Manifest
$ rpki-client -vvf rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
File: C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft (raw, json)
Hash identifier: l1eJxMPBCLbLKzpct/+LM5dSBvVZzJ6X/VLxtR+gJCs=
Subject key identifier: 54:18:23:79:B3:2D:BA:D7:A2:CA:6A:3A:D4:E3:1B:E9:FA:93:C2:87
Authority key identifier: C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46
Certificate issuer: /CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
Certificate serial: 5A1078714129D63DCB42B27F34FA429ABDCC58BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer
Subject info access: rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
Manifest number: 18
Signing time: Wed 30 Oct 2024 00:25:08 +0000
Manifest this update: Wed 30 Oct 2024 00:20:08 +0000
Manifest next update: Thu 31 Oct 2024 02:32:08 +0000
Files and hashes: 1: C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl (hash: CJ/E51Q+M5RqT7sKMzICVcIVfPy9K7T5nzox9C2l+ck=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:10:78:71:41:29:d6:3d:cb:42:b2:7f:34:fa:42:9a:bd:cc:58:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
Validity
Not Before: Oct 30 00:20:08 2024 GMT
Not After : Oct 31 02:32:08 2024 GMT
Subject: CN=54182379B32DBAD7A2CA6A3AD4E31BE9FA93C287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:cd:0a:39:42:fe:72:3d:80:da:a4:27:3b:
39:9f:76:2d:8e:b6:af:a3:01:6d:38:07:7b:f4:b7:
0a:bb:fd:13:00:d1:0d:49:0f:60:02:84:3f:a3:c0:
54:e2:f5:4e:a8:4e:1b:30:d8:c0:19:88:e6:f3:4a:
56:4b:db:ed:d8:f8:c1:3b:1b:cf:ce:f6:db:2f:8f:
8d:8a:4e:90:db:e8:76:f6:15:98:a1:15:95:81:fc:
67:8b:b7:d4:26:73:89:cd:c0:fa:83:55:cd:5b:26:
49:12:be:93:a5:c0:27:50:c2:e3:1e:4c:25:9f:73:
61:87:9e:e1:f0:4c:f0:7b:fc:08:2d:da:f7:2f:07:
6f:a7:e4:b5:9f:22:bb:b4:60:62:95:37:2e:51:40:
2d:c2:e2:f4:0e:00:5e:63:d1:96:c4:d5:64:a0:7d:
63:ee:93:5c:51:e4:ca:4d:48:ae:57:34:c3:6f:68:
34:e6:0b:60:ba:49:b1:50:5e:6f:7b:35:86:45:23:
34:59:cf:d2:b0:b7:a6:68:21:60:aa:72:14:cb:b3:
c0:49:81:01:65:d0:aa:bd:75:5c:01:7b:52:87:43:
32:f3:5d:6b:c3:e8:3a:17:93:62:19:f6:21:d3:69:
8d:f5:f9:cc:cf:c4:83:f3:fa:17:92:c7:0d:c4:b0:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:18:23:79:B3:2D:BA:D7:A2:CA:6A:3A:D4:E3:1B:E9:FA:93:C2:87
X509v3 Authority Key Identifier:
keyid:C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d9:10:7a:a7:d1:f2:43:ef:a1:e9:4d:b0:9f:b2:57:67:25:
34:14:3e:4f:51:50:c4:aa:e4:4d:3d:08:6f:53:c6:1f:6e:b5:
1a:ec:69:73:df:41:e9:34:91:bd:d4:88:dc:2d:f0:dc:3b:be:
0b:52:f3:af:ed:45:f0:35:10:71:72:45:f1:26:40:ce:a1:25:
52:6d:d8:ff:e4:fc:0b:6e:94:a3:33:2e:bf:73:2b:25:35:e4:
b3:9f:2d:e7:f8:36:be:bc:27:35:01:34:e8:37:c0:fb:f1:a9:
1b:d6:d3:93:e5:96:d4:28:b9:c4:0d:32:fa:8f:3f:cb:2a:f6:
c0:c5:a3:8c:47:32:73:3c:97:2b:df:9d:1a:38:94:4e:ce:e2:
96:fd:f0:60:7b:d8:b0:13:d3:7f:8d:ae:54:2b:ac:b8:58:f7:
4e:38:fd:59:44:96:78:b8:c5:a7:3b:a4:c5:63:db:44:70:39:
e1:a9:31:66:aa:d7:dd:21:c7:6c:9f:f3:20:9c:53:85:b8:35:
71:4a:ab:dc:56:83:db:c9:f8:a5:30:82:eb:3f:ef:aa:ce:5b:
81:ed:f2:89:cc:03:35:01:0a:81:1e:a1:40:16:3a:8b:d4:9d:
6f:e5:89:5d:a4:68:33:71:b0:0b:19:13:f1:a1:0c:9c:fa:a4:
e8:07:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:30 2025 by rpki-client