Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier: hPHxOubKKqyjEOXzkinhDnEp6o2d5Ogw7I1yHPof2kY=
Subject key identifier: 75:DB:C6:6E:75:29:03:F0:E8:D0:DE:8A:05:30:64:78:F9:78:2D:8F
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial: 385647D7392FC79AE409C93D263877770B385C71
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number: 54
Signing time: Wed 02 Apr 2025 17:22:27 +0000
Manifest this update: Wed 02 Apr 2025 17:17:27 +0000
Manifest next update: Thu 03 Apr 2025 20:36:27 +0000
Files and hashes: 1: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=)
2: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=)
3: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=)
4: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=)
5: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: OpPL8YHREsRE4jTGNHiSXtoyu+CQ1z5dsvXU2wu6E60=)
6: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=)
7: 326131343a373538313a323030303a3a2f34302d3430203d3e20343031333836.roa (hash: WFUH2iQtAwQ7iI2iexnUk2ty6+pZTlY1YwlIf0QItgo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:56:47:d7:39:2f:c7:9a:e4:09:c9:3d:26:38:77:77:0b:38:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Validity
Not Before: Apr 2 17:17:27 2025 GMT
Not After : Apr 3 20:36:27 2025 GMT
Subject: CN=75DBC66E752903F0E8D0DE8A05306478F9782D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:a6:c0:10:2f:ee:56:21:8e:c1:23:98:2f:
90:ff:1a:91:98:00:03:0d:4f:24:ff:52:4a:4a:a0:
38:24:c9:e1:bf:33:38:f3:f9:9e:7d:65:bd:2a:de:
27:6f:4e:84:16:76:65:c5:67:f3:a2:43:07:10:d9:
d4:8e:91:d3:fa:14:1a:67:50:65:76:7b:7e:ee:ab:
e6:1f:38:5c:e8:12:22:2c:40:db:0c:9e:7c:0c:97:
9d:ac:07:ce:81:79:d1:fd:72:06:da:21:22:d4:03:
a9:72:20:ec:53:98:4a:4f:f5:aa:9c:7e:05:be:99:
34:6e:ab:b8:8b:17:a9:56:34:a6:a3:fd:80:59:04:
bf:be:31:6c:c2:eb:6f:78:d9:51:65:0c:f7:06:6f:
ee:95:e6:9a:b1:c8:1e:27:c4:be:7f:66:b4:ca:0a:
c0:55:c0:43:42:86:1a:84:cc:1a:38:f6:43:0e:3e:
c3:1e:06:da:3b:88:d0:51:c7:2a:3d:ad:fe:65:f3:
e8:a4:49:75:2f:14:16:67:5d:13:03:82:6d:f6:f1:
d3:2f:c3:8a:74:b4:67:bd:3d:22:51:fa:2c:db:bf:
86:e4:c2:20:65:83:00:d8:ea:e9:4c:33:3d:2e:bd:
31:b9:28:72:b4:33:14:49:26:19:dc:1e:a5:16:6f:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DB:C6:6E:75:29:03:F0:E8:D0:DE:8A:05:30:64:78:F9:78:2D:8F
X509v3 Authority Key Identifier:
keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4c:d2:78:e1:58:60:09:d4:74:cd:d9:6f:4e:26:17:bd:f4:
6e:66:fe:b1:58:29:02:e4:1f:31:fc:96:f3:e6:58:ae:bc:1c:
50:e5:fc:38:ab:e6:bd:24:e5:b8:69:52:31:f3:80:e4:61:48:
6d:87:90:2a:83:1f:2a:09:c5:a3:4e:17:ef:fd:fa:bc:a9:b2:
0c:76:c8:ac:9d:13:fd:c9:e5:83:55:93:25:fd:64:4e:3d:f1:
46:46:0b:d0:d0:eb:0d:e6:90:4a:cd:78:ad:0d:31:fc:6c:9f:
17:bd:3c:b0:3a:a6:65:0d:89:b5:3b:f9:0a:9f:f5:29:01:f9:
59:26:53:ca:67:d9:a8:f2:ae:20:d2:58:f0:f1:9b:31:47:1e:
12:b5:96:66:6a:de:ef:18:97:de:5f:40:ac:d2:f7:11:2c:b2:
80:66:d3:e9:66:95:2c:58:6f:86:5b:b9:a1:ac:55:52:87:b7:
76:c7:2e:57:7e:63:4a:65:d4:be:55:57:33:c2:88:3c:53:74:
1c:8c:f8:50:fc:ff:6e:90:f5:9b:8c:99:d0:24:d9:1e:da:b3:
cb:2d:11:74:0a:f7:d8:a4:51:1a:a1:b4:a4:1c:46:45:e3:0b:
cd:e8:21:e2:80:16:62:6d:16:b9:23:17:47:42:c1:29:11:ac:
2d:8f:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:20:21 2025 by rpki-client