![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft
File: B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft (raw, json)
Hash identifier: EsbaLbG9yk7PWg4V9ZparUumkiorRLbIQWMgh5yrrzY=
Subject key identifier: DE:E3:CF:9F:42:2E:7D:C3:C8:E8:7F:84:09:08:DF:15:6C:2F:7E:3A
Authority key identifier: B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA
Certificate issuer: /CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
Certificate serial: 4C24EDA46D34F01F9DF92A8B196AA4D60D636FF7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft
Manifest number: 38
Signing time: Thu 05 Sep 2024 12:31:28 +0000
Manifest this update: Thu 05 Sep 2024 12:26:28 +0000
Manifest next update: Fri 06 Sep 2024 12:47:28 +0000
Files and hashes: 1: 326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa (hash: rx6IUKhJahLbRAuJ+9gUsNn7bR5o5GyqNdUE075PAPU=)
2: B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.crl (hash: tjQwQLu6l8NzsGgTOnOjMMgxgvGdcNiR7TVCCWeIdDY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:24:ed:a4:6d:34:f0:1f:9d:f9:2a:8b:19:6a:a4:d6:0d:63:6f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
Validity
Not Before: Sep 5 12:26:28 2024 GMT
Not After : Sep 6 12:47:28 2024 GMT
Subject: CN=DEE3CF9F422E7DC3C8E87F840908DF156C2F7E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:42:65:12:ed:c6:f0:3d:83:d3:37:b2:a0:
3a:bf:cc:4e:9e:6f:b6:b1:06:d4:79:66:05:6e:f8:
b4:5b:09:41:ea:8a:97:db:44:eb:14:d7:78:72:90:
e3:8d:d4:19:b3:e1:0b:b6:2b:dc:06:74:e4:74:5b:
f9:9f:94:1c:a6:a0:d3:f4:b2:0f:1a:f2:72:70:eb:
46:91:26:37:6a:52:d9:87:b6:6d:04:b4:47:7f:5c:
ac:dd:4b:c0:59:ff:64:83:60:08:35:6f:76:af:a9:
c3:a9:c9:52:c2:66:ed:d5:9c:72:c6:a4:80:cf:72:
83:90:2e:49:b4:7e:2a:5b:21:d0:cb:9f:64:a2:5f:
db:44:3b:65:4a:9d:dd:21:5f:de:7a:85:0b:3d:4b:
33:14:f3:3b:ba:89:14:51:f4:6f:3e:6d:e0:43:34:
71:dd:84:26:e1:fd:0a:27:43:2a:c5:d3:84:54:a1:
02:1a:d8:c0:17:3b:9e:20:4d:3a:af:8b:44:83:69:
88:4e:c7:71:c8:10:f1:24:e2:7d:5a:33:4e:17:0c:
df:54:fa:34:09:a7:5a:0f:fd:e6:d9:01:23:18:9a:
51:b9:c7:e4:ed:7c:c6:03:d5:8b:0e:36:e9:c2:dc:
d8:d5:2f:35:41:7a:a3:0e:f2:c8:95:08:7a:53:1f:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:CF:9F:42:2E:7D:C3:C8:E8:7F:84:09:08:DF:15:6C:2F:7E:3A
X509v3 Authority Key Identifier:
keyid:B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7c:bd:a3:da:94:eb:6f:65:1a:da:e4:e1:82:91:ed:fb:9c:
e0:d6:95:09:1f:27:06:8b:0e:da:e2:59:1f:7c:ec:1a:3a:10:
09:85:83:96:0c:b3:90:0f:d5:1f:3c:81:89:c7:7f:a1:8a:8c:
dc:8a:af:2f:c4:fc:d4:2d:5b:d2:ca:b4:6d:c9:bf:b8:a0:cd:
9a:1b:47:6b:41:6a:24:d0:d2:60:7d:8f:1d:58:b2:38:bb:37:
fe:d8:04:ad:cc:37:7c:eb:e3:5b:c5:52:ef:02:d7:45:9b:5b:
04:ec:d3:10:35:5c:16:ed:be:d2:75:64:f8:c5:f5:13:9c:7c:
8d:cc:74:8e:2d:12:58:04:e5:3c:63:b5:1e:70:99:f0:60:f8:
a8:ca:f7:41:f4:1b:9e:58:a2:59:6e:7f:b9:07:e6:9a:56:19:
a3:47:ec:3b:8b:a2:cc:14:ea:1a:0c:84:0d:b3:07:17:31:61:
13:00:6c:7c:6e:e2:84:d2:f8:51:8e:db:38:28:03:e2:65:46:
5e:0e:50:f6:b4:2b:13:18:36:a3:07:d8:a1:d6:96:ec:68:f4:
6c:7d:7f:17:b3:1b:c8:ce:23:fb:36:d6:05:92:59:ad:cc:6c:
fe:30:86:b5:da:b7:67:b2:f1:00:a8:54:08:67:8b:64:31:24:
3a:69:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:11 2025 by rpki-client