025 by rpki-client