Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft
File: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft (raw, json)
Hash identifier: pmImcHU6knfDrAb79uUWP6muhOUgpnUbBdXn0cm5kfc=
Subject key identifier: 39:CA:F9:62:1F:62:47:A5:EF:6C:4B:CE:04:63:00:18:3A:0A:02:98
Authority key identifier: 2A:FA:CA:7F:31:6D:BE:0C:FF:39:4F:9D:59:52:E5:29:92:F1:85:F1
Certificate issuer: /CN=2AFACA7F316DBE0CFF394F9D5952E52992F185F1
Certificate serial: 5562D4415D5D5DA2DC44CE936980C2E677B0D792
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft
Manifest number: C1
Signing time: Sat 06 Jul 2024 20:55:37 +0000
Manifest this update: Sat 06 Jul 2024 20:50:37 +0000
Manifest next update: Mon 08 Jul 2024 00:44:37 +0000
Files and hashes: 1: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.crl (hash: N5bqPt57Ja5hXoWjWiwYQOfNEDqdjukosUJCXvf3YTY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:62:d4:41:5d:5d:5d:a2:dc:44:ce:93:69:80:c2:e6:77:b0:d7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AFACA7F316DBE0CFF394F9D5952E52992F185F1
Validity
Not Before: Jul 6 20:50:37 2024 GMT
Not After : Jul 8 00:44:37 2024 GMT
Subject: CN=39CAF9621F6247A5EF6C4BCE046300183A0A0298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:f7:90:08:14:9a:1f:a1:81:11:c8:39:2a:
05:d2:6c:08:e9:b1:ec:ed:8c:d6:5b:88:5c:16:73:
c5:5d:46:df:96:c9:65:ad:25:19:81:f8:97:a6:82:
82:e9:3f:85:60:a9:cb:d8:2d:63:26:e4:1c:34:01:
52:87:12:a8:b2:cd:40:a6:90:7e:89:02:55:8d:e4:
56:d7:c8:83:d1:9e:51:54:8e:76:6a:f5:66:f3:7c:
16:9f:90:73:0f:5a:d6:31:fa:58:1a:24:0c:58:24:
56:c5:80:ed:3d:27:63:ba:4b:b7:f3:28:22:f9:14:
63:d7:d2:4e:21:fa:cc:dd:c9:cc:af:ba:1c:d4:90:
e0:f4:de:1f:41:df:53:bc:33:fb:29:63:ad:85:ad:
b6:9e:0b:b0:59:26:b6:db:8e:74:6e:30:51:ee:ff:
3b:a7:bb:72:30:21:f9:5e:70:00:f1:e4:54:46:8e:
9f:7c:46:bf:66:ca:9f:d7:d5:59:01:e6:a8:fd:d1:
d2:00:13:14:71:30:20:8e:81:e7:f8:94:82:d4:40:
08:46:58:b7:22:99:bd:f5:51:40:e6:6e:6b:1f:a6:
98:d0:84:a0:87:78:c5:50:81:12:37:85:18:5d:ea:
3d:d9:ad:a0:f2:a7:95:fb:36:ca:00:25:6b:ef:4a:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:F9:62:1F:62:47:A5:EF:6C:4B:CE:04:63:00:18:3A:0A:02:98
X509v3 Authority Key Identifier:
keyid:2A:FA:CA:7F:31:6D:BE:0C:FF:39:4F:9D:59:52:E5:29:92:F1:85:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ce:7e:bc:3d:09:d4:4a:78:ad:f1:7a:f4:b4:e7:0c:12:eb:
53:da:24:22:29:49:30:f2:43:b1:c3:66:e0:f1:29:12:76:98:
d7:52:88:ca:2f:a3:d8:26:c9:b5:e7:c2:83:31:ce:d3:85:fb:
14:5d:85:2c:2a:73:4b:b0:ca:e2:65:f1:c0:a2:f9:8f:17:f3:
45:37:d1:0f:a8:26:76:d8:aa:26:ed:6c:db:fc:b8:ae:ac:3b:
a6:f6:2f:2b:fa:1d:7d:2d:fb:eb:91:85:a6:58:04:98:f7:c1:
26:b9:c7:21:60:9a:91:99:c2:1c:3d:55:1f:8d:84:9c:52:ec:
a1:3c:1e:b8:8a:81:01:f3:d9:be:09:26:d8:71:5f:d7:93:6c:
56:68:3f:28:f2:ae:12:23:46:71:53:00:4b:31:d4:b6:95:00:
14:3e:c2:1c:64:da:21:e1:f1:1a:db:ac:3c:92:3b:01:41:5f:
48:f6:72:21:7e:9e:98:54:58:41:7b:52:ca:31:8f:bf:de:61:
e0:90:9a:7c:bf:67:00:56:96:be:61:58:82:a2:c4:bd:38:06:
0c:2b:56:d6:0a:4f:23:06:90:00:fa:82:d6:8f:fd:e1:35:ad:
e0:32:44:2c:48:f5:b3:5c:f1:f1:6a:02:d1:f5:45:df:5e:80:
10:09:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:18 2025 by rpki-client