Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft
File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json)
Hash identifier: JB8sEVDRQxkl//3Mbby2SlaYqjk9oscFJgKR9HDIXcY=
Subject key identifier: 3B:3E:D0:76:F2:AC:FF:A5:06:45:22:BA:35:47:73:0B:10:80:24:5B
Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19
Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
Certificate serial: 25FFDEAB7375EB193E63A58BF39924C4C0BB88D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft
Manifest number: 73
Signing time: Sat 15 Feb 2025 15:11:26 +0000
Manifest this update: Sat 15 Feb 2025 15:06:26 +0000
Manifest next update: Tue 18 Feb 2025 22:45:26 +0000
Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: oimBMapHvOPekpMKYeXjcObd2iEYanNSfHzOxjnrDSk=)
2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: yxChVSnUcBAshSi2tdYxCJl1ssWL26R5uijV6Q3HksQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ff:de:ab:73:75:eb:19:3e:63:a5:8b:f3:99:24:c4:c0:bb:88:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
Validity
Not Before: Feb 15 15:06:26 2025 GMT
Not After : Feb 18 22:45:26 2025 GMT
Subject: CN=3B3ED076F2ACFFA5064522BA3547730B1080245B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:57:16:68:49:e0:1d:fb:96:91:34:b9:82:
21:3e:85:29:28:84:83:a4:3f:94:1d:7c:e4:10:31:
af:cf:1a:38:33:dc:aa:09:62:d7:6f:9a:ec:3e:2d:
28:66:c2:82:14:c7:c1:16:54:5a:23:1b:f6:9e:5b:
10:4b:24:ab:de:2e:03:7b:92:cf:6e:a0:4e:10:47:
d6:a6:7a:fe:d5:bc:e4:4b:6d:5c:ee:a3:fd:1e:4a:
83:e1:31:23:8f:f4:0f:55:9a:72:6e:3b:8a:39:41:
b4:53:6c:39:73:ea:68:94:61:f0:e4:c2:97:23:69:
80:e0:81:80:75:8c:68:ed:15:d1:8f:a9:aa:ba:45:
04:ce:db:be:88:33:5d:a4:5c:c3:2d:47:de:f9:67:
23:ad:e9:0b:90:82:fa:7b:58:f3:b5:12:c9:e3:b3:
3e:95:40:5b:37:5d:e6:e2:c9:2e:5b:c9:93:0a:65:
f0:f1:bf:ae:25:91:76:57:bf:88:4f:d9:d4:9f:4a:
2d:87:31:96:55:ae:55:5e:68:d0:60:ee:42:10:96:
1a:f4:b1:70:98:0b:fb:36:a0:79:01:be:c1:11:23:
b9:be:4a:5a:8e:44:a4:32:6b:d1:d1:ae:86:12:dc:
d9:c6:89:0e:44:71:ce:8b:f7:b4:93:6e:d7:73:f7:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3E:D0:76:F2:AC:FF:A5:06:45:22:BA:35:47:73:0B:10:80:24:5B
X509v3 Authority Key Identifier:
keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8c:4d:41:d1:3d:40:0e:3a:b3:f0:b9:26:90:cd:6e:41:3d:
e2:a9:7f:d2:07:e8:c0:45:d3:fd:8c:0e:d9:ad:a4:8c:84:5b:
59:3d:0a:6f:84:a6:93:b1:7a:11:05:69:84:43:75:c9:29:c8:
a8:9b:12:65:41:3f:c8:d6:0f:c2:29:54:eb:b2:b1:d5:f7:45:
ed:fa:57:ba:6d:88:2e:a0:33:6b:78:ca:03:79:25:a3:a3:1a:
df:56:9c:31:5e:4e:ce:a7:03:fa:28:ad:a1:b2:cc:62:f9:d8:
86:0e:16:67:ef:7d:92:cb:d4:9e:f2:2b:f4:00:ed:c5:2a:62:
8d:31:58:ad:9c:76:bf:62:e9:87:b6:41:cd:7b:9d:5c:b3:2a:
23:de:06:fe:b9:1b:fb:c5:d4:03:e9:5d:b5:52:7f:6a:7b:2f:
be:80:16:ea:98:f5:9a:81:5b:ab:8e:d9:00:ae:24:70:7d:4e:
53:0a:11:72:a9:d9:71:07:a5:19:cb:8a:30:fc:2a:8b:50:8f:
65:77:e1:39:9c:7c:42:25:cd:56:66:fa:00:c3:04:83:be:81:
64:37:72:ee:5b:32:56:d5:02:bc:45:4a:93:e1:9b:6a:85:f7:
f4:82:68:06:7a:92:e2:7d:a3:08:ca:1a:a1:f4:8c:48:d2:94:
ea:0d:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:30 2025 by rpki-client