
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json)
Hash identifier: CVZmwvw+wzDTSot1h6kvThlIzGLeWVSMh4KQ7epOKgQ=
Subject key identifier: BD:E9:4A:F7:33:B1:14:E2:79:27:2E:F8:45:DD:70:06:87:43:0F:A5
Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2
Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2
Certificate serial: 34A63074A4521FBD559C72B3DA39EFABE7BD7F31
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
Manifest number: F5
Signing time: Fri 02 May 2025 23:22:04 +0000
Manifest this update: Fri 02 May 2025 23:17:04 +0000
Manifest next update: Tue 06 May 2025 10:52:04 +0000
Files and hashes: 1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: RrVZtPyxriEQoVj6hpGW8F99p0sxhNdONDeKgEJDDvs=)
2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: /A9HXd13I0+DkmsbISwlDHjrM6YvxlLYkQQcEaMVLGM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a6:30:74:a4:52:1f:bd:55:9c:72:b3:da:39:ef:ab:e7:bd:7f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2
Validity
Not Before: May 2 23:17:04 2025 GMT
Not After : May 6 10:52:04 2025 GMT
Subject: CN=BDE94AF733B114E279272EF845DD700687430FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:5f:0e:64:f8:72:87:1c:49:40:1f:70:9d:
39:7e:a3:e3:d7:76:bf:34:8c:b7:8c:87:c8:c4:bd:
44:94:8b:bc:33:0f:ff:ed:38:00:2e:ed:fb:e9:b4:
c9:e9:7c:37:11:87:77:dc:c4:c6:1f:81:68:cb:ad:
1b:3c:fc:3d:35:b3:49:f6:32:b2:f5:11:68:3c:1f:
67:78:14:85:30:3f:31:1b:01:b8:c5:6c:da:f4:94:
40:1d:d8:db:32:1c:41:34:58:6d:5d:09:4c:90:e6:
9b:d5:c6:8e:9e:4f:9d:42:bc:45:c6:c5:55:85:97:
cb:92:5f:84:11:ef:54:6b:c8:24:0d:2d:7d:df:45:
59:d0:69:c4:0a:3f:c8:21:4c:d6:8e:b7:28:75:b0:
24:93:eb:16:27:b8:47:cd:b0:a3:a0:f0:e8:cc:8a:
98:dc:36:49:45:61:ab:3f:42:2a:99:4a:a2:f0:a5:
a3:21:d1:7e:c9:f9:e3:eb:50:94:96:30:67:fa:5f:
11:22:40:da:71:29:10:78:af:d8:3b:cb:f9:ad:21:
4c:32:8c:7f:06:29:1f:d8:0c:f3:dd:5f:7a:ac:a7:
e7:ce:8d:c1:90:ef:34:47:ce:06:9c:66:67:f3:1b:
d4:1a:17:5e:57:3b:c2:cb:8c:50:7b:7c:76:10:5d:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:4A:F7:33:B1:14:E2:79:27:2E:F8:45:DD:70:06:87:43:0F:A5
X509v3 Authority Key Identifier:
keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:41:b1:08:55:b8:b4:53:61:a7:f2:0a:dd:7b:1d:01:b5:24:
1d:55:81:7d:89:8f:66:ba:9d:0e:a2:19:bf:cd:57:e3:ca:8a:
94:0c:78:60:a6:00:90:60:83:91:5c:e1:c5:13:62:3e:a3:e3:
6d:1b:43:0b:ce:ea:a7:fa:a2:80:b2:db:ce:71:d9:60:09:c0:
f6:a9:58:28:c1:b8:d4:00:0a:20:f6:fc:14:6a:c2:ec:44:79:
6a:4b:b0:15:b6:d7:ac:03:45:58:01:ed:24:6f:52:12:94:62:
2a:b7:20:12:4e:63:d9:8c:1b:9e:d8:81:e3:c5:0b:03:d4:3a:
8a:b5:65:69:7a:e3:11:fb:cb:63:3b:22:90:f6:c4:8d:9a:22:
53:d2:ed:3c:6f:03:c7:c6:e8:7f:95:f6:2e:1b:ab:f8:0f:66:
53:8c:29:07:a6:f0:6f:fa:6d:b0:40:64:9e:bd:67:24:9d:29:
8f:ed:77:27:5e:3b:5c:c5:cc:36:c6:f6:3f:ab:43:12:e4:87:
7c:36:70:a3:cc:ea:b4:f8:ec:f7:b4:9b:d3:04:75:9e:33:dc:
8a:5c:c4:26:4a:28:0c:d7:a0:8a:33:c3:77:89:2f:cc:64:86:
7f:aa:9d:88:61:8a:3c:8f:4c:fc:8b:97:34:12:19:86:53:8c:
5c:43:b5:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNKYwdKRSH71VnHKz2jnvq+e9fzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE
NDBGQjhDMjAeFw0yNTA1MDIyMzE3MDRaFw0yNTA1MDYxMDUyMDRaMDMxMTAvBgNV
BAMTKEJERTk0QUY3MzNCMTE0RTI3OTI3MkVGODQ1REQ3MDA2ODc0MzBGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEV8OZPhyhxxJQB9wnTl+o+PX
dr80jLeMh8jEvUSUi7wzD//tOAAu7fvptMnpfDcRh3fcxMYfgWjLrRs8/D01s0n2
MrL1EWg8H2d4FIUwPzEbAbjFbNr0lEAd2NsyHEE0WG1dCUyQ5pvVxo6eT51CvEXG
xVWFl8uSX4QR71RryCQNLX3fRVnQacQKP8ghTNaOtyh1sCST6xYnuEfNsKOg8OjM
ipjcNklFYas/QiqZSqLwpaMh0X7J+ePrUJSWMGf6XxEiQNpxKRB4r9g7y/mtIUwy
jH8GKR/YDPPdX3qsp+fOjcGQ7zRHzgacZmfzG9QaF15XO8LLjFB7fHYQXTClAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvelK9zOxFOJ5Jy74Rd1wBodDD6UwHwYDVR0j
BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE
M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG
QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3
NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy
NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF5BsQhVuLRTYafyCt17HQG1JB1VgX2Jj2a6
nQ6iGb/NV+PKipQMeGCmAJBgg5Fc4cUTYj6j420bQwvO6qf6ooCy285x2WAJwPap
WCjBuNQACiD2/BRqwuxEeWpLsBW216wDRVgB7SRvUhKUYiq3IBJOY9mMG57YgePF
CwPUOoq1ZWl64xH7y2M7IpD2xI2aIlPS7TxvA8fG6H+V9i4bq/gPZlOMKQem8G/6
bbBAZJ69ZySdKY/tdydeO1zFzDbG9j+rQxLkh3w2cKPM6rT47Pe0m9MEdZ4z3Ipc
xCZKKAzXoIozw3eJL8xkhn+qnYhhijyPTPyLlzQSGYZTjFxDtSw=
-----END CERTIFICATE-----
Generated at Tue May 6 19:27:55 2025 by rpki-client