Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json)
Hash identifier: z+uhU+O29AF6vXJeKpa710YKgxXw5VPCa1Y9E/JbZAk=
Subject key identifier: 00:CB:6A:42:90:56:45:26:EC:8A:8B:1C:22:31:E4:BD:82:94:85:7E
Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA
Certificate serial: 27389E34EEBF7E8BBC34D5B3E178C258B92C3372
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
Manifest number: 71
Signing time: Sat 03 May 2025 12:52:15 +0000
Manifest this update: Sat 03 May 2025 12:47:15 +0000
Manifest next update: Tue 06 May 2025 22:41:15 +0000
Files and hashes: 1: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: iBwCiGq60c+2kk4AeuGkzb89D8PG4a8vEAoiYw5XZV0=)
2: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: KK4iDt8fTsMGcROdReawd5n4c23gZEw7aOn4pQj9/68=)
3: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: fAhSmS+S41MSJvz0q/GRVJfaUgOwjPmWTmUE6kvbXvo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:38:9e:34:ee:bf:7e:8b:bc:34:d5:b3:e1:78:c2:58:b9:2c:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA
Validity
Not Before: May 3 12:47:15 2025 GMT
Not After : May 6 22:41:15 2025 GMT
Subject: CN=00CB6A4290564526EC8A8B1C2231E4BD8294857E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:0c:28:7b:9a:5f:db:12:5e:5a:6a:2e:c0:
f5:f1:1c:30:01:2f:08:bc:55:90:85:11:64:b4:49:
d4:d4:a1:c2:a6:16:a9:c2:d5:e1:bf:ca:ff:c7:32:
f0:42:5c:cc:79:52:ac:40:fc:72:d6:eb:cd:69:40:
f8:f0:22:36:3c:f6:59:d6:21:4b:27:ed:aa:59:c0:
34:4a:7e:d2:1f:37:5e:92:b9:da:ca:7a:48:08:6d:
1e:26:75:71:b7:ce:36:ca:32:e6:82:f0:bc:2b:e6:
8c:6b:7e:44:94:5e:bc:e0:b7:5d:50:1f:97:02:f2:
06:ff:d0:90:df:58:81:fa:29:a0:6e:07:8a:5b:fa:
c7:d2:f4:7d:7c:b1:b4:23:d7:90:83:d8:d5:af:63:
e3:82:67:75:dd:28:00:26:10:90:d6:0d:3b:12:a4:
e1:f3:15:4a:88:1a:3a:82:d2:aa:05:16:cd:8c:ef:
1d:96:86:e4:ed:05:dd:29:b6:2a:e4:e0:5b:d7:da:
7a:9e:cf:66:8d:83:73:ea:42:84:fb:4b:62:6c:73:
80:75:22:13:7a:c3:d5:b2:cf:91:2d:d3:64:84:89:
a2:5a:b1:c0:a1:33:28:7d:c8:c7:cd:50:21:61:f6:
57:f4:cd:93:04:a5:10:5b:6d:f2:f8:cb:fa:b8:21:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:6A:42:90:56:45:26:EC:8A:8B:1C:22:31:E4:BD:82:94:85:7E
X509v3 Authority Key Identifier:
keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:b5:94:88:62:51:75:d2:5f:3d:36:7c:87:7e:1b:d9:ed:
4e:bf:a9:91:42:b5:10:b4:11:f1:0a:10:b0:8c:11:3b:af:e7:
ca:d5:27:a3:cb:1c:b8:35:87:db:2b:d1:9e:e0:fe:f4:04:3e:
40:be:8a:a8:65:be:32:c2:9e:47:65:d3:15:e3:91:9e:82:1a:
74:4c:a1:49:5a:4e:2c:06:dc:64:d4:4d:a2:4b:36:12:68:2d:
ac:30:53:e3:75:ee:03:2c:84:bc:b3:cc:1f:61:44:cd:f6:cc:
3d:75:b0:07:0b:3d:55:89:1e:ab:d1:c6:27:88:b5:19:05:3e:
33:b4:dc:42:3f:f2:37:d9:d0:cd:fa:db:e0:94:c5:b1:9b:c3:
b7:92:aa:b8:c2:a0:32:f1:85:b4:a1:5c:01:cc:2e:ad:93:85:
d2:75:5c:7b:89:f5:1c:c4:26:53:50:77:80:fa:8b:6c:e7:ad:
2d:bc:6b:09:ff:02:50:88:6a:13:b6:cb:71:50:a0:7c:ca:c1:
04:d6:02:f3:67:c3:6a:b6:ba:ff:d8:e9:05:dd:a6:0e:81:ca:
4b:ff:e3:25:34:b3:ed:32:3b:89:10:72:0f:a6:34:eb:ea:96:
b2:ec:af:3e:bb:af:69:06:17:86:59:ad:b9:91:02:34:13:0f:
ae:ff:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:09:55 2025 by rpki-client