Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft
File: CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft (raw, json)
Hash identifier: rMEBebBZyir4d566B+rbCuIgzkqhbO8cjf0Rr1a//Y0=
Subject key identifier: C7:46:AB:56:66:0D:0C:18:28:03:A4:3F:60:70:91:85:9D:44:25:25
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial: 7FE05E8B3675BB467A3C97E8A0FC4C5EFABB600D
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft
Manifest number: 031B
Signing time: Wed 15 Jan 2025 14:43:15 +0000
Manifest this update: Wed 15 Jan 2025 14:38:15 +0000
Manifest next update: Thu 16 Jan 2025 17:59:15 +0000
Files and hashes: 1: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: x3/BkeS8RGTLag2nwW0oagX7yQtUqucL3rZgnfV/WZ8=)
2: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: 33+HDQJRYCUNP7VOYDUKf/AXIlXW42EMGuHPk2qGIJo=)
3: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: 5mpJF+s6CqpqwSrSlttfU1GwfwEb1pV825oBZgzU96I=)
4: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: TmI3Qks0GmU2IToJEidECHJuE8aOabW99R+mdgn9naQ=)
5: CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl (hash: U+0DqIYu73mUCSpXGMJ3gayDhpX66pKvuGWaUT6u0Q8=)
6: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: Q4lN9IudS9dVhn2DTLFcQL0XvsRzy0y8gzvqMKmxv1g=)
7: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: Opw+/zUrRL+edlMn6fP0gnUOGTdXKF6bVI9Gbetqyds=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e0:5e:8b:36:75:bb:46:7a:3c:97:e8:a0:fc:4c:5e:fa:bb:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Validity
Not Before: Jan 15 14:38:15 2025 GMT
Not After : Jan 16 17:59:15 2025 GMT
Subject: CN=C746AB56660D0C182803A43F607091859D442525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:5b:e5:b3:10:07:9a:08:00:89:c5:33:fa:
07:e6:67:44:09:3d:64:be:67:1d:98:f6:e3:75:de:
19:ba:95:e9:24:ea:33:58:8a:58:0f:96:c6:49:a0:
34:0d:08:a2:0b:2d:37:86:36:e3:81:14:fe:2e:0d:
1b:58:89:48:1c:7f:a7:21:73:4e:17:ca:14:28:61:
ad:e2:6b:b6:d8:3c:48:fb:50:42:f4:46:62:aa:78:
de:a3:4e:ae:56:82:b2:dd:1c:cb:cc:3e:ab:8d:6e:
3d:ad:d2:4d:99:d3:0f:0d:c9:e9:14:b7:8d:4e:28:
5a:d7:2d:3d:1b:cb:f4:6b:31:5b:7c:16:d3:9b:d5:
24:3a:a5:ac:c6:2b:ac:54:74:62:af:ab:f8:63:15:
f7:b6:af:3b:bd:43:59:70:3f:b1:51:a4:d8:91:74:
63:31:b0:74:45:95:ff:d2:aa:4e:90:ba:ae:15:49:
24:42:6d:00:a6:b4:89:6b:f5:35:57:8a:8f:ec:de:
62:43:21:b9:cf:c0:96:d1:32:fb:73:60:62:9d:08:
58:78:76:12:9e:34:1a:25:86:89:df:7e:48:7a:fb:
ca:48:9b:e3:c4:93:c0:ec:9a:b9:da:fc:f8:e9:5e:
7e:03:e1:63:66:1c:38:e9:55:56:5f:f2:11:1c:a5:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:AB:56:66:0D:0C:18:28:03:A4:3F:60:70:91:85:9D:44:25:25
X509v3 Authority Key Identifier:
keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:ca:ae:27:94:c1:b4:2a:b5:78:e7:3e:3b:72:ee:14:4e:
5d:43:a6:54:2c:f7:5a:7f:3f:cb:63:86:55:b0:56:bc:0a:2b:
ba:e4:f0:fd:a4:19:e7:5f:e7:15:00:27:84:f5:a7:ca:88:e2:
af:9f:b9:66:28:a4:e7:81:42:4c:74:b8:8e:bb:dc:92:32:ae:
17:36:6f:28:98:58:93:60:ce:dc:e8:52:8c:63:f2:46:a5:d1:
cd:8b:8d:04:4e:d1:38:07:ae:4a:ec:41:6d:84:59:95:86:45:
cd:82:c8:2f:c9:b9:92:c5:71:78:6b:0d:d2:d4:f0:19:3c:b8:
55:a2:ff:00:1f:f6:07:be:70:4e:e8:3d:54:fe:7e:47:96:43:
3c:a8:e9:a1:ef:18:de:87:a8:c5:f5:70:09:95:33:0c:71:a2:
7a:bd:77:64:60:21:c3:af:de:47:47:18:eb:42:04:fd:76:ba:
d8:c7:27:d6:58:a5:78:11:5e:da:5c:41:c4:0f:4a:fd:be:2a:
3c:ad:19:c0:49:07:ad:c4:f2:e6:b1:d4:ba:2c:85:d7:bd:9c:
9e:ec:20:96:ed:39:78:a0:c3:9d:30:d1:08:98:9b:00:2d:2e:
fe:1e:64:56:15:94:9c:e5:71:94:2b:b6:8a:ac:fd:a3:e8:b9:
d2:77:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:02 2025 by rpki-client