
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json)
Hash identifier: TKBWN7MRbB5BE+rnGxwLYKlvUqT3jfIOAnHBZtQ9DsU=
Subject key identifier: 9D:31:AA:F6:B2:E8:34:14:E5:33:0F:3A:AA:3A:5B:AC:35:7A:BF:21
Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C
Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
Certificate serial: 46B2EDA96EB7658010A5407590AE58871B9904EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
Manifest number: 0182
Signing time: Sun 16 Feb 2025 07:30:33 +0000
Manifest this update: Sun 16 Feb 2025 07:25:33 +0000
Manifest next update: Wed 19 Feb 2025 10:23:33 +0000
Files and hashes: 1: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: 0cTovMnwdBAj95g8AEENy6k4Hk8u4WbQLwRmwUjFLDU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b2:ed:a9:6e:b7:65:80:10:a5:40:75:90:ae:58:87:1b:99:04:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
Validity
Not Before: Feb 16 07:25:33 2025 GMT
Not After : Feb 19 10:23:33 2025 GMT
Subject: CN=9D31AAF6B2E83414E5330F3AAA3A5BAC357ABF21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:19:4b:3c:ce:f2:89:fd:8c:cb:43:31:6f:
36:27:58:b9:73:ae:3f:53:bc:85:95:81:fb:f0:27:
d7:88:73:56:6d:2a:ca:c8:37:2a:04:ca:e9:ba:3f:
e9:33:35:75:8e:61:68:e6:fe:91:de:9a:79:6a:80:
73:9b:dd:36:e8:e1:00:a4:67:bc:5f:03:6c:f7:93:
cd:ed:da:ec:e3:b8:4d:c5:f7:41:fe:11:3e:02:99:
43:3f:92:76:77:63:90:8b:fc:d0:f0:a2:67:5c:16:
60:79:48:ae:8b:ea:55:3f:ff:95:e2:e4:49:51:f7:
2b:e7:6e:63:a2:b6:83:51:b1:84:e1:af:8c:bd:03:
69:c9:c6:8c:6f:17:48:70:c8:bf:b1:76:c6:67:a6:
53:d1:e5:52:f0:2b:01:e2:81:35:33:a9:86:96:51:
e5:70:04:b0:44:9d:30:2b:0b:46:4c:88:49:85:15:
21:f2:30:c4:5a:b4:e5:3a:4c:ac:00:bb:af:ea:0f:
91:86:8c:ae:0e:64:bf:20:1c:f2:f3:4f:46:a2:ea:
32:a3:34:7d:6d:61:4b:e4:42:11:fd:e6:03:3b:e5:
91:f8:65:b1:bf:86:c0:7b:42:f0:bd:e1:5d:67:07:
35:ef:12:26:6c:38:e6:21:44:b7:af:b3:fc:14:8e:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:AA:F6:B2:E8:34:14:E5:33:0F:3A:AA:3A:5B:AC:35:7A:BF:21
X509v3 Authority Key Identifier:
keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:85:ab:55:98:eb:7d:96:ac:86:be:0c:77:ea:63:a4:3a:36:
9d:02:f3:3e:c4:89:5e:2b:e0:16:ac:16:ed:26:f2:ef:ca:ec:
1d:1a:c7:8f:51:99:b5:2e:8f:0e:ea:2e:c5:8f:10:ae:8c:b2:
f7:a5:c1:a3:80:7e:5c:f9:73:cc:d7:ec:1c:43:9d:78:48:e8:
c7:7b:40:34:be:1b:bf:02:c0:c3:95:47:66:b7:b9:55:bb:6e:
19:9f:da:95:5d:a9:6e:78:f2:33:24:f3:bc:db:26:cc:a2:8a:
08:0b:e8:c3:d6:64:73:fc:ac:15:8a:09:25:54:e8:f2:c3:b0:
f3:56:fa:93:2c:2b:98:d8:1e:61:71:63:89:03:68:70:f2:96:
f6:55:85:ee:61:fb:ed:33:f2:8d:d4:c3:65:b9:c2:e3:1f:a4:
a3:86:81:e8:93:95:13:3b:38:98:dc:51:0d:9b:d3:d0:8f:b8:
d3:88:78:9f:87:32:b5:6a:76:74:d2:5b:93:57:21:78:35:af:
a6:52:ec:82:b7:65:f9:e5:a9:2b:b1:62:39:29:7a:20:e7:be:
1a:73:59:c1:26:e5:77:87:3a:f6:2f:84:fd:be:2d:6a:c6:ad:
e5:9b:d4:cf:c5:ac:b9:c5:3a:52:0d:10:27:8e:f6:86:f4:6c:
c3:d3:61:37
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURrLtqW63ZYAQpUB1kK5YhxuZBOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0
REMwOTcxQzAeFw0yNTAyMTYwNzI1MzNaFw0yNTAyMTkxMDIzMzNaMDMxMTAvBgNV
BAMTKDlEMzFBQUY2QjJFODM0MTRFNTMzMEYzQUFBM0E1QkFDMzU3QUJGMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlhlLPM7yif2My0MxbzYnWLlz
rj9TvIWVgfvwJ9eIc1ZtKsrINyoEyum6P+kzNXWOYWjm/pHemnlqgHOb3Tbo4QCk
Z7xfA2z3k83t2uzjuE3F90H+ET4CmUM/knZ3Y5CL/NDwomdcFmB5SK6L6lU//5Xi
5ElR9yvnbmOitoNRsYThr4y9A2nJxoxvF0hwyL+xdsZnplPR5VLwKwHigTUzqYaW
UeVwBLBEnTArC0ZMiEmFFSHyMMRatOU6TKwAu6/qD5GGjK4OZL8gHPLzT0ai6jKj
NH1tYUvkQhH95gM75ZH4ZbG/hsB7QvC94V1nBzXvEiZsOOYhRLevs/wUjvXpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnTGq9rLoNBTlMw86qjpbrDV6vyEwHwYDVR0j
BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC
N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw
OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy
MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0
QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK+Fq1WY632WrIa+DHfqY6Q6Np0C8z7EiV4r
4BasFu0m8u/K7B0ax49RmbUujw7qLsWPEK6MsvelwaOAflz5c8zX7BxDnXhI6Md7
QDS+G78CwMOVR2a3uVW7bhmf2pVdqW548jMk87zbJsyiiggL6MPWZHP8rBWKCSVU
6PLDsPNW+pMsK5jYHmFxY4kDaHDylvZVhe5h++0z8o3Uw2W5wuMfpKOGgeiTlRM7
OJjcUQ2b09CPuNOIeJ+HMrVqdnTSW5NXIXg1r6ZS7IK3ZfnlqSuxYjkpeiDnvhpz
WcEm5XeHOvYvhP2+LWrGreWb1M/FrLnFOlINECeO9ob0bMPTYTc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:01 2025 by rpki-client