Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: 9KjIgegxAff+T+n/vkqqLo7xZpDnjvwNGKnEDWxr2Ng=
Subject key identifier: 34:BF:31:52:65:0B:7A:FD:A4:B0:28:34:A8:E7:42:47:B2:43:28:D0
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 696108612E9F332EEA6389A4F3435AC74A5019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 01D1
Signing time: Tue 20 May 2025 05:05:47 +0000
Manifest this update: Tue 20 May 2025 05:00:47 +0000
Manifest next update: Wed 21 May 2025 08:14:47 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: CEm0vI9krcGxfP/C/10m6BRbodSDXR7psdM8ws0uS7A=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:08:61:2e:9f:33:2e:ea:63:89:a4:f3:43:5a:c7:4a:50:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: May 20 05:00:47 2025 GMT
Not After : May 21 08:14:47 2025 GMT
Subject: CN=34BF3152650B7AFDA4B02834A8E74247B24328D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:0c:b3:26:70:6f:5a:69:d0:ad:09:3d:77:
24:5c:49:20:04:a1:57:b0:6c:95:3a:79:d8:d8:8d:
a0:b8:a9:69:3b:34:79:f4:10:dd:b5:b1:2d:66:92:
50:26:16:40:47:c6:c7:fe:8c:d4:b5:0a:08:ae:a8:
5f:3f:0e:07:1c:ff:a3:a8:b9:0e:ce:78:46:93:9f:
cf:6c:50:71:0f:18:c8:75:95:48:7f:2a:ed:82:49:
a6:04:58:35:87:6b:d1:07:04:0d:9e:9d:cf:91:cb:
17:a9:71:bb:01:ff:2b:75:24:ef:d9:c1:b3:7d:3c:
9f:64:52:c2:cf:fc:7b:d3:c0:35:50:74:fe:a1:d6:
4a:c9:3f:85:b6:f8:2c:80:6f:33:8b:67:5d:f0:c0:
29:9e:dc:da:2d:02:cd:72:27:04:65:bf:aa:2a:4f:
97:ab:c6:a5:0c:be:cc:ff:02:f9:34:b7:4b:0f:de:
0b:ff:6e:28:3a:1e:e9:57:e9:f2:d8:83:01:cd:23:
13:21:11:59:1d:b9:a2:9b:f7:f3:a8:3f:ac:e5:ba:
c0:d6:a3:e2:60:79:5b:18:cf:e1:58:6e:9d:76:03:
6c:d4:bc:d7:1d:6c:3b:b5:ec:f0:d7:a0:f0:f2:79:
86:0c:20:da:5c:a1:94:13:b3:f7:8d:cf:15:af:ee:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:31:52:65:0B:7A:FD:A4:B0:28:34:A8:E7:42:47:B2:43:28:D0
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7e:ac:bb:3a:b0:9e:bd:f5:81:f2:4b:d4:6b:a9:ef:cc:52:
6a:78:86:7a:f8:78:4a:c2:fb:3b:1f:ae:aa:0e:bd:8e:5a:c6:
0b:bd:0e:ad:b1:54:61:73:e9:a7:0b:0e:3d:7b:ff:95:49:f9:
9e:e2:7d:a0:ef:7a:b7:e5:77:29:5a:96:7a:f2:91:a9:eb:36:
21:7f:f2:50:54:c1:a3:40:e5:fa:53:3f:df:47:dc:88:d5:f4:
0d:57:1e:b5:12:88:0a:36:9e:25:3a:d5:64:de:88:74:14:62:
04:51:10:1e:e0:17:ad:84:e1:78:97:c8:ed:38:43:35:34:9d:
9f:cd:fd:1c:4c:55:8b:f0:04:fc:a1:14:16:7e:b5:22:a8:dd:
db:ac:dc:98:2a:ca:ce:a2:0f:86:36:93:79:fe:c8:c7:83:92:
39:c7:4e:16:3c:e5:c3:24:a2:b9:8d:30:66:80:90:19:0b:7a:
5e:79:c7:f0:36:a4:6d:76:74:dd:1e:85:5d:92:6c:6f:91:64:
2f:43:d6:1c:e7:5d:c8:30:4d:45:cd:e9:cb:10:52:1b:66:15:
ed:d7:a6:ec:af:d2:6a:94:ca:24:c7:80:03:46:85:d5:46:04:
99:00:7f:88:95:f8:76:f5:a7:56:e4:e1:ee:dc:09:31:e2:02:
e4:1d:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:00:44 2025 by rpki-client