Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json)
Hash identifier: dUv/yWbsBanxJAru4IraOa930MkigAn4mE51+twdKlk=
Subject key identifier: C7:36:80:3B:76:43:36:FC:D6:5D:AA:12:3B:12:70:4A:4A:0C:C9:07
Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Certificate serial: 31BFA20420C2CC8FF168FD4B83C9C830A90E5BCC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
Manifest number: 0131
Signing time: Sun 16 Feb 2025 01:52:06 +0000
Manifest this update: Sun 16 Feb 2025 01:47:06 +0000
Manifest next update: Wed 19 Feb 2025 12:36:06 +0000
Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=)
2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: 6MnlrWPAU8oqs4hDR7p/bh93jQIf5gGDMfBjWA2OFVQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bf:a2:04:20:c2:cc:8f:f1:68:fd:4b:83:c9:c8:30:a9:0e:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Validity
Not Before: Feb 16 01:47:06 2025 GMT
Not After : Feb 19 12:36:06 2025 GMT
Subject: CN=C736803B764336FCD65DAA123B12704A4A0CC907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:a4:e0:ed:ea:80:28:20:11:3f:b8:54:77:
70:89:5b:a7:65:75:89:ef:07:f1:e2:09:74:b0:b7:
2c:a0:37:f7:e7:05:68:05:a6:7e:0a:be:d2:c6:cc:
d3:6b:3d:37:28:c7:a0:77:f3:ef:04:21:d6:a0:ec:
34:e8:80:23:fe:94:47:0f:7c:3d:c5:62:87:c7:8f:
9c:ec:20:1e:a3:ae:9a:25:78:0e:df:78:9f:45:cd:
21:cd:f0:04:4c:3a:86:06:fa:3c:e0:47:8c:7d:72:
23:0a:fe:ba:bc:21:d9:8a:9b:9d:87:ae:02:18:52:
85:ab:fd:a6:e5:c8:d9:0b:7d:98:fa:94:e6:23:03:
c5:ac:0c:e6:16:02:19:ec:a3:66:d0:71:2e:fc:00:
7f:d4:c9:8f:62:38:06:ff:bf:c9:c8:20:4d:d3:e8:
c9:9b:ef:33:f6:3d:55:07:c0:99:e0:b2:7c:d1:d6:
88:71:02:d0:b7:8b:fc:24:f5:3d:0d:63:12:a6:83:
03:35:69:41:e6:94:f5:b6:37:4b:1a:68:9e:97:55:
80:18:75:ea:f0:84:12:4a:24:2c:d0:2a:10:30:9c:
be:18:64:b3:5f:a2:11:42:71:6b:3e:5a:e6:5d:33:
f8:62:f0:9d:79:bc:e1:83:cd:db:80:63:46:ba:1a:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:80:3B:76:43:36:FC:D6:5D:AA:12:3B:12:70:4A:4A:0C:C9:07
X509v3 Authority Key Identifier:
keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:41:6b:d0:6d:24:6f:c2:29:7a:59:ca:45:7b:17:ee:65:ff:
69:48:bb:f2:9f:dd:b9:eb:dd:4b:34:92:49:32:95:24:ed:43:
05:68:16:58:d0:9d:15:be:2a:67:f6:95:2c:5e:da:5d:66:71:
8f:f0:5a:d4:4d:1e:42:55:4f:7b:c4:10:81:5d:e8:5c:14:ac:
e7:98:7c:46:6f:27:09:bb:4d:e1:4b:62:23:97:29:0d:15:80:
9a:d8:61:c4:c7:df:fd:93:e9:54:39:f9:c4:e1:e4:00:02:8d:
25:a9:b7:ab:de:c1:c5:e2:d8:05:ee:be:8d:03:81:15:7e:3c:
5c:e3:3d:9e:ae:1a:36:04:ae:f7:e6:86:2e:a2:4a:2d:a1:6b:
40:e9:70:0d:ac:52:6c:5f:9a:47:33:7b:2a:53:46:a3:1d:71:
f5:0a:ca:73:a9:87:94:f1:a2:ae:cc:41:57:b7:94:28:c1:8a:
ed:61:47:64:26:9f:25:47:b6:4f:e1:c0:09:7a:73:8a:12:6d:
77:54:11:d5:b8:86:49:04:83:82:a9:6b:94:bc:23:68:b1:0c:
56:ab:0f:e2:d8:74:ed:c4:26:3a:0a:54:d7:4e:47:45:46:f1:
71:ad:1a:21:12:82:0f:20:5e:32:f0:5f:9c:83:17:02:d4:0d:
8d:a3:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:48 2025 by rpki-client