Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json)
Hash identifier: sKmXNkzN4STLhCoPhsgmxn///lSQkWRUOgVVKelgGPk=
Subject key identifier: 6F:4B:20:C8:B2:EF:3D:AC:94:79:EC:A1:8F:4A:AA:FB:93:EB:6B:EE
Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Certificate serial: 559EFF797716ABE0AF03FEF4696A9BE0AD8FB3ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
Manifest number: 0148
Signing time: Sat 03 May 2025 04:21:42 +0000
Manifest this update: Sat 03 May 2025 04:16:42 +0000
Manifest next update: Tue 06 May 2025 15:30:42 +0000
Files and hashes: 1: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: gA7OHxbMK1SAhJfDodVm54tfSGCJqcKEf59mOl43zvU=)
2: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9e:ff:79:77:16:ab:e0:af:03:fe:f4:69:6a:9b:e0:ad:8f:b3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Validity
Not Before: May 3 04:16:42 2025 GMT
Not After : May 6 15:30:42 2025 GMT
Subject: CN=6F4B20C8B2EF3DAC9479ECA18F4AAAFB93EB6BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:cd:a2:0a:5c:fd:b2:bd:6c:89:3d:f1:95:
0a:a1:c7:7d:b4:22:1f:8b:86:c8:f5:21:6a:2e:33:
59:ff:c2:e8:ac:8a:18:4b:a5:4d:2c:64:84:3b:0b:
d7:52:0e:99:c4:9d:43:c5:18:4e:a3:56:3f:3d:ee:
a4:4a:04:27:0d:22:92:40:43:99:ad:6d:b3:e6:72:
7b:c3:56:ef:d4:4e:93:27:76:40:a8:41:cd:e7:1f:
23:d4:43:53:b9:de:d4:34:dd:48:35:27:dc:c0:6d:
05:41:6e:48:4e:a1:25:b5:3a:2f:29:04:09:4a:9e:
5a:47:c8:d2:2d:76:45:f0:4c:89:49:9c:72:bf:fe:
14:0b:92:45:cd:1e:a8:ab:21:59:da:e2:96:15:ee:
75:03:26:6b:be:8d:e8:8d:f5:aa:37:03:18:23:c7:
48:47:c8:a1:b0:46:90:a2:9d:36:db:5d:ba:3e:fb:
38:ba:50:15:02:2e:e5:04:74:27:2d:ea:90:c1:92:
4e:63:58:bc:a3:bb:1a:b5:8c:56:0e:6b:b7:5e:0a:
49:f3:9a:51:e3:d7:c5:cf:ab:11:75:1e:3f:d8:f4:
42:eb:07:39:47:b0:bf:c5:e5:fe:5b:4c:a7:79:06:
f9:64:88:4a:00:1b:46:ac:30:9d:3c:fa:f7:02:7d:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:20:C8:B2:EF:3D:AC:94:79:EC:A1:8F:4A:AA:FB:93:EB:6B:EE
X509v3 Authority Key Identifier:
keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:87:54:3c:d3:fa:e7:c8:df:a6:c5:2f:5d:52:28:da:a9:c2:
a4:21:fc:fc:5d:f4:56:c0:d2:a0:18:d9:3c:97:24:ef:9d:15:
b1:31:74:63:9e:96:20:d7:4c:a8:44:39:2f:78:48:f9:00:7f:
c9:81:01:8e:ce:1d:cf:f2:37:99:26:90:68:34:c4:53:a0:31:
49:4e:35:4c:73:88:c0:0f:e4:6f:a8:84:89:20:e6:19:6e:64:
f1:6e:bc:a6:ed:cc:4f:07:e8:d2:a7:54:2c:45:c5:58:83:d9:
3e:7e:fe:81:45:c7:d3:98:0b:ca:94:aa:9a:c4:47:22:c5:80:
b6:ec:a2:b5:ce:04:2e:7c:d5:2d:bc:dc:e2:ef:c8:9f:f5:37:
3d:ed:ab:29:0f:0c:c8:14:5e:61:3e:ab:af:37:6d:68:86:19:
59:2b:37:1d:e0:d8:60:47:78:8f:fb:c0:82:06:96:4d:5f:42:
85:9f:65:70:fe:df:c0:45:f7:fd:a9:c2:ce:d1:a7:6a:0c:d7:
59:d0:60:77:2e:6b:6f:00:32:5a:b7:5b:1f:81:8e:83:97:27:
74:c6:53:88:bd:7f:3b:14:b4:17:a1:2e:61:35:28:2a:66:46:
6f:1c:f9:83:6f:1d:15:a9:d9:25:d2:ee:6e:3d:72:6a:eb:36:
21:a2:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:18:36 2025 by rpki-client