Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft
File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json)
Hash identifier: +MM65cDNiiepkqNvcA+UoclA2s184HwLeUf5WQCMCGs=
Subject key identifier: 2F:9F:C6:47:48:EE:1C:F7:B2:7A:02:E8:BC:23:37:73:D8:9A:1B:21
Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44
Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44
Certificate serial: 3BDF5F3873AA955CE95A0BEC69905608F5CB63C3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft
Manifest number: 94
Signing time: Sun 04 May 2025 04:22:01 +0000
Manifest this update: Sun 04 May 2025 04:17:01 +0000
Manifest next update: Wed 07 May 2025 06:18:01 +0000
Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: th3Xv42aRE7pNCMbqK8emeLE7s2AiqsmCsXh48rzB6c=)
2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: fjfQPIQeRAZyE8ca3DfdXV+mWvwMqRd51HhQQWiMkek=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:df:5f:38:73:aa:95:5c:e9:5a:0b:ec:69:90:56:08:f5:cb:63:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44
Validity
Not Before: May 4 04:17:01 2025 GMT
Not After : May 7 06:18:01 2025 GMT
Subject: CN=2F9FC64748EE1CF7B27A02E8BC233773D89A1B21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:f8:1b:3d:44:13:96:8c:99:31:72:db:19:
3e:91:b8:19:7b:a4:36:b3:60:5d:97:25:30:d2:dd:
f4:e4:e2:1a:2b:fa:0a:9c:3f:11:d2:ad:95:18:93:
27:65:51:e5:a6:35:ab:4b:05:f7:6b:a1:99:b1:5b:
b9:8f:c4:eb:87:46:a5:6b:d9:39:1b:e8:c3:a1:d5:
df:2f:af:d9:5b:d5:02:43:42:57:51:ae:25:f6:d0:
44:dc:67:0a:f6:72:23:f9:3d:80:9f:9d:1d:91:9d:
53:77:b0:7e:f7:37:6a:60:cf:80:ab:8f:80:63:8e:
c3:bb:9e:72:8f:15:b9:c7:6e:b7:16:88:7a:72:d6:
04:9e:a7:6f:39:04:2a:ba:08:ef:fe:99:e3:c6:e1:
c0:4e:25:48:39:cf:7e:3c:4b:8e:94:3d:39:a3:75:
fb:54:e4:d2:05:61:9e:00:62:92:76:79:72:b0:7a:
d5:0f:cb:71:1f:13:aa:ba:52:fe:26:55:51:4e:2d:
62:3c:d0:72:57:7a:f0:2c:25:91:d9:c3:0d:66:5c:
1b:47:fb:c0:84:d4:3f:ec:bf:65:91:d2:3e:56:5e:
ff:d3:29:37:bc:ba:a4:a8:52:e7:da:fb:bd:8c:f0:
ab:61:82:35:f9:aa:bd:25:05:2c:d1:92:7d:12:85:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:C6:47:48:EE:1C:F7:B2:7A:02:E8:BC:23:37:73:D8:9A:1B:21
X509v3 Authority Key Identifier:
keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b0:e9:9e:84:02:13:3e:9e:89:13:87:88:19:cf:18:b2:2c:
21:82:43:03:4d:25:76:b3:ab:7b:a4:ec:a3:ee:1a:c2:7c:91:
25:89:6d:f0:30:87:b1:d5:b5:7c:f7:80:88:96:77:80:9a:3c:
7a:bc:b8:c6:fe:55:24:82:d6:bf:32:48:8a:37:56:23:18:d8:
1d:8d:bc:e1:84:56:ff:b5:fa:8f:9d:cc:88:c5:aa:f3:e7:33:
25:d0:ad:ae:21:20:ff:54:ed:1e:b9:18:87:51:b2:6e:90:e0:
72:e4:30:b5:b3:90:5f:df:27:8f:ff:eb:60:e9:5d:a0:3b:81:
f6:b6:af:bf:36:b4:5a:fa:ec:0a:50:84:9e:4e:6e:e0:18:90:
e9:a3:d6:7d:85:4d:b2:6e:3b:e9:27:96:06:f3:90:6d:4e:ef:
0e:2b:2b:96:69:8e:77:2d:51:56:70:b7:0a:46:d4:65:43:6c:
6d:78:69:73:47:59:6a:17:6c:23:f3:e0:e7:20:df:b8:57:8e:
99:c2:7a:2d:31:a5:42:04:b7:05:20:09:6d:c5:e6:37:7a:aa:
72:d0:8a:68:fa:41:fd:67:b5:13:92:02:fd:a9:dc:9d:e0:6a:
7b:b5:aa:95:97:f0:77:18:c1:b2:ab:03:bd:e0:32:df:db:72:
dd:c4:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:42:08 2025 by rpki-client