Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft
File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json)
Hash identifier: 2bKnmp/8CGoZH7Ucz+vRmbYKxdPqFCoBojJHjtzKHUs=
Subject key identifier: 7B:46:6E:48:E8:10:CB:EE:20:EA:97:C7:69:2D:E0:18:E0:BF:34:82
Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Certificate serial: 01BCD954C52C0E95B5C58AD6103D142DCDD5E31A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft
Manifest number: 0204
Signing time: Sun 04 May 2025 06:31:46 +0000
Manifest this update: Sun 04 May 2025 06:26:46 +0000
Manifest next update: Wed 07 May 2025 07:06:46 +0000
Files and hashes: 1: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: wvZTsmbtbDOiR7dGDZGiHwPRpVyyqjRz7RN0Lj8ytAE=)
2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: sexqXYVW8ieC6sdlJt/dGasLBkG6h3AUR692knSaF1U=)
3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: vQcGVK6JhkO4JP+rgl0UnF9Tyyv/ls7fzCiRnSShb9U=)
4: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: sDxRXCQp0YhA4EUoYPlhgRc1l3DUG/A3owlHLie+cQg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bc:d9:54:c5:2c:0e:95:b5:c5:8a:d6:10:3d:14:2d:cd:d5:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Validity
Not Before: May 4 06:26:46 2025 GMT
Not After : May 7 07:06:46 2025 GMT
Subject: CN=7B466E48E810CBEE20EA97C7692DE018E0BF3482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:cc:3f:eb:8c:cb:fa:a9:df:20:51:6c:b4:
32:22:ca:26:57:53:a9:6b:9b:09:92:7c:21:9d:dd:
2f:40:2e:85:59:15:de:77:a3:6a:34:c0:4d:bd:dc:
6b:a2:cc:8d:48:a7:64:1b:0e:1d:99:df:fa:54:98:
a4:25:0d:74:a6:a6:26:19:a0:b9:e3:0f:a1:53:7a:
9b:41:30:00:d3:9d:e0:51:73:e6:5e:31:dc:55:86:
d6:b4:ab:d3:05:2d:e3:7d:e1:e0:14:91:73:cd:ea:
d8:ed:d5:39:2f:72:e7:3f:77:b7:23:41:b5:84:be:
8c:4a:e6:69:58:85:fe:66:46:33:50:7b:79:73:bb:
0c:9d:2e:1d:a8:c9:5c:e0:1d:51:76:9a:b1:12:e6:
d4:71:97:6d:25:05:e3:f8:b2:b4:f8:cb:62:e6:e6:
50:c7:42:35:0d:60:31:3e:84:f9:ab:e6:1d:b0:07:
cd:9e:b5:d3:81:b9:55:8d:6b:56:0b:9f:70:93:6b:
8d:ab:60:57:37:ea:ea:65:a6:6a:9e:a3:c1:74:ee:
85:2b:32:b8:c5:a9:9f:77:6d:75:34:bd:81:61:03:
6e:00:9a:a8:47:8c:0b:2c:b6:94:f5:84:38:aa:20:
36:a2:8b:03:49:58:b9:3e:52:af:b7:ee:9d:d0:05:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:6E:48:E8:10:CB:EE:20:EA:97:C7:69:2D:E0:18:E0:BF:34:82
X509v3 Authority Key Identifier:
keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:33:c0:74:2a:1a:96:5a:f6:76:fb:8b:17:0a:11:81:7a:
02:aa:fe:50:98:88:1b:9e:91:35:1b:55:47:d8:b1:70:ea:7b:
54:02:f2:3f:9d:be:b9:ed:61:39:5d:4c:27:69:76:34:9f:f3:
6c:21:e7:04:2a:54:05:b2:de:ba:61:9a:f6:d1:8c:7f:b7:34:
ec:75:e5:3d:1b:77:f5:79:d6:18:1d:dd:ee:e4:5b:ba:af:a3:
66:4e:18:bb:d3:8f:3f:42:98:19:9c:b9:e6:73:c5:77:ba:f6:
f2:f3:e8:54:ad:38:fa:f1:6e:ee:1b:39:cf:36:44:b1:c2:ea:
f3:6b:a0:b0:e8:07:ca:c7:a1:31:78:b5:c2:f9:d0:f9:dc:53:
89:91:01:af:81:05:7b:83:f7:30:63:46:86:6b:64:04:b0:57:
6f:f3:00:cd:8f:fd:0c:c0:92:1c:3f:a3:24:96:1c:98:79:65:
1c:da:01:3c:d7:6d:9f:eb:49:4c:bf:09:de:21:6d:ef:fe:07:
82:26:79:b8:62:4e:bd:74:a9:10:2b:04:69:ed:c4:71:de:e6:
2e:de:b7:07:6a:a2:f8:0f:30:70:29:0d:9f:c2:1b:ab:ac:98:
cc:67:93:58:de:d9:2e:ae:88:f0:9f:db:60:53:09:f7:da:75:
fa:fa:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:46:07 2025 by rpki-client