Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json)
Hash identifier: SHCvPmg3x6E/Kyv0bMc6oz2vzEsAxilLyTkUickdV9o=
Subject key identifier: B4:CE:C9:B3:D0:83:59:2F:3F:6B:0F:0F:89:67:04:20:3D:86:74:04
Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C
Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
Certificate serial: 1114D85157205542DF90AF34EAE12530652F6C24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
Manifest number: 04CD
Signing time: Sat 03 May 2025 15:30:49 +0000
Manifest this update: Sat 03 May 2025 15:25:49 +0000
Manifest next update: Tue 06 May 2025 15:45:49 +0000
Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=)
2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: ehfw0aKAksEecMg2JLKTIc6o88BDrMQuFW01BJC8zSk=)
3: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: mBzK51vkco0/5kSDFrOBSLZPYyZf8iHI5m08/TNTZvs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:14:d8:51:57:20:55:42:df:90:af:34:ea:e1:25:30:65:2f:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
Validity
Not Before: May 3 15:25:49 2025 GMT
Not After : May 6 15:45:49 2025 GMT
Subject: CN=B4CEC9B3D083592F3F6B0F0F896704203D867404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:c8:80:c7:e9:23:37:8c:69:c8:48:04:79:
94:d8:12:27:79:a2:69:ce:9a:ed:83:c2:0e:a4:e7:
cc:18:4b:3c:fe:10:e0:7d:d0:57:0c:a2:14:8a:cf:
c9:a9:8c:fc:11:c1:35:98:b4:85:31:d9:11:d0:d6:
1e:f8:44:46:a0:74:5d:b3:d3:dc:25:16:3b:ec:f1:
94:ae:b7:f0:d0:4e:03:9f:b9:fa:75:4a:52:46:d2:
fa:7b:70:ce:0e:89:83:23:3a:44:54:e2:72:f1:57:
d8:5f:39:50:60:e7:bc:99:d9:fc:c2:92:d7:bc:7c:
4e:49:88:d6:ac:35:07:e6:72:fd:a1:2d:77:b5:d9:
aa:12:8e:37:fc:24:f4:8f:1d:ba:9b:ee:93:e0:0c:
2a:3d:3a:4e:68:c4:51:31:36:a2:7e:f4:d8:78:33:
c6:54:c8:39:18:bb:c7:0a:07:6f:eb:c9:bb:93:26:
39:c9:7d:a0:7e:e5:b5:f7:24:10:c7:38:86:2e:c5:
01:db:c6:b2:ce:83:34:87:81:58:db:6d:e4:e6:47:
29:66:b0:5a:d2:cc:8e:73:ce:08:c5:78:15:86:25:
89:83:f8:95:a4:2f:4d:49:27:7b:77:fc:63:af:26:
b4:a5:56:4c:ba:d4:5e:db:ee:bd:82:d2:84:b2:85:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:C9:B3:D0:83:59:2F:3F:6B:0F:0F:89:67:04:20:3D:86:74:04
X509v3 Authority Key Identifier:
keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:73:bc:f2:e7:a9:fc:fe:22:43:47:c2:52:58:6b:ee:4c:72:
38:7e:28:33:c1:fb:73:c4:14:2a:25:44:95:3f:cb:e4:25:b6:
7b:e5:20:10:5a:fb:46:7f:3a:e8:56:ba:27:33:71:b7:36:41:
29:b4:33:10:6f:eb:44:3c:ec:5d:b0:f1:6c:8f:1e:63:c1:f8:
23:ff:ae:9a:55:81:2c:c1:55:df:b3:4c:a4:57:2d:11:1b:84:
4d:a8:ee:e9:f9:e2:4a:73:27:4f:a3:fd:c6:23:d0:5b:d1:5f:
1e:50:e3:72:f4:42:2e:e6:82:d4:3c:92:ab:7f:56:42:de:2f:
55:24:db:4a:63:c6:49:bf:97:4b:d7:55:53:70:34:0c:81:9b:
74:44:50:71:1b:dc:0b:52:b3:73:67:81:d2:ba:4a:fc:26:22:
77:78:4e:ee:3d:c7:88:ca:8d:2f:2b:96:e0:87:b3:bf:44:74:
64:eb:9f:23:0d:7b:47:2f:ef:50:3c:6b:05:23:54:29:eb:78:
4e:9b:1d:71:8c:85:a8:f4:00:a1:65:b1:38:ba:ef:f3:a4:d4:
49:69:ad:d1:b9:57:77:e1:57:e8:16:62:3b:08:57:7a:3d:42:
f0:78:d2:b7:72:94:08:c5:ed:9e:9c:10:a7:63:45:b5:18:9e:
2f:95:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:06:09 2025 by rpki-client