Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
File: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft (raw, json)
Hash identifier: REjLsIacczql+zuSHnQo5ugYtaWUvrzpyYWGXcjCfPE=
Subject key identifier: C8:27:99:5E:9F:91:FE:DD:AE:7E:45:70:0C:66:2D:C0:CD:48:02:CE
Authority key identifier: 03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
Certificate issuer: /CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Certificate serial: 4E3CF13B5AAD907E2A90475B0C79484AF6DC91F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
Manifest number: 4B
Signing time: Fri 10 Jan 2025 23:20:47 +0000
Manifest this update: Fri 10 Jan 2025 23:15:47 +0000
Manifest next update: Sat 11 Jan 2025 23:49:47 +0000
Files and hashes: 1: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl (hash: NGG0Jtnh5yb7l1C12ojgshTn/Xl8svNplPSIBbL4/mo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3c:f1:3b:5a:ad:90:7e:2a:90:47:5b:0c:79:48:4a:f6:dc:91:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Validity
Not Before: Jan 10 23:15:47 2025 GMT
Not After : Jan 11 23:49:47 2025 GMT
Subject: CN=C827995E9F91FEDDAE7E45700C662DC0CD4802CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:2a:86:2a:10:98:cd:3f:6f:9d:d5:4d:1b:
13:c1:4c:a2:8a:d1:bb:10:df:26:9d:95:47:28:07:
30:a4:16:02:2e:ce:b7:58:f5:b6:fa:03:74:62:1d:
43:c7:31:38:06:7e:64:50:e8:86:2d:0b:fd:03:67:
f6:0a:34:ad:2c:31:8c:f2:ae:ff:4e:00:d4:be:28:
51:72:39:83:c3:02:86:70:af:65:e7:c9:9f:24:fe:
34:87:0e:45:56:c5:fd:f3:2b:b1:71:82:eb:30:e4:
51:89:2e:b4:75:90:d8:3e:b2:b3:35:f8:86:5a:50:
d1:68:46:88:e0:0f:b8:30:e2:98:4b:f9:fb:a3:06:
73:b3:39:29:21:b3:0f:d2:f1:bb:17:f1:b3:05:20:
ec:7a:f8:50:d4:4c:22:35:72:5e:a3:d7:1d:b1:68:
8a:c7:18:48:3c:f1:75:87:1a:77:35:ba:28:10:e3:
b8:77:ee:63:2f:ef:6d:6b:fc:ba:fa:68:a1:dd:4c:
13:28:4c:7f:b8:2c:00:3d:34:fc:6f:7f:bb:19:a5:
e6:1b:46:29:c6:84:fd:48:11:41:d9:02:85:6b:a0:
2f:93:49:f2:ac:f7:2e:fc:2e:da:28:2c:67:49:fe:
6e:f3:2b:89:00:4c:bd:46:3d:f1:f1:3d:e7:3c:f8:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:27:99:5E:9F:91:FE:DD:AE:7E:45:70:0C:66:2D:C0:CD:48:02:CE
X509v3 Authority Key Identifier:
keyid:03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1b:d5:b0:48:d6:ce:ab:9d:d3:9d:7f:56:71:02:d7:c4:16:
09:75:4f:9e:8b:a2:00:1d:1e:f1:8c:60:f9:ae:fe:b0:eb:12:
c4:f5:7f:71:a4:8f:73:3f:05:7e:82:31:97:85:6e:cc:2c:e9:
e0:c3:1c:87:72:6a:1b:76:f5:9e:b6:0f:16:c4:17:0f:40:6e:
fe:6e:76:ef:48:16:62:82:0a:bf:5c:d4:7d:4e:4a:d2:4c:d2:
14:cc:4d:64:6a:cd:9e:a4:44:ca:9c:49:5f:29:b9:1b:45:dc:
4c:33:4d:84:c4:d1:e9:b5:ef:86:02:82:96:50:69:c9:7e:e4:
0b:c6:3e:31:12:54:07:65:fb:e2:06:c4:77:f6:a9:85:7d:20:
31:37:af:ec:0c:ab:4d:f6:91:47:c2:82:5d:2e:6f:ef:ca:ac:
93:b0:e8:a9:35:87:0c:9f:54:d2:da:21:dd:c0:02:5f:04:27:
b7:41:7a:5e:06:66:70:df:36:3e:29:5d:f7:1a:ee:fc:ea:12:
8e:52:89:78:d9:b7:f8:f7:c7:1a:e3:c9:50:d7:e1:69:8f:1a:
8f:5b:50:fd:ec:a0:be:0a:bf:2d:d5:35:3a:57:40:b3:4b:5c:
20:c1:b9:31:d4:3a:d3:68:83:87:e3:ea:53:83:b3:d4:0b:78:
b0:40:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:57 2025 by rpki-client