Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json)
Hash identifier: DsYsnXAl6qwo0IN8wmxk5xYtv/qYjXJBT8wCnZqVquA=
Subject key identifier: B3:2B:7A:7E:0A:DA:93:E7:BA:B1:9C:41:4B:3A:BD:1E:E5:9E:E7:8F
Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Certificate serial: 5C92C94D1C6E96217086644C4CC5112F01FAE1C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
Manifest number: 04AC
Signing time: Sun 16 Feb 2025 05:31:36 +0000
Manifest this update: Sun 16 Feb 2025 05:26:36 +0000
Manifest next update: Wed 19 Feb 2025 14:33:36 +0000
Files and hashes: 1: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: wxhr1XRJclUw3rXb3dstQr5k0bYeJ5/Xkb24+3+fAGU=)
2: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: UyOatuCC02khaJeqs+TkswynMlSzubtqvHoD/Tg3w9I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:92:c9:4d:1c:6e:96:21:70:86:64:4c:4c:c5:11:2f:01:fa:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Validity
Not Before: Feb 16 05:26:36 2025 GMT
Not After : Feb 19 14:33:36 2025 GMT
Subject: CN=B32B7A7E0ADA93E7BAB19C414B3ABD1EE59EE78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:80:c4:85:c4:45:67:5f:d9:eb:9b:70:b1:
25:7e:7c:9e:0d:1b:7d:bd:9b:c5:6b:b1:3a:88:6f:
79:f3:c2:78:e7:c7:af:94:6f:4e:a9:6a:69:52:c6:
2d:32:d2:27:c8:78:ac:13:7d:37:7d:61:27:d9:f3:
a0:4a:b2:fa:9c:4a:dc:46:34:44:ed:c3:f7:a4:c3:
32:4e:eb:3b:4e:a4:2c:7c:cb:df:1b:5c:d3:b8:e6:
2c:4a:31:28:d9:2c:f0:59:5c:7c:a7:57:11:be:b0:
07:1b:fb:f6:4e:d9:c4:90:0f:e4:88:91:c8:2b:fb:
a7:1f:f1:60:25:52:ad:f1:25:ef:f8:e7:07:dd:11:
30:61:6f:b4:08:e9:bb:79:3c:8d:64:90:c8:64:82:
ef:4f:96:ae:a7:84:67:37:c7:a4:b8:54:c2:82:3a:
58:79:3f:bf:10:1d:42:3e:33:96:07:9b:ff:99:10:
01:bb:49:0c:31:3c:d8:2b:11:6a:83:f5:9f:68:a8:
93:fa:6f:8f:0d:70:bc:42:58:d9:70:5b:a4:f5:88:
8f:88:25:d3:29:9c:6e:a9:ec:2f:01:4e:4f:a8:88:
6d:6f:b1:03:fa:bf:0a:bb:96:85:9d:cd:7e:d2:95:
dc:6f:3a:a9:64:ed:44:1f:71:e4:22:77:d6:7e:0c:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:7A:7E:0A:DA:93:E7:BA:B1:9C:41:4B:3A:BD:1E:E5:9E:E7:8F
X509v3 Authority Key Identifier:
keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:97:2b:1c:ce:61:c5:28:f8:0a:5b:13:eb:44:5c:f8:13:
94:19:c4:7b:25:d6:29:a7:ee:45:69:19:51:d6:3e:20:14:0c:
75:f5:43:d1:5a:88:f3:82:44:06:ac:d4:63:ab:44:a8:1b:f7:
61:35:c3:d9:86:89:1a:7b:89:60:23:a6:ef:2e:c2:54:23:85:
ff:4d:4a:92:4d:eb:e6:5f:81:d9:44:76:47:68:14:15:a8:e5:
10:de:01:f8:ff:e5:10:bc:c6:29:af:22:94:6c:0d:73:a3:dd:
be:15:bf:29:d0:67:05:e1:6d:6f:10:05:26:84:2a:06:76:75:
be:4b:5a:4b:c4:9d:b3:dc:6a:b6:82:de:07:a5:54:de:71:6e:
77:be:b5:c6:05:69:b3:29:c6:c4:21:47:a3:a1:70:88:eb:dd:
a9:e2:0c:2c:1b:77:04:66:6b:4f:30:d9:16:85:17:20:af:86:
d5:3b:99:c2:d3:8f:77:1c:58:c6:53:c7:df:0f:33:ab:27:4c:
c1:95:37:3e:24:8e:bc:57:97:5e:7d:1b:1e:61:ec:82:38:e5:
8b:51:98:ce:f0:e3:6a:df:1e:cf:29:06:1e:c1:4d:e0:60:e0:
11:74:c6:ee:59:0f:9c:c7:eb:41:5f:d5:f2:de:86:7c:e4:a6:
15:fe:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:46 2025 by rpki-client