
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json)
Hash identifier: 3gOjqGEWmaMXly/c9mKQiQ2Snrmhf1jXfWOnicqTzbQ=
Subject key identifier: D0:5C:73:B4:9C:24:77:76:A5:B7:28:AF:4A:A4:07:E8:73:9D:9A:E1
Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Certificate serial: 090EC10A4A4E4D8B1A521E8EFCD27768EC8DD27E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
Manifest number: 0153
Signing time: Sat 03 May 2025 11:22:07 +0000
Manifest this update: Sat 03 May 2025 11:17:07 +0000
Manifest next update: Tue 06 May 2025 14:17:07 +0000
Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=)
2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: OdahvnCzPWel0jB2Ik4F5DlSBLqi/JlKj1d3GM6qVt8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0e:c1:0a:4a:4e:4d:8b:1a:52:1e:8e:fc:d2:77:68:ec:8d:d2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Validity
Not Before: May 3 11:17:07 2025 GMT
Not After : May 6 14:17:07 2025 GMT
Subject: CN=D05C73B49C247776A5B728AF4AA407E8739D9AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:64:59:e4:a7:f5:53:ca:ec:8a:34:5c:ee:
a7:3c:fc:d0:32:23:4b:ab:e9:22:3f:2e:d9:c3:0f:
a3:4e:55:ee:49:5d:18:d4:6a:d6:3f:88:50:ae:79:
73:5d:db:67:ad:a4:e6:63:39:12:cd:2e:a9:24:28:
8d:55:b0:17:2b:89:19:33:1b:f5:a4:cf:d2:44:6f:
16:41:f8:51:af:9e:f3:d9:b6:a1:72:0e:ce:8d:b2:
98:b8:29:6c:43:3b:03:0f:79:96:9a:8f:01:dc:ed:
04:0b:2f:b4:59:c1:a4:75:db:a2:83:1b:34:20:41:
44:12:11:25:8c:55:39:f0:ff:b3:16:a8:3a:08:c2:
f5:67:a0:30:fa:73:f8:a3:11:7e:69:6a:a2:e9:08:
93:d9:ec:e5:f6:5e:a7:41:b6:72:b5:5a:e2:61:2f:
b7:b7:43:d1:0a:2a:88:a3:19:0f:60:43:62:b5:81:
24:04:db:f6:1a:02:eb:2a:af:38:d9:3f:8a:c9:d1:
48:ad:17:6f:62:0a:4e:3c:ec:51:21:7c:24:c1:c5:
56:5a:aa:a7:c3:9e:e8:00:76:ce:ef:09:d0:3b:7d:
68:6a:65:c9:6c:fe:ad:ff:38:05:ef:ef:80:22:ca:
95:59:ce:f5:b4:55:ab:a8:37:f3:e1:d8:6a:99:96:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5C:73:B4:9C:24:77:76:A5:B7:28:AF:4A:A4:07:E8:73:9D:9A:E1
X509v3 Authority Key Identifier:
keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:31:9b:84:04:57:a0:39:79:ed:c8:5a:73:e6:0a:2a:0f:ce:
5d:e6:0a:4f:b7:6a:f7:b4:79:ef:f5:32:12:f9:c1:b9:a2:48:
4c:79:fc:45:af:fd:57:65:4e:4c:b5:68:74:7b:35:a7:72:22:
0d:39:b9:77:74:02:14:36:ba:b2:37:6b:17:fd:c4:fe:de:8b:
b3:1c:6f:ec:4b:9e:28:14:2d:ee:c8:5d:31:eb:af:bc:10:3d:
75:27:0a:5b:65:5c:3c:3b:d1:34:c4:47:21:92:f7:a2:64:6d:
05:8a:f5:b1:6f:c0:82:19:ba:a1:62:5f:7c:16:b5:b5:3e:8c:
34:b8:4c:39:c7:5b:25:bf:14:95:45:90:de:01:ab:db:a7:90:
cd:18:ae:9f:96:5a:a9:c1:a8:da:5c:7a:7a:9e:5e:84:85:d1:
25:37:67:57:61:58:dc:06:81:1f:2b:0e:ec:3c:53:c4:e8:82:
11:1d:5c:28:6b:6e:af:03:07:cd:ba:0d:21:5a:e1:cd:b6:af:
12:8f:5f:7c:eb:70:39:6f:d3:e7:cd:c5:44:14:b4:59:f2:e7:
d9:60:b6:02:de:00:d0:65:81:c2:03:e4:d5:86:94:b1:46:69:
65:65:d9:74:d1:7f:97:f0:da:a1:ed:ad:e1:f7:79:a3:cd:9c:
2d:b4:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:53:02 2025 by rpki-client