Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
File: 5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft (raw, json)
Hash identifier: glm9VJ+JD64lWqfDzAzi6wRusHibp5Ave5Hc3Ny4r9s=
Subject key identifier: 08:74:93:9E:8A:97:5C:3B:DE:60:43:0E:49:70:A1:B8:CB:05:6E:92
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 1FA2B4AD1816BE9D0BFCCD561F741C882C972E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
Manifest number: 02D4
Signing time: Thu 27 Feb 2025 23:09:59 +0000
Manifest this update: Thu 27 Feb 2025 23:04:59 +0000
Manifest next update: Sat 01 Mar 2025 02:34:59 +0000
Files and hashes: 1: 3139332e3230302e3130322e302f32332d3234203d3e20323134373835.roa (hash: 02yFXexx0RukReo8+AwmPQHmksLCVOWv/mWLCeyTOYY=)
2: 3139332e3230312e37322e302f32342d3234203d3e20313439343537.roa (hash: gs+C9gPrMKo4jxayW40fvLZlBxHQJvt9Vlsdc+lownc=)
3: 5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl (hash: 6JZcxRQYBSOfF+J34EIjHztIm9zh9nGPPDaxB/RBSws=)
4: 3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa (hash: DJT+evwL05shXYMw2l+gChQuoHddBV1Ru1l/+OaF1Ik=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a2:b4:ad:18:16:be:9d:0b:fc:cd:56:1f:74:1c:88:2c:97:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Feb 27 23:04:59 2025 GMT
Not After : Mar 1 02:34:59 2025 GMT
Subject: CN=0874939E8A975C3BDE60430E4970A1B8CB056E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:d9:e9:06:e1:ee:10:3b:8c:cc:a1:31:1c:
4f:11:02:58:f6:2f:65:b0:ee:7e:af:04:4c:1c:6f:
0c:a1:83:a8:62:e4:40:8b:45:86:b7:1c:2b:92:eb:
23:61:d9:a8:a4:83:96:44:ed:5d:6a:9c:a7:4f:b2:
ac:56:55:2f:08:5c:c6:68:56:33:4f:71:e3:04:fe:
de:65:1a:b6:eb:50:5b:38:87:f6:a7:2e:42:bb:72:
0e:35:4a:45:8b:b1:22:48:0e:04:d0:99:a6:2a:9b:
e8:01:0d:34:bf:d4:eb:2a:6e:10:8d:4f:a7:71:f0:
29:92:e1:f0:a5:20:40:dc:24:d1:b1:fe:3c:db:98:
2c:30:70:01:3b:1b:e4:32:24:25:60:c3:c8:b5:4e:
03:e8:52:57:9a:4a:2e:a0:a0:49:88:71:6c:2c:1a:
ce:94:56:7e:71:c5:2b:16:41:93:8b:50:27:3b:fd:
6e:27:4b:8d:02:1a:3e:6a:47:6b:98:51:e2:29:ef:
d6:68:4b:33:98:b1:f6:11:56:9b:30:9b:63:34:dc:
30:56:c1:9f:f6:06:11:4d:ef:75:e2:c7:7b:89:78:
0c:67:84:9e:bc:72:c4:cb:c5:61:29:97:a1:74:be:
66:8a:b1:d2:bb:b2:cf:f5:67:02:3c:87:be:3d:34:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:74:93:9E:8A:97:5C:3B:DE:60:43:0E:49:70:A1:B8:CB:05:6E:92
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:77:7d:b0:73:87:cc:25:e5:2b:9e:92:85:51:4e:9e:90:40:
a5:3e:e3:01:d5:f1:4e:9d:74:ae:4e:38:95:7d:4b:fa:cc:d5:
83:19:6c:85:d0:63:13:35:b2:c6:8a:b6:38:04:09:e1:c9:4b:
15:5b:31:1c:aa:cb:82:30:5a:2e:cd:15:76:ef:cd:5c:b6:a9:
5b:43:bb:2c:75:6d:1d:c3:c7:32:66:8c:fe:ad:2d:92:a9:a7:
78:bd:39:d0:17:1c:91:64:e9:e7:aa:13:8e:2d:fd:c2:43:87:
d0:6f:66:9e:02:7c:c6:a8:8e:49:a7:2d:f2:46:3c:95:10:ab:
bf:82:4c:d7:c9:ec:ad:16:05:9a:89:75:f2:0b:c5:ba:52:ef:
1c:75:9d:5d:7f:87:1a:2e:83:45:cd:2c:f0:86:e0:14:b5:8f:
62:10:04:e6:ad:d6:47:3a:1a:74:8e:67:64:6e:59:8b:f6:0d:
36:7a:aa:23:a5:3e:88:d2:b3:db:41:8e:5e:ec:cd:df:91:e1:
6e:c0:94:ef:2e:22:47:66:74:43:97:a2:ff:6c:80:49:ce:d1:
86:3a:e0:66:3e:b5:70:bd:5b:30:49:f4:e2:72:22:ac:0b:8e:
71:c3:13:3b:20:08:b0:f2:ae:77:94:c2:28:14:a2:93:3f:c7:
6f:b0:8b:42
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUH6K0rRgWvp0L/M1WH3QciCyXLkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUxMWY2ZDdkZWY0YzBmZmI2ZTJiM2IzZjBjNDQ1NWRj
ZDE0YzE2MDAeFw0yNTAyMjcyMzA0NTlaFw0yNTAzMDEwMjM0NTlaMDMxMTAvBgNV
BAMTKDA4NzQ5MzlFOEE5NzVDM0JERTYwNDMwRTQ5NzBBMUI4Q0IwNTZFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kNnpBuHuEDuMzKExHE8RAlj2
L2Ww7n6vBEwcbwyhg6hi5ECLRYa3HCuS6yNh2aikg5ZE7V1qnKdPsqxWVS8IXMZo
VjNPceME/t5lGrbrUFs4h/anLkK7cg41SkWLsSJIDgTQmaYqm+gBDTS/1OsqbhCN
T6dx8CmS4fClIEDcJNGx/jzbmCwwcAE7G+QyJCVgw8i1TgPoUleaSi6goEmIcWws
Gs6UVn5xxSsWQZOLUCc7/W4nS40CGj5qR2uYUeIp79ZoSzOYsfYRVpswm2M03DBW
wZ/2BhFN73Xix3uJeAxnhJ68csTLxWEpl6F0vmaKsdK7ss/1ZwI8h749NEbbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUCHSTnoqXXDveYEMOSXChuMsFbpIwHwYDVR0j
BBgwFoAUVRH21970wP+24rOz8MRFXc0UwWAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA4YmM0OWQtMDMzOC00YjVmLTgyMDQtMDAwNGE2NjEw
NWM5LzAvNTUxMUY2RDdERUY0QzBGRkI2RTJCM0IzRjBDNDQ1NURDRDE0QzE2MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZSSDIxOTcwd1AtMjRyT3o4TVJGWGMw
VXdXQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDhiYzQ5ZC0w
MzM4LTRiNWYtODIwNC0wMDA0YTY2MTA1YzkvMC81NTExRjZEN0RFRjRDMEZGQjZF
MkIzQjNGMEM0NDU1RENEMTRDMTYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnd9sHOHzCXlK56ShVFO
npBApT7jAdXxTp10rk44lX1L+szVgxlshdBjEzWyxoq2OAQJ4clLFVsxHKrLgjBa
Ls0Vdu/NXLapW0O7LHVtHcPHMmaM/q0tkqmneL050BcckWTp56oTji39wkOH0G9m
ngJ8xqiOSact8kY8lRCrv4JM18nsrRYFmol18gvFulLvHHWdXX+HGi6DRc0s8Ibg
FLWPYhAE5q3WRzoadI5nZG5Zi/YNNnqqI6U+iNKz20GOXuzN35HhbsCU7y4iR2Z0
Q5ei/2yASc7RhjrgZj61cL1bMEn04nIirAuOccMTOyAIsPKud5TCKBSikz/Hb7CL
Qg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:58 2025 by rpki-client