Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json)
Hash identifier: RZqdZQEMfdmCOtlx+7qYfCBr4P81UM5WyKBOqygjT7A=
Subject key identifier: D9:1E:46:98:B3:5C:04:C6:95:57:F1:97:4D:26:5A:A5:FA:0C:BD:62
Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Certificate serial: 790200229519E73880537C0E287936D6904B9F4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
Manifest number: 0115
Signing time: Sun 16 Feb 2025 04:01:16 +0000
Manifest this update: Sun 16 Feb 2025 03:56:16 +0000
Manifest next update: Wed 19 Feb 2025 05:29:16 +0000
Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: SCLLjvt62shcgQbPXdPmBfBf107r/8VV9UvYk/GiWlU=)
2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: lNUVXEP6ws0KNXWkOdcFHdX37i6dG9Y+8PzDuRErxcs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:02:00:22:95:19:e7:38:80:53:7c:0e:28:79:36:d6:90:4b:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Validity
Not Before: Feb 16 03:56:16 2025 GMT
Not After : Feb 19 05:29:16 2025 GMT
Subject: CN=D91E4698B35C04C69557F1974D265AA5FA0CBD62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:d9:f9:e9:0c:53:0b:1d:61:e2:08:b3:37:
2b:fb:9a:5c:30:68:fd:ee:2e:66:fd:97:f4:32:2a:
c7:87:6b:cf:6b:8e:1f:aa:d9:83:c4:bf:71:d5:04:
34:d9:c2:4b:ca:cd:ec:77:b3:1c:ae:f2:0e:cc:51:
be:73:13:7a:39:20:be:11:c9:53:ed:ae:b6:a0:31:
e9:66:0e:20:34:55:94:a3:27:aa:59:8d:8b:bf:f8:
80:40:a6:ce:77:94:84:7b:ba:4f:ce:e0:fc:31:e5:
41:9c:5f:c3:fb:6a:78:4b:26:ee:6f:5a:f2:25:ab:
2d:b5:bb:94:77:b5:b8:96:f5:50:e0:12:40:0f:c0:
e5:c5:46:2c:60:fe:84:52:cd:cb:54:3e:7a:a8:69:
74:64:56:37:12:ba:6a:d3:96:64:91:dc:e8:f8:76:
66:40:12:82:9d:0d:57:61:8b:4b:1f:e0:0e:2e:e2:
4b:8f:f1:6c:cc:77:c8:8d:56:7e:3e:65:71:31:7f:
e3:fc:81:bc:0c:e3:ff:62:e6:21:00:d1:7d:64:9f:
ff:36:01:d3:8f:97:f8:60:d9:e5:53:4b:8a:86:3e:
e3:de:fc:73:8f:5b:48:d9:76:01:6f:b3:9d:30:41:
3b:de:fe:51:9f:89:d4:93:68:0e:26:ea:3f:67:cb:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1E:46:98:B3:5C:04:C6:95:57:F1:97:4D:26:5A:A5:FA:0C:BD:62
X509v3 Authority Key Identifier:
keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:51:07:0b:e0:10:e6:a4:39:9c:45:53:57:a6:5f:42:99:26:
cd:28:d9:88:aa:58:de:47:7f:b0:72:d0:c3:f3:d1:95:a5:dc:
98:04:53:13:fe:ee:fd:c0:d2:3c:1f:fe:16:86:cd:df:90:d4:
76:66:5c:35:18:fa:21:dd:36:b9:0a:ca:90:d1:b4:39:bf:b2:
af:1c:4a:ab:89:ad:9f:9f:55:85:59:f9:c1:db:82:4e:c7:0c:
0e:c2:2a:08:f2:ad:86:65:47:d0:00:2f:bc:7e:85:cd:31:98:
1c:69:77:b8:d7:fa:69:91:2c:eb:0d:17:44:36:29:b4:d5:5f:
3c:56:5a:96:ce:ee:41:29:7f:b6:ae:3e:43:5a:4e:37:72:f6:
a3:e9:f9:eb:95:d4:30:cd:65:9c:57:9f:bc:76:5a:46:d0:f4:
e4:b4:03:95:51:e4:d1:b6:df:78:70:82:9d:6a:9a:8a:f2:d4:
3d:8d:f3:5f:4f:68:8b:4e:dc:f7:99:cf:66:a0:be:4f:3a:c9:
27:d6:8d:a3:1e:b9:87:4a:53:1b:7e:3b:5d:e4:a2:5e:f5:07:
af:1d:cf:86:d1:96:e9:68:a2:f7:a0:ab:64:0a:31:fa:78:82:
bd:36:54:ad:a9:9f:f4:1d:f7:41:9c:23:b6:e7:af:bd:46:99:
63:c4:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:44 2025 by rpki-client