Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json)
Hash identifier: XExhm8IhETRzv20XcBdIFZySOio272snqNOI7WcGjeY=
Subject key identifier: 59:7D:32:85:73:1A:C5:EE:FC:25:2A:09:CF:19:0E:13:1E:8A:CF:97
Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Certificate serial: 4FED118149745D2CB5ABFFAA72103B2C894DC931
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
Manifest number: 4B
Signing time: Fri 02 May 2025 23:10:46 +0000
Manifest this update: Fri 02 May 2025 23:05:46 +0000
Manifest next update: Tue 06 May 2025 09:19:46 +0000
Files and hashes: 1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: nvp6aBQxjtptGYgUeLEHjxMFltaz+YvY0H1/2W6JEXw=)
2: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: eIgwG8yQ5TTUAeZBzCvyRIEnJHe8U08NxzVcvgCJ6sU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ed:11:81:49:74:5d:2c:b5:ab:ff:aa:72:10:3b:2c:89:4d:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Validity
Not Before: May 2 23:05:46 2025 GMT
Not After : May 6 09:19:46 2025 GMT
Subject: CN=597D3285731AC5EEFC252A09CF190E131E8ACF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:c2:ba:de:3d:f4:10:81:bf:1c:f2:8e:11:
9c:08:be:cc:c8:3f:4d:59:4b:54:43:b6:04:b6:b5:
55:9c:cb:2c:d1:3e:60:d8:ea:12:99:46:8a:da:12:
b8:c5:c7:94:35:03:d9:ef:12:c8:a8:af:52:f4:ba:
e9:d9:f9:01:c6:b7:cc:21:00:78:13:9d:97:37:8d:
bb:d9:61:44:4c:c1:f2:d2:e1:55:55:41:b7:51:8a:
46:52:79:f4:e3:f5:56:ca:67:0e:18:83:02:43:6b:
65:e4:73:37:a8:5d:b7:e0:77:4c:a9:4e:43:6f:2a:
48:4b:2a:82:3d:4f:cd:1e:e0:77:b5:f9:4b:53:0d:
4e:fe:ed:7f:62:dd:63:43:29:33:89:41:37:78:66:
17:bd:7e:f9:f2:1f:12:62:25:a0:0b:6b:07:9d:e8:
35:98:4e:5d:1c:51:42:39:c8:0a:ce:a0:3b:b5:1a:
ff:75:f9:2b:8c:cf:3c:67:9b:c3:2b:08:7b:fe:c9:
be:56:9d:04:fc:ab:91:70:09:40:0f:fd:b8:9d:2a:
b2:b2:d4:b9:b0:10:0a:6c:dc:fb:47:7a:8d:6f:c4:
82:8b:a2:13:ca:b3:92:aa:53:91:60:06:14:f2:10:
da:6a:b4:0d:b1:0a:60:00:42:2a:bd:e5:2f:52:20:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:32:85:73:1A:C5:EE:FC:25:2A:09:CF:19:0E:13:1E:8A:CF:97
X509v3 Authority Key Identifier:
keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e1:ce:e0:ae:43:8c:da:44:64:32:7c:77:60:5b:0e:9d:86:
cb:6f:f6:df:6f:46:ea:96:81:dc:0d:44:fc:7c:86:7e:2a:1c:
e9:38:a5:65:2d:b6:c0:b2:49:43:3f:fc:76:e8:29:16:91:fb:
a6:b0:57:f1:27:51:ef:2e:16:86:13:46:d7:12:07:da:6c:0b:
ce:a6:84:7a:fe:a8:d9:b5:1a:9a:7d:f9:72:b0:9c:8d:3e:41:
70:e8:05:f6:86:41:99:40:2f:af:6d:43:9c:dc:38:d0:ec:93:
eb:f5:15:05:ef:89:cc:cb:d7:3f:3e:24:6a:ad:d3:4f:78:0f:
d0:44:64:df:01:6d:85:6b:7a:e8:59:a0:67:54:8f:49:0c:93:
6e:ec:db:d2:91:46:11:da:cd:72:92:1e:e8:a7:e6:60:47:f1:
39:10:2d:74:f3:08:24:ee:4c:b5:2a:00:c5:5d:a9:f0:1a:77:
65:22:28:c9:9c:f5:0e:50:ae:74:7e:53:9c:67:40:00:b9:37:
30:ba:b3:50:bb:0e:78:40:a0:40:90:7d:4b:2b:5c:bb:ea:37:
44:25:15:a5:af:9b:f0:3f:06:bf:d1:23:1b:6d:07:9a:06:c3:
d2:2c:07:62:db:33:e5:26:20:d3:38:e2:3a:41:b3:b4:85:45:
e2:5b:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:56:00 2025 by rpki-client