Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json)
Hash identifier: ieZEzowBmdWovelqIJ/XzXEnF+fNDMTRdSRaFnmOleE=
Subject key identifier: 7F:FE:E0:BB:8A:3A:C7:6C:5D:B2:99:3F:67:42:AC:38:72:85:33:CF
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial: 5D90720516B772418ABA312B1D8B056BFC8E9EAA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
Manifest number: 0204
Signing time: Sat 03 May 2025 14:11:37 +0000
Manifest this update: Sat 03 May 2025 14:06:37 +0000
Manifest next update: Wed 07 May 2025 02:01:37 +0000
Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: /hsHlytGSIEPe0GxgSOfGs3J1HDdS9+raMR80Eb5wQY=)
2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 2wBOZUnxy6X5m3+lNkjmU4KdnF5wKP3vz0BnFhgKPHA=)
3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: gNkqorvk0f2bBTsmEL4MnNlyYJ+Qr0d2hFD2R7VVU4Y=)
4: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: wyr+sUIpVX6AlZd2ZooHCeZJyZXXHDlY7zyJYk4Lgtg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:90:72:05:16:b7:72:41:8a:ba:31:2b:1d:8b:05:6b:fc:8e:9e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Validity
Not Before: May 3 14:06:37 2025 GMT
Not After : May 7 02:01:37 2025 GMT
Subject: CN=7FFEE0BB8A3AC76C5DB2993F6742AC38728533CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:b5:91:fb:b2:84:5b:7f:61:39:c6:2a:4d:
e5:ff:17:a2:55:aa:fc:88:7a:7d:ef:94:76:7d:d3:
86:ed:f3:9b:31:4d:32:de:62:cf:08:83:93:d9:35:
03:8d:75:cf:af:7f:23:66:dc:48:a8:f1:e9:6e:9a:
1b:56:80:78:cd:3c:2b:c1:93:91:15:c7:df:1e:58:
32:7c:1e:b7:cd:d7:ba:39:6a:cc:1c:9c:d4:a2:77:
70:48:e1:82:cc:a8:05:56:bf:47:de:2e:8b:19:1f:
b8:78:8c:0c:f3:1d:8d:76:e8:e5:31:f0:aa:7c:2e:
8b:ff:f7:c4:45:7d:4d:bb:8e:29:91:b2:59:cd:e0:
f3:bd:23:38:35:af:a3:80:2a:e4:d8:af:a1:c5:e2:
f0:07:9e:43:de:c0:8d:20:d1:84:f6:7d:88:2f:46:
97:65:c3:27:46:35:03:c2:fe:20:c7:13:57:ac:35:
5e:2d:97:40:76:67:35:c8:60:bd:7f:8d:16:8b:87:
a5:f1:40:46:2b:1a:ed:00:54:32:a7:f8:01:7d:4a:
b5:2e:f6:53:44:85:09:7f:2c:26:1a:45:88:51:99:
a1:c5:bd:79:4b:fc:b1:3e:07:bf:db:67:4c:c2:f5:
0a:59:8e:cc:9b:5f:7d:c7:a5:f6:50:f9:12:55:44:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:E0:BB:8A:3A:C7:6C:5D:B2:99:3F:67:42:AC:38:72:85:33:CF
X509v3 Authority Key Identifier:
keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9c:95:08:a9:31:76:a1:9d:70:8a:cb:d5:94:15:50:ed:a1:
c7:84:f9:62:ef:fd:08:2f:bb:5f:2d:8e:7d:07:be:99:1b:86:
be:92:ec:e7:89:23:59:5d:b0:7d:80:42:21:c0:a9:91:27:01:
06:01:cb:0d:8f:ed:05:d1:3c:3c:d7:5b:89:a0:1c:69:12:9a:
75:7c:f3:cc:38:e0:ba:be:fe:91:6c:b5:59:ae:41:9b:61:76:
64:80:8d:d3:77:77:86:e1:d0:a6:95:91:85:dd:17:9b:66:d2:
0f:31:ea:0d:52:7a:db:79:83:03:c8:7e:71:e1:eb:bd:9c:5b:
9c:e8:fe:81:0d:cc:27:45:0a:a7:95:f0:b1:1f:a4:5c:6e:2a:
d2:14:21:aa:78:76:5a:b7:3f:07:45:ed:bc:fb:78:c1:e9:d9:
06:c6:81:97:08:17:75:d3:b8:de:9a:e6:60:0f:24:70:2c:11:
0d:8a:bd:e0:2a:3e:e1:78:fc:d5:f0:ba:93:0f:c9:39:3f:8f:
11:0d:91:3b:22:cb:d7:db:7e:6d:6b:6c:f8:68:09:58:39:07:
b3:9c:92:1e:dc:11:c1:ae:3f:55:49:b5:aa:cc:84:41:62:79:
ab:b6:58:0c:e4:67:3c:3f:3b:7b:ba:5e:5e:e2:4d:ad:26:a1:
4a:62:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:11:39 2025 by rpki-client