Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json)
Hash identifier: KKvPhx6U+r43UIZjYlDAibIPCKvX/rrh4C8WPrTou+o=
Subject key identifier: 6C:28:50:F4:02:60:CC:BD:A1:5B:BE:E8:6A:FC:65:9D:F7:E1:C8:E9
Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Certificate serial: 76B5B639AA0071957D9246DE20B33D1E646936F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
Manifest number: 0189
Signing time: Sun 16 Feb 2025 01:20:51 +0000
Manifest this update: Sun 16 Feb 2025 01:15:51 +0000
Manifest next update: Wed 19 Feb 2025 13:11:51 +0000
Files and hashes: 1: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: 5MZhDLL8xankx85zftc7LQ5KDphfhoICWyMwFLTFJx8=)
2: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: CZ4K7GFD9Go5aD48WSkhSXI8wxpmYnTQCrXJMjgAzo4=)
3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: wNXvnBOlqkuZ+mDM8d8H+wRf148WwJ/aSIjk47cajS4=)
4: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: Y9UwdeMAqthoV4BdpHdzHHfHrHSy2NpCx4uk4sbXYrk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b5:b6:39:aa:00:71:95:7d:92:46:de:20:b3:3d:1e:64:69:36:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Validity
Not Before: Feb 16 01:15:51 2025 GMT
Not After : Feb 19 13:11:51 2025 GMT
Subject: CN=6C2850F40260CCBDA15BBEE86AFC659DF7E1C8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:e9:ee:56:62:86:8f:ab:af:32:b8:38:4f:
53:83:4a:e2:98:7c:0f:3c:b4:f6:a7:58:52:c7:62:
58:d8:8a:74:2c:24:5d:a6:c9:53:a6:74:44:12:e3:
bd:10:53:b1:18:c8:9d:8d:a7:78:a8:33:c7:61:a8:
56:f5:be:c4:c5:c0:21:ea:f8:5b:da:42:1b:f1:ea:
34:7a:5a:7f:e9:43:18:0f:0b:5b:a6:b5:8b:d8:a9:
82:6a:65:8c:fc:82:31:eb:f5:a9:b8:6a:7c:d8:ed:
8c:02:4d:7e:e0:62:da:6f:7e:e9:1f:c5:8b:a3:82:
35:82:de:e1:84:8f:4b:b3:3d:69:8a:43:ea:9a:27:
bc:6b:79:72:10:95:d4:28:c8:6a:44:8e:15:e5:c1:
c6:e2:c7:52:7a:fb:9d:7d:a5:d3:d1:bd:e8:f6:de:
e0:b2:d9:18:69:4b:63:25:71:ad:db:d8:05:07:b5:
69:35:a1:05:1a:2f:9f:cd:6d:01:c4:55:56:ff:df:
cc:d0:e7:83:98:84:8a:8a:7d:a7:2a:32:5e:01:e2:
78:6a:ba:53:a0:c7:93:c1:d1:4a:97:34:97:12:67:
75:f4:5e:15:2c:cc:81:2f:4f:2e:9e:c9:62:b4:d7:
4a:8f:2c:b7:2d:ea:98:50:a7:ed:27:76:af:29:b9:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:50:F4:02:60:CC:BD:A1:5B:BE:E8:6A:FC:65:9D:F7:E1:C8:E9
X509v3 Authority Key Identifier:
keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:59:e6:99:6f:50:8c:e6:0d:76:67:f5:12:37:6a:c2:6d:
40:db:07:dc:90:4a:28:77:23:ed:5e:f4:ea:2c:95:43:c8:0c:
fc:11:0e:79:ac:b3:0b:8d:af:df:5e:e4:1c:59:ec:0c:30:50:
d6:01:ee:27:0f:2d:78:56:5e:b7:50:67:5a:13:8b:62:53:f2:
0f:0f:b1:dd:20:74:3a:9d:95:83:72:92:0a:47:5b:cb:bb:0a:
7a:06:75:37:39:73:52:ff:82:1d:bd:fa:eb:2b:43:ad:53:f4:
6e:de:74:6d:9c:0a:0f:e7:8d:6b:54:e9:d5:d6:07:79:76:a4:
ba:c7:2a:f9:76:48:30:57:e4:a2:eb:fd:13:9d:8a:f2:5a:0e:
d1:8d:11:fb:5e:f2:18:71:36:13:96:ed:54:bd:fb:dd:99:cc:
eb:49:55:f8:b8:f0:bd:be:fc:78:08:b5:9b:d6:59:9d:b6:f3:
b1:de:24:22:a6:6c:c2:f1:2f:f9:cd:22:65:a3:12:77:df:7a:
04:23:41:da:a0:91:41:2f:da:af:76:b0:d2:b9:8e:5f:58:ee:
8a:89:6c:84:a0:2a:39:53:60:e3:46:73:18:ff:4e:f8:68:f1:
7c:16:7a:a7:9e:38:12:42:6b:db:e2:9a:b4:06:4e:0f:31:ea:
86:e2:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:57 2025 by rpki-client