Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
File: 6C11FF5474BE690E545132237E53030296585D32.mft (raw, json)
Hash identifier: EszH+rMqwgTvjYgDeQHrHPJarGqXgjb/bEir/cC2byg=
Subject key identifier: 1D:D2:BF:E2:5C:F5:A2:DA:F1:26:14:D6:BC:B1:84:27:62:77:D8:A3
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Certificate issuer: /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial: 48D1BB98FB2082F79DFB2AC085FF3FA64BB5E928
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
Manifest number: 0409
Signing time: Sun 16 Feb 2025 06:10:44 +0000
Manifest this update: Sun 16 Feb 2025 06:05:44 +0000
Manifest next update: Wed 19 Feb 2025 15:38:44 +0000
Files and hashes: 1: 6C11FF5474BE690E545132237E53030296585D32.crl (hash: bcDmRRm1pzTY4gB16izG1D4m0E6q3+sYPhFqOe7zXgY=)
2: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (hash: FFWbcrgwEt8avpT8DpM1zZTtvliwRyBHooSUvsRbv54=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d1:bb:98:fb:20:82:f7:9d:fb:2a:c0:85:ff:3f:a6:4b:b5:e9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
Validity
Not Before: Feb 16 06:05:44 2025 GMT
Not After : Feb 19 15:38:44 2025 GMT
Subject: CN=1DD2BFE25CF5A2DAF12614D6BCB184276277D8A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9b:0c:4f:4b:11:c6:27:2e:ca:74:5b:41:19:
e7:b0:c8:3f:69:b3:6c:bc:29:88:bc:c6:a6:61:c5:
79:c2:dc:92:94:64:da:ef:98:6f:e1:7c:b2:f8:2f:
ce:2c:2b:bf:9c:b2:a2:0c:b0:a8:59:ca:45:69:0f:
87:87:21:ea:25:7f:ee:05:65:60:e4:37:85:e3:dc:
fd:6b:8f:63:16:c6:e3:82:ea:18:c5:fe:a7:07:51:
ed:6c:40:1e:47:2d:39:f4:dc:b8:68:cf:20:89:81:
2b:30:ef:a6:f3:fe:2f:af:3c:fb:a6:d6:03:de:cd:
9d:68:78:b8:2e:6d:03:93:81:42:ca:c9:ee:db:e0:
87:24:09:a2:02:e8:f7:60:8e:7a:66:6e:f7:ea:f6:
b6:29:86:2d:93:d1:3f:41:76:cf:35:d7:c5:4e:88:
9a:66:c4:72:be:e4:c8:ec:8b:ae:9f:fb:6f:d0:76:
ed:9c:ab:9d:07:17:4b:7a:96:19:7c:9e:02:ea:cc:
3d:63:1c:19:ee:6a:77:a2:62:a9:52:fb:49:f4:e7:
a1:18:ea:5e:35:f3:4d:2f:e2:8d:ce:50:dd:ec:b3:
54:b2:ee:a4:c0:bb:30:3d:fd:2e:f0:70:cf:cc:4e:
b1:e6:a4:3d:4d:07:07:a2:37:f9:21:c6:eb:02:9b:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:BF:E2:5C:F5:A2:DA:F1:26:14:D6:BC:B1:84:27:62:77:D8:A3
X509v3 Authority Key Identifier:
keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a4:b7:d8:c2:fe:7a:e1:83:5e:df:e5:11:43:70:35:af:6d:
a7:f1:bb:3a:b6:c1:ae:a2:d7:94:56:83:49:c6:65:02:c7:73:
2c:89:1c:f0:2b:0e:d4:6b:d0:c4:e2:db:3a:79:5e:ce:37:4e:
aa:c3:9d:72:34:8f:07:7b:2a:38:95:4a:fe:c6:a9:86:6d:af:
6c:c1:5e:92:2c:ea:24:f2:08:3e:58:17:58:e1:49:2c:c5:f8:
32:48:2d:13:0b:3b:53:78:7a:25:2f:17:a8:8b:54:db:a8:b8:
9e:ad:f9:fc:3b:d6:f5:14:49:97:e8:37:39:e7:bf:79:5f:65:
67:c3:11:3f:0f:ed:d0:98:06:85:b5:72:94:d3:db:8b:80:79:
7c:0a:2f:2c:b9:e5:28:3e:ba:4b:e8:47:f6:6a:61:66:69:ce:
95:83:96:af:1f:c7:dd:12:8c:a3:9c:7d:83:1c:98:38:0c:2e:
cb:16:6e:8c:38:d6:85:71:4a:a9:b6:a7:06:b2:8c:2c:6c:bd:
8d:2f:7d:8e:4a:c6:41:40:43:eb:f7:04:e4:b5:69:46:db:e9:
a4:24:06:fc:c2:b4:40:95:49:38:31:00:5d:08:fb:24:d5:4c:
00:36:57:ba:a7:05:1c:56:fa:38:38:87:33:09:7d:b8:1e:65:
18:3b:a6:7e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSNG7mPsggved+yrAhf8/pku16SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5
NjU4NUQzMjAeFw0yNTAyMTYwNjA1NDRaFw0yNTAyMTkxNTM4NDRaMDMxMTAvBgNV
BAMTKDFERDJCRkUyNUNGNUEyREFGMTI2MTRENkJDQjE4NDI3NjI3N0Q4QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0mwxPSxHGJy7KdFtBGeewyD9p
s2y8KYi8xqZhxXnC3JKUZNrvmG/hfLL4L84sK7+csqIMsKhZykVpD4eHIeolf+4F
ZWDkN4Xj3P1rj2MWxuOC6hjF/qcHUe1sQB5HLTn03LhozyCJgSsw76bz/i+vPPum
1gPezZ1oeLgubQOTgULKye7b4IckCaIC6Pdgjnpmbvfq9rYphi2T0T9Bds8118VO
iJpmxHK+5Mjsi66f+2/Qdu2cq50HF0t6lhl8ngLqzD1jHBnuaneiYqlS+0n056EY
6l41800v4o3OUN3ss1Sy7qTAuzA9/S7wcM/MTrHmpD1NBweiN/khxusCm15nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHdK/4lz1otrxJhTWvLGEJ2J32KMwHwYDVR0j
BBgwFoAUbBH/VHS+aQ5UUTIjflMDApZYXTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZTMzYTllZi01YjVmLTQ0MjktODM0Yi05NWIyYjczNjgwZTYvMC82QzExRkY1NDc0
QkU2OTBFNTQ1MTMyMjM3RTUzMDMwMjk2NTg1RDMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5NjU4
NUQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzM2E5ZWYtNWI1Zi00NDI5LTgz
NGItOTViMmI3MzY4MGU2LzAvNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAz
MDI5NjU4NUQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMGkt9jC/nrhg17f5RFDcDWvbafxuzq2wa6i
15RWg0nGZQLHcyyJHPArDtRr0MTi2zp5Xs43TqrDnXI0jwd7KjiVSv7GqYZtr2zB
XpIs6iTyCD5YF1jhSSzF+DJILRMLO1N4eiUvF6iLVNuouJ6t+fw71vUUSZfoNznn
v3lfZWfDET8P7dCYBoW1cpTT24uAeXwKLyy55Sg+ukvoR/ZqYWZpzpWDlq8fx90S
jKOcfYMcmDgMLssWbow41oVxSqm2pwayjCxsvY0vfY5KxkFAQ+v3BOS1aUbb6aQk
BvzCtECVSTgxAF0I+yTVTAA2V7qnBRxW+jg4hzMJfbgeZRg7pn4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:05 2025 by rpki-client