Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
File: 2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json)
Hash identifier: Q5hnXpPqmdUTA8oYE8cgMILRkVPTJ8jLSE8MfzO/Gms=
Subject key identifier: A9:AF:52:99:73:4E:F5:DF:99:A4:83:92:CD:39:CC:8E:F2:D8:CC:71
Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345
Certificate serial: 08B9527C6DA21A99ECFE8AC2AC40F3B4A3785F70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
Manifest number: A1
Signing time: Sat 03 May 2025 18:31:10 +0000
Manifest this update: Sat 03 May 2025 18:26:10 +0000
Manifest next update: Wed 07 May 2025 00:55:10 +0000
Files and hashes: 1: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: UMm8CVytUz3mnXPaURu9cvBWCMEG+/Kh9q1dvGzVdN0=)
2: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: Du41YA1NCiK2HlEV88F/QDnyK1sLmVF33xCMfe54rMI=)
3: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: FayZhnN2M1G1PfKB3zh5jgF0+BohK9N2BTkuZsZg+AY=)
4: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b9:52:7c:6d:a2:1a:99:ec:fe:8a:c2:ac:40:f3:b4:a3:78:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345
Validity
Not Before: May 3 18:26:10 2025 GMT
Not After : May 7 00:55:10 2025 GMT
Subject: CN=A9AF5299734EF5DF99A48392CD39CC8EF2D8CC71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:25:54:a4:14:b5:69:32:f7:50:67:ce:ce:
6e:25:b5:8c:cb:73:8b:3c:03:c1:fc:79:eb:58:05:
56:70:68:af:33:e6:61:c1:db:28:61:65:f4:dc:ad:
83:f6:76:ca:a8:02:5a:a2:2a:0b:5a:ea:c4:66:81:
08:d2:f4:9a:eb:e8:e9:f8:73:11:15:81:82:dd:e0:
75:1d:59:44:53:93:a3:18:cb:4e:a3:df:3e:30:20:
39:8f:a3:17:9f:02:b2:bc:b9:16:2e:44:e7:58:e2:
bf:49:c0:02:50:e9:da:8f:f8:f8:f7:f6:92:2c:71:
87:15:9a:a4:77:5c:30:39:17:2f:44:93:d7:4e:5c:
34:45:80:29:73:3f:c0:d8:bf:9d:b4:a3:97:77:29:
f8:bc:3a:a2:b7:d5:79:11:aa:51:94:4c:07:11:64:
da:8d:4e:63:3d:bf:b3:03:9a:f6:65:78:84:46:98:
13:5b:5f:11:0e:a1:61:a9:71:7d:f6:43:d3:79:04:
ef:d4:08:cf:36:88:8f:7c:2c:64:33:b7:13:8e:e0:
22:f5:17:5b:b3:00:34:79:e1:1d:9e:69:2f:18:f8:
e0:95:23:78:ba:72:f2:3c:d7:3e:b9:01:27:a6:e2:
0b:8c:84:6a:1d:34:e3:03:cc:93:df:09:94:18:d2:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:52:99:73:4E:F5:DF:99:A4:83:92:CD:39:CC:8E:F2:D8:CC:71
X509v3 Authority Key Identifier:
keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:66:20:7f:be:f6:bf:af:5c:44:7b:c4:23:d5:17:de:e4:
f3:5d:9e:69:57:b4:2e:cb:29:d0:59:cf:a4:0e:76:16:25:3a:
7b:15:24:96:52:ee:eb:f1:4b:59:49:b2:ca:c8:d4:e9:b9:7a:
33:8b:a9:bb:ae:5f:d6:f2:cd:0e:da:87:9e:a4:20:8f:41:b4:
f0:5a:5f:71:54:70:cf:c4:a5:fb:45:e0:77:22:f7:55:66:7a:
2f:8b:f5:7d:be:6b:65:06:d0:cd:44:ef:98:43:24:7f:82:80:
43:a6:05:4f:cc:aa:37:2a:4b:91:16:5c:36:49:aa:8a:fd:ec:
90:b1:6d:fc:6c:5c:cb:74:69:a3:2a:f6:99:fb:99:11:32:8e:
12:01:5b:31:bd:f2:98:89:8f:5c:2b:6f:59:5d:b8:47:e8:48:
e9:ab:28:0d:73:33:9e:7d:89:4a:97:4b:c1:c2:34:70:e9:a0:
40:6f:a1:70:61:ba:46:b9:32:4a:d8:5e:ed:ad:db:dc:d2:2d:
2a:c1:d2:42:8a:6f:7e:19:47:10:4e:1a:88:5e:a5:43:9a:c7:
c0:bd:1d:2f:d7:e4:a5:e6:a8:06:ef:f9:fd:c1:9e:d5:b4:ca:
36:6e:b3:a1:c9:b5:50:4d:c3:d9:94:88:29:f4:be:4e:a0:4b:
3b:3e:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:36:50 2025 by rpki-client