Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json)
Hash identifier: KduezBilv9oRAq8X/554o9wPfpKu/vU/k2mh1Q6o1a4=
Subject key identifier: 0F:17:2F:9B:99:6C:CC:31:01:B3:2C:66:D8:17:F7:DF:3F:6B:62:33
Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Certificate serial: 5832C485D98F69E3506A22715E2F3BBB9BB007F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
Manifest number: C5
Signing time: Sun 16 Feb 2025 08:40:43 +0000
Manifest this update: Sun 16 Feb 2025 08:35:43 +0000
Manifest next update: Wed 19 Feb 2025 20:21:43 +0000
Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: Ziyg0D5V2s9TzgtFXhxrBwlw2/DAp6aRN3+gPcC29v4=)
2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: brjYca9dcNv1UdupIOuFmUe8vITxBLFEH0h8ZSx00io=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:32:c4:85:d9:8f:69:e3:50:6a:22:71:5e:2f:3b:bb:9b:b0:07:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Validity
Not Before: Feb 16 08:35:43 2025 GMT
Not After : Feb 19 20:21:43 2025 GMT
Subject: CN=0F172F9B996CCC3101B32C66D817F7DF3F6B6233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:ae:6f:1b:a9:3c:4e:64:66:db:4a:9e:c7:
02:50:74:11:bd:89:fc:73:89:50:1a:47:4e:55:b3:
43:18:63:a1:4a:19:ec:25:e5:4a:31:62:66:21:b3:
bf:e3:91:be:f5:2b:6e:29:6e:27:19:19:3b:dd:b3:
32:80:ca:52:37:d3:db:b9:1c:47:47:42:ef:90:9c:
cc:ba:c3:3a:a2:d3:2e:5f:33:2f:92:6b:17:a9:c8:
9e:e4:d1:8f:a8:81:21:e5:f8:c5:32:55:f9:ea:a8:
34:0c:2f:54:44:84:7c:6e:6f:f3:17:f9:e2:0f:a0:
cf:a1:b5:f5:52:a7:32:90:57:ab:6c:80:e6:d8:3a:
4d:7c:12:7a:f8:6d:6a:df:8b:f3:50:94:f4:a2:e4:
44:0e:1d:a0:36:60:4d:2f:d9:8c:99:79:bf:c4:a8:
d9:15:66:d2:ff:a2:69:3b:fb:c3:c4:86:4a:af:77:
44:14:c8:73:76:1e:c4:79:92:3f:68:aa:81:9d:c8:
c3:3d:11:9a:92:ef:b9:0a:19:0d:ea:a3:d1:c7:30:
96:79:a8:a2:ff:ed:9f:ac:01:b1:01:66:23:41:23:
02:2b:b3:91:f6:0d:b0:e4:1e:16:1b:2d:1e:77:4f:
88:56:3d:a0:60:5f:03:77:42:d8:f0:1a:8a:63:0c:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:17:2F:9B:99:6C:CC:31:01:B3:2C:66:D8:17:F7:DF:3F:6B:62:33
X509v3 Authority Key Identifier:
keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:65:37:f3:9a:fa:ff:58:15:f5:99:e4:f3:91:1d:33:ee:
e3:e1:47:0e:5b:14:5f:78:20:ea:26:fb:8e:71:eb:ed:77:1b:
1d:9b:5a:ca:92:fd:45:cf:62:99:27:77:9f:d4:f9:ae:a8:b4:
17:34:89:37:2a:90:3c:c6:df:5c:89:09:a0:2a:e9:05:a6:ed:
83:fe:b3:34:51:8c:4b:3e:b7:6b:32:1e:c1:c6:07:8e:a4:4b:
b0:76:16:c2:64:33:04:63:14:77:15:23:18:7e:6e:2d:38:0b:
54:36:3c:83:e6:06:4e:78:4d:ba:23:15:0b:42:8f:83:7e:70:
02:ec:6f:8e:58:c0:f3:03:ab:69:7d:3c:d4:dd:f4:55:7c:b1:
bb:99:62:49:e7:bc:18:a5:29:bb:bd:e0:60:f1:06:8c:3d:7f:
69:7c:0b:f3:9d:32:bd:4c:11:f8:ce:fc:57:a3:f9:24:1d:f6:
7e:77:ba:73:0b:c3:35:fc:72:f0:fe:df:d1:ad:b6:96:3c:a0:
f7:a5:81:be:14:0a:d9:33:87:4b:fb:08:f1:01:62:6e:6a:54:
a1:e3:1f:32:bf:3b:f2:69:0a:b5:ba:ac:d3:b9:44:e9:04:b6:
95:e8:21:32:2d:d0:38:b6:fd:7e:e8:94:30:a3:34:3e:28:51:
23:82:fd:d0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWDLEhdmPaeNQaiJxXi87u5uwB/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0
RDVDQTY4NzAeFw0yNTAyMTYwODM1NDNaFw0yNTAyMTkyMDIxNDNaMDMxMTAvBgNV
BAMTKDBGMTcyRjlCOTk2Q0NDMzEwMUIzMkM2NkQ4MTdGN0RGM0Y2QjYyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoK5vG6k8TmRm20qexwJQdBG9
ifxziVAaR05Vs0MYY6FKGewl5UoxYmYhs7/jkb71K24pbicZGTvdszKAylI309u5
HEdHQu+QnMy6wzqi0y5fMy+SaxepyJ7k0Y+ogSHl+MUyVfnqqDQML1REhHxub/MX
+eIPoM+htfVSpzKQV6tsgObYOk18Enr4bWrfi/NQlPSi5EQOHaA2YE0v2YyZeb/E
qNkVZtL/omk7+8PEhkqvd0QUyHN2HsR5kj9oqoGdyMM9EZqS77kKGQ3qo9HHMJZ5
qKL/7Z+sAbEBZiNBIwIrs5H2DbDkHhYbLR53T4hWPaBgXwN3QtjwGopjDPtXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDxcvm5lszDEBsyxm2Bf33z9rYjMwHwYDVR0j
BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4
QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD
QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2
OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1
ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABHHZTfzmvr/WBX1meTzkR0z7uPhRw5bFF94
IOom+45x6+13Gx2bWsqS/UXPYpknd5/U+a6otBc0iTcqkDzG31yJCaAq6QWm7YP+
szRRjEs+t2syHsHGB46kS7B2FsJkMwRjFHcVIxh+bi04C1Q2PIPmBk54TbojFQtC
j4N+cALsb45YwPMDq2l9PNTd9FV8sbuZYknnvBilKbu94GDxBow9f2l8C/OdMr1M
EfjO/Fej+SQd9n53unMLwzX8cvD+39GttpY8oPelgb4UCtkzh0v7CPEBYm5qVKHj
HzK/O/JpCrW6rNO5ROkEtpXoITIt0Di2/X7olDCjND4oUSOC/dA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:45 2025 by rpki-client