Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft
File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json)
Hash identifier: 6wlGfPy1FV3b/nJnW1ANsWdN9o8BEej6fGoGQmXceiQ=
Subject key identifier: CE:72:BD:48:1B:57:6E:F2:B8:D2:77:13:8A:0A:0D:13:2B:0E:2A:FB
Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6
Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6
Certificate serial: 59CAF334B33CBD952A34FE61BF7CB2E11174440B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft
Manifest number: 69
Signing time: Sat 03 May 2025 17:11:24 +0000
Manifest this update: Sat 03 May 2025 17:06:24 +0000
Manifest next update: Wed 07 May 2025 01:57:24 +0000
Files and hashes: 1: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: rvmmuygSDQqp3VTFfTdTUgUhuWy6VU7o/YE+GwA04qY=)
2: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: IoXihcWrLe60DlpQzVRAOXX3umofZd3ManAso30bXVY=)
3: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: bcKNAldjHqBfsv/Q+Ly6D1o3ohbtzg70IudkGUDipiI=)
4: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: lLeVI/CUAbB7XvLqssGn7L5CooMrW8PfpNM6Bnbj6kQ=)
5: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: 4cVYZh3C8hXn171P/RUENb8aKuR+2otEfieTHKUhFd4=)
6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: 1nHw01smVx1ZOqDKUmuMmLHS8nfmS5SZFRiTVrT39OY=)
7: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: nUQ2kayi0Rj4NqtUCpruCitWDh+npuC9WG+E5F+Bv9o=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ca:f3:34:b3:3c:bd:95:2a:34:fe:61:bf:7c:b2:e1:11:74:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6
Validity
Not Before: May 3 17:06:24 2025 GMT
Not After : May 7 01:57:24 2025 GMT
Subject: CN=CE72BD481B576EF2B8D277138A0A0D132B0E2AFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:e0:6e:bf:35:bb:e2:8b:41:9e:3f:5a:1a:
61:38:ad:06:13:d5:07:50:5c:13:eb:bc:98:5a:62:
91:a3:ad:03:a0:11:51:05:17:c4:04:9c:5b:eb:65:
f7:36:69:0a:a5:f3:e7:c2:32:41:2f:fc:20:52:e9:
fc:b5:77:75:fe:76:fc:9e:58:e6:20:67:fd:7d:9b:
df:8b:90:a2:a0:e5:6f:b3:0f:f8:0a:ab:3b:7d:2b:
3b:b9:66:aa:08:15:84:32:b1:94:e8:f3:00:b3:cc:
3e:39:bc:64:01:0e:da:cd:29:1a:eb:9b:df:75:38:
19:ae:bb:e1:1e:c5:30:84:2e:35:a2:61:03:de:c3:
6f:78:32:2a:38:cd:60:65:f4:68:5a:94:bd:7a:29:
07:31:4b:54:11:30:3b:cb:a6:d7:98:1e:22:43:7e:
6d:0a:02:b6:31:52:c8:13:86:a7:30:f8:b3:00:1f:
77:0b:ed:89:a3:d8:89:20:f8:cf:90:d1:bd:64:01:
55:2c:65:06:5d:21:ec:ce:7f:05:57:1c:a8:4f:a5:
6c:2a:99:de:74:3c:0a:ab:3b:73:9c:fc:8b:fd:e5:
cf:31:40:09:d9:f5:9b:e7:41:53:ba:fb:e9:ec:c4:
79:00:a6:e1:c3:c5:e4:7d:8d:2e:fb:e2:7b:27:b1:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:BD:48:1B:57:6E:F2:B8:D2:77:13:8A:0A:0D:13:2B:0E:2A:FB
X509v3 Authority Key Identifier:
keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e4:e4:df:0e:74:e4:e9:03:53:6d:46:7b:ed:55:3e:f5:f9:
31:23:50:b3:a7:9f:22:33:bf:74:d0:ba:85:43:38:8c:54:6e:
11:16:43:51:cb:c2:6d:d4:d5:79:df:c2:52:b3:9c:0c:c2:d5:
5e:af:61:db:b0:f6:5b:f7:af:5a:91:77:bf:c0:8a:82:a1:1c:
04:ca:c7:6b:b8:3d:20:dd:73:3e:ec:c7:44:c7:7b:53:cf:9d:
d8:b8:e8:1e:9a:24:ac:97:18:12:e2:a4:9b:2d:5b:3f:88:dc:
71:0c:3b:32:79:f9:6e:56:0e:2b:5b:33:7e:a8:65:aa:61:31:
f3:4a:68:be:c3:af:b8:e0:a9:aa:34:dd:b7:78:6e:58:a9:c7:
30:cf:27:3e:f6:16:cf:48:35:71:b3:37:15:9c:21:c4:cd:84:
18:a4:e9:0c:49:b7:db:8e:a2:5c:f2:98:b1:59:3f:d9:d2:3d:
8c:88:b4:38:49:85:9c:01:d5:5e:9f:42:fa:0c:3f:a7:3b:90:
df:6f:c2:5a:22:ec:5c:7c:40:3e:96:f3:c3:49:ab:7a:c4:92:
33:72:41:4f:d6:79:ca:fc:4c:23:7e:e3:51:18:26:74:81:28:
cb:f1:e5:1d:92:e7:fc:9a:93:97:8f:3f:35:43:41:cf:0b:96:
31:e5:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:30:41 2025 by rpki-client