Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json)
Hash identifier: +W3D1EeOFLloVBrNfjTh/1juOiq6Y8eP0bLjadqgF78=
Subject key identifier: E0:BC:83:B4:05:EF:AA:55:E8:DD:3D:66:EB:98:6D:F5:4B:60:6B:94
Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13
Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
Certificate serial: 0E472B5902F5EABC016AF992B76AE14C5D58336F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
Manifest number: 01B9
Signing time: Sat 03 May 2025 16:21:27 +0000
Manifest this update: Sat 03 May 2025 16:16:27 +0000
Manifest next update: Tue 06 May 2025 19:24:27 +0000
Files and hashes: 1: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: fcf0jbm+HiTLpxvLBZNvyWHDVsx0os5wA9bQgitMn5g=)
2: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: MQLOXLE7kItbI3VqEvN4se62a6lNzHSlzAIOByXQI/0=)
3: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: lnxOKEd+PewMsG44qj3HVvV3WG1qaRgIi/Wp6zXG+ZE=)
4: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: vrAqpfPAYtQT1KRsyrqq3mpGowoSVG+riyclVKK5dVA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:47:2b:59:02:f5:ea:bc:01:6a:f9:92:b7:6a:e1:4c:5d:58:33:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
Validity
Not Before: May 3 16:16:27 2025 GMT
Not After : May 6 19:24:27 2025 GMT
Subject: CN=E0BC83B405EFAA55E8DD3D66EB986DF54B606B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:47:52:a8:11:52:f8:38:1c:ef:c5:20:d4:
b4:02:28:1a:09:14:6d:ed:c0:81:88:b2:83:60:b6:
be:9f:dd:df:76:78:64:ce:fb:a9:8b:8a:fb:8a:b4:
76:00:8a:2d:39:e2:65:32:ca:a8:c5:89:24:55:df:
1a:51:bc:bc:e8:d2:d2:4a:65:76:d6:b7:52:62:09:
93:7b:08:5a:11:34:fb:e1:25:93:32:a0:c8:2e:25:
fa:1a:8f:31:7b:b4:8f:66:4a:99:0d:23:d5:ad:03:
95:33:fa:4e:20:48:b0:3d:69:f5:a2:3e:52:9c:89:
50:66:cb:ce:2a:85:d8:e0:2a:a8:e8:00:cd:66:61:
f8:9a:54:85:8a:38:fe:30:12:87:ab:aa:0e:ca:d9:
01:90:78:43:90:bc:16:7f:79:e2:18:41:bf:86:4f:
65:66:76:2a:70:27:46:a3:2c:3a:bc:a4:4a:3d:ac:
f6:d4:ab:5e:da:31:81:00:d8:7a:68:57:21:a3:90:
8d:46:75:2f:9f:0a:ed:19:69:d6:83:2f:1a:12:d6:
42:8f:f2:c7:d7:bd:28:23:46:d7:39:e9:26:6a:35:
8e:19:d8:31:9f:1f:aa:68:2e:93:0c:c6:d6:c0:25:
3d:a6:b6:6c:99:d5:b5:21:50:60:f7:0a:34:bb:93:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:83:B4:05:EF:AA:55:E8:DD:3D:66:EB:98:6D:F5:4B:60:6B:94
X509v3 Authority Key Identifier:
keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ed:5f:63:83:5f:40:4d:dd:e8:99:32:c1:4d:4d:c0:88:f3:
81:0e:4e:2a:bd:4e:67:65:db:f8:51:6b:46:92:37:67:c5:c4:
f5:6c:c6:45:3d:c0:af:ff:4f:44:d9:55:f0:55:a9:cc:dd:bb:
a3:5b:7c:1c:1f:a3:43:a4:6c:08:65:2b:9f:d9:e4:83:03:c2:
1a:82:d8:5d:a6:a8:57:63:04:66:19:a2:ad:9d:6b:98:17:03:
22:a5:15:d0:ae:3f:7b:28:70:b1:f9:b0:b9:05:b3:bb:05:5b:
85:44:1d:44:8e:02:2d:e9:ca:60:bc:ea:68:5a:0a:ee:c7:e7:
4e:ce:ce:6d:0e:fa:85:e9:d3:2c:82:a5:fb:56:39:73:36:77:
d4:61:21:28:73:bd:2b:e4:eb:5e:95:6f:53:c6:99:01:d5:47:
ef:ec:73:cd:11:f4:b9:79:66:bb:12:96:1b:fc:ae:eb:4f:85:
3d:19:1b:98:d3:a6:d7:3d:0a:84:1a:7c:50:52:21:71:07:a9:
b6:0b:5a:7a:f7:73:49:a0:17:fe:fe:d7:ca:82:ad:65:04:19:
6e:f9:b4:2c:4c:92:74:22:48:fd:bf:c2:56:4f:65:c9:5e:c0:
35:31:f8:79:50:cf:23:4a:54:ec:9f:a9:ee:82:03:d7:76:b6:
c9:d5:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:13:49 2025 by rpki-client