Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft
File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json)
Hash identifier: NsdI9xysAkiUy+IUDLs9YDPfprIc5q6dQ5vy4YYhyKE=
Subject key identifier: 7E:B0:A7:48:23:CE:4B:2F:22:63:4E:44:00:19:6D:10:95:6A:AE:C9
Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Certificate serial: 279692827DD470B3F9A742A30F763DB2E4F8C23A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft
Manifest number: 012A
Signing time: Sat 15 Feb 2025 15:11:03 +0000
Manifest this update: Sat 15 Feb 2025 15:06:03 +0000
Manifest next update: Wed 19 Feb 2025 02:06:03 +0000
Files and hashes: 1: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: GSS3VdfbXhpyfUsGe9HurphtU+gPdP8k3c8Q6Iv7+RM=)
2: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: f48Cy1U7udxBY7J5ME0Gs+AuNWTYX+G7wDW6QnQhy6I=)
3: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: PS1BhTpFCm3WSEPx0BSWdx2apjX4KaO+e/LyGvpSmtQ=)
4: 3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa (hash: 7LlAdTViR+6wbsIPoy9XFjZU3RqqVqstu1qtg3UwKgc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:96:92:82:7d:d4:70:b3:f9:a7:42:a3:0f:76:3d:b2:e4:f8:c2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Validity
Not Before: Feb 15 15:06:03 2025 GMT
Not After : Feb 19 02:06:03 2025 GMT
Subject: CN=7EB0A74823CE4B2F22634E4400196D10956AAEC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:7d:12:55:5b:05:3b:82:c6:59:64:8c:21:
39:3d:c8:28:23:43:44:94:b8:b8:6d:18:ff:f4:1c:
fe:1a:28:39:f2:a0:51:41:28:f9:cb:be:7f:3f:8c:
20:fc:f2:63:30:34:54:04:db:02:91:6a:55:08:1c:
b5:41:4f:2a:65:10:8c:33:ad:54:a0:b2:6e:e5:7c:
3d:7a:26:de:89:87:dc:a7:ee:8e:25:2e:ee:3d:27:
7e:6e:2a:67:e8:82:35:fe:f8:31:b3:ac:61:3b:25:
e8:4f:4d:8e:a9:86:10:1d:ab:39:d5:99:14:2c:a8:
ac:5f:1a:03:24:0f:fc:0b:cf:a2:6b:92:85:2d:45:
41:0d:a4:a7:ef:22:7f:79:49:2b:ff:c5:cf:ab:a3:
ed:1a:1b:23:99:59:5e:d4:4b:71:9a:53:b7:cb:f3:
68:30:5c:6a:05:ea:54:be:1f:e5:25:01:e9:f0:b9:
53:2c:97:dd:a5:99:f9:a2:6e:36:49:72:77:6f:09:
c4:06:91:04:d8:6a:86:ba:cc:d2:82:c0:00:0b:8b:
1d:9a:0e:84:08:17:04:c3:0e:b1:5e:ae:b5:d0:df:
d6:59:96:05:75:db:9c:ee:f2:21:20:8c:9f:4c:73:
7f:73:88:be:08:38:e8:61:ed:86:f9:6f:9d:46:89:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:A7:48:23:CE:4B:2F:22:63:4E:44:00:19:6D:10:95:6A:AE:C9
X509v3 Authority Key Identifier:
keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c2:df:41:60:31:c8:65:05:92:1e:9b:89:26:54:0c:a5:09:
82:cc:96:fe:b9:57:0e:85:c3:7a:5f:cb:7d:96:ec:41:ac:76:
ce:81:af:9f:bf:e3:1d:5f:b1:bd:c1:1d:23:c8:b7:73:9c:53:
cb:8d:be:fc:00:71:ac:fb:23:f4:53:d8:a5:5c:6e:07:8c:6d:
a8:38:96:a5:3a:6b:18:78:5d:26:d5:37:d1:07:32:10:e4:4f:
f9:a2:70:bc:0e:8c:16:6c:d0:1f:2e:1b:65:00:25:04:03:c2:
b1:e3:82:57:49:7f:35:5e:5b:58:0d:52:75:d6:24:22:71:37:
35:57:c2:25:52:ce:47:ac:7f:db:72:80:6c:c6:f5:a6:43:ca:
7c:55:19:b7:49:19:30:04:a2:e1:d5:7f:ec:fb:50:58:6c:77:
73:32:39:30:ad:a3:85:f4:83:5b:0f:8a:86:6d:21:e1:ef:ac:
8b:d8:e1:59:e2:a0:19:8d:79:25:6b:49:c1:2d:a3:5a:64:1e:
70:54:2f:88:34:bb:d4:e0:52:a0:ff:c6:96:89:86:01:cb:b4:
f1:c8:7a:d5:33:03:b7:b9:36:6a:1d:22:8f:75:69:03:93:ba:
56:4d:e1:7b:58:3c:c9:57:c1:5b:01:b0:d3:b4:d4:13:c0:c2:
e5:18:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:32 2025 by rpki-client