Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft
File: CDC014669D381152AFB94B76936268BFF73E7D50.mft (raw, json)
Hash identifier: X5EV6qXiVcNx0sjTkhkQuUD/wkNI2KVFbEvb12GZm5w=
Subject key identifier: AE:23:0A:D0:51:78:C7:A8:EE:3B:FD:1E:82:F3:C2:C9:E8:82:93:42
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Certificate issuer: /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial: 66DCF79BBA23EFF3167697483C8B48E9FA12A428
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft
Manifest number: 04DA
Signing time: Wed 05 Feb 2025 22:39:32 +0000
Manifest this update: Wed 05 Feb 2025 22:34:32 +0000
Manifest next update: Fri 07 Feb 2025 00:37:32 +0000
Files and hashes: 1: CDC014669D381152AFB94B76936268BFF73E7D50.crl (hash: kXwJAX4M2MsSkYm9SvFkaxKP1tU7wqQBky+AftaoRvg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:dc:f7:9b:ba:23:ef:f3:16:76:97:48:3c:8b:48:e9:fa:12:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
Validity
Not Before: Feb 5 22:34:32 2025 GMT
Not After : Feb 7 00:37:32 2025 GMT
Subject: CN=AE230AD05178C7A8EE3BFD1E82F3C2C9E8829342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:fe:3f:52:4f:20:1d:7f:fd:92:5a:77:0c:
54:21:fa:39:fe:f9:28:de:94:60:4f:95:31:77:9b:
de:34:0a:04:95:c4:dc:e0:53:91:9b:1f:4c:98:e0:
91:3e:41:df:c0:d6:e9:b8:b0:25:e6:b0:a1:33:8b:
61:8a:3d:ab:0c:c7:6f:6f:ba:1b:56:b2:3d:41:84:
f9:39:b5:50:f1:7a:89:04:20:7c:b4:a7:32:aa:e9:
d6:5b:cd:60:31:b6:e2:8f:b1:5f:ae:04:1c:ca:e3:
bf:6a:9b:bb:2f:c3:16:dd:8c:39:01:4f:a2:73:dc:
41:b9:4e:8b:1f:d0:64:3d:ba:cc:7e:11:a4:aa:5d:
58:24:24:2f:c4:04:c0:cb:9c:cf:f2:d0:f5:27:88:
e5:0b:58:f2:e3:8d:63:2c:94:15:09:fe:55:ef:3e:
32:65:25:17:95:53:68:59:18:52:fc:43:22:6e:f8:
55:43:07:54:94:02:26:d1:eb:cc:4f:4b:8b:1f:3c:
c7:3b:3e:07:bf:5e:b6:7f:27:48:d2:73:a5:47:2d:
f9:65:a9:39:d0:ce:74:9f:90:f3:3a:40:20:00:0f:
cc:13:ad:54:98:7b:2f:b1:c0:5e:2e:07:8a:cc:4e:
e9:53:f8:fc:b0:a9:18:02:f6:68:24:03:0a:1a:ed:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:0A:D0:51:78:C7:A8:EE:3B:FD:1E:82:F3:C2:C9:E8:82:93:42
X509v3 Authority Key Identifier:
keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f6:73:a5:08:9b:5e:f1:92:a1:b1:26:de:bc:f4:13:20:b9:
0a:b7:01:48:40:a2:b3:27:51:31:74:c0:1d:5c:95:32:1b:ea:
bb:00:62:db:9e:55:eb:f5:30:45:c8:01:d8:bf:2c:53:02:27:
50:64:bb:0d:fb:41:83:67:08:a6:9d:aa:18:79:a1:92:2d:79:
44:7e:03:f9:3a:5a:44:aa:70:d1:85:c6:ef:fe:ae:68:07:0d:
86:f5:29:ab:13:4f:34:06:8a:97:11:b4:93:90:b4:51:7d:98:
10:79:ab:09:83:09:be:bd:ef:e0:a1:21:4a:b0:76:82:c8:7d:
14:b5:26:0a:a9:fe:47:01:64:14:6f:1d:e2:21:80:f3:b9:4c:
58:ba:b2:be:7b:17:9a:b4:ba:e1:20:99:3b:9d:35:fa:52:26:
e8:91:50:01:7c:2b:cb:94:6a:cb:68:9f:ca:85:ca:89:cf:14:
50:8d:d2:d1:49:58:b5:d3:bf:16:e2:56:25:8f:3b:e2:08:a7:
e4:38:11:c3:ee:54:a0:29:23:f7:98:29:42:17:dc:b3:df:09:
df:44:8b:12:03:95:9c:c2:e8:5c:8f:9d:f4:9f:36:a2:12:21:
0e:32:0c:56:ee:5c:46:f1:bc:f6:d1:4e:3f:b1:82:b3:7f:a2:
5d:85:71:a9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUZtz3m7oj7/MWdpdIPItI6foSpCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZG
NzNFN0Q1MDAeFw0yNTAyMDUyMjM0MzJaFw0yNTAyMDcwMDM3MzJaMDMxMTAvBgNV
BAMTKEFFMjMwQUQwNTE3OEM3QThFRTNCRkQxRTgyRjNDMkM5RTg4MjkzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdL/4/Uk8gHX/9klp3DFQh+jn+
+SjelGBPlTF3m940CgSVxNzgU5GbH0yY4JE+Qd/A1um4sCXmsKEzi2GKPasMx29v
uhtWsj1BhPk5tVDxeokEIHy0pzKq6dZbzWAxtuKPsV+uBBzK479qm7svwxbdjDkB
T6Jz3EG5Tosf0GQ9usx+EaSqXVgkJC/EBMDLnM/y0PUniOULWPLjjWMslBUJ/lXv
PjJlJReVU2hZGFL8QyJu+FVDB1SUAibR68xPS4sfPMc7Pge/XrZ/J0jSc6VHLfll
qTnQznSfkPM6QCAAD8wTrVSYey+xwF4uB4rMTulT+PywqRgC9mgkAwoa7RsLAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUriMK0FF4x6juO/0egvPCyeiCk0IwHwYDVR0j
BBgwFoAUzcAUZp04EVKvuUt2k2Jov/c+fVAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzIvQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZGNzNFN0Q1MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh
ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9DREMwMTQ2NjlEMzgxMTUyQUZCOTRCNzY5
MzYyNjhCRkY3M0U3RDUwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8yL0NEQzAxNDY2
OUQzODExNTJBRkI5NEI3NjkzNjI2OEJGRjczRTdENTAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB09nOl
CJte8ZKhsSbevPQTILkKtwFIQKKzJ1ExdMAdXJUyG+q7AGLbnlXr9TBFyAHYvyxT
AidQZLsN+0GDZwimnaoYeaGSLXlEfgP5OlpEqnDRhcbv/q5oBw2G9SmrE080BoqX
EbSTkLRRfZgQeasJgwm+ve/goSFKsHaCyH0UtSYKqf5HAWQUbx3iIYDzuUxYurK+
exeatLrhIJk7nTX6UibokVABfCvLlGrLaJ/KhcqJzxRQjdLRSVi1078W4lYljzvi
CKfkOBHD7lSgKSP3mClCF9yz3wnfRIsSA5Wcwuhcj530nzaiEiEOMgxW7lxG8bz2
0U4/sYKzf6JdhXGp
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:42 2025 by rpki-client