Manifest
$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.mft
File: 47717A8A2E301D872DAC129F2CBAC587F01A0813.mft (raw, json)
Hash identifier: cjs0oVcl4hcdz/bSBTbOiicHm4BYRUsauwQcVsA/gg8=
Subject key identifier: D9:ED:F5:86:3B:B3:41:5F:22:D2:04:7E:05:2D:DF:88:EB:36:8C:3E
Authority key identifier: 47:71:7A:8A:2E:30:1D:87:2D:AC:12:9F:2C:BA:C5:87:F0:1A:08:13
Certificate issuer: /CN=47717A8A2E301D872DAC129F2CBAC587F01A0813
Certificate serial: 6D6B9D84C58AF0995708E2C43431FF56777B7202
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.cer
Subject info access: rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.mft
Manifest number: 07A8
Signing time: Tue 29 Apr 2025 14:38:29 +0000
Manifest this update: Tue 29 Apr 2025 14:33:29 +0000
Manifest next update: Wed 30 Apr 2025 14:50:29 +0000
Files and hashes: 1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.crl (hash: DZrEyTN+ZLhj08O3ndZyPZUc/VOEevtyWtSbkmI5EK4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6b:9d:84:c5:8a:f0:99:57:08:e2:c4:34:31:ff:56:77:7b:72:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47717A8A2E301D872DAC129F2CBAC587F01A0813
Validity
Not Before: Apr 29 14:33:29 2025 GMT
Not After : Apr 30 14:50:29 2025 GMT
Subject: CN=D9EDF5863BB3415F22D2047E052DDF88EB368C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:7e:4e:90:eb:13:b3:0f:ae:4f:37:a2:9a:
bc:f4:24:60:22:ae:da:fb:f2:93:9f:b1:9e:28:13:
39:f9:41:6c:dc:b9:9a:08:6b:02:df:14:ba:70:07:
eb:e8:79:a2:40:0c:ed:a1:a0:f3:ef:3e:d6:68:0b:
ef:15:30:40:ce:e0:37:64:e3:43:f4:2c:09:1e:69:
33:8c:1b:0f:96:82:5b:27:58:3e:f3:74:96:ec:4d:
97:e7:2f:ec:73:5d:b3:fc:5a:de:12:9c:ec:b5:bd:
61:4d:21:30:0c:f5:36:65:eb:25:43:20:3c:eb:24:
6d:43:59:ad:d4:84:03:9e:26:01:2c:04:15:93:ae:
55:26:80:0e:39:69:a3:18:4e:80:98:51:40:70:4e:
bd:85:65:3a:09:0c:b1:2a:e0:35:00:56:68:62:3d:
1c:c6:87:f8:2e:00:5c:42:35:67:2a:99:96:37:52:
40:3f:21:23:35:fa:43:c5:01:f2:80:88:81:d3:d8:
01:77:f9:24:89:6f:25:95:dc:8c:6e:51:75:2f:30:
13:4c:06:31:52:13:39:71:14:79:d9:57:6f:6d:09:
48:8a:13:b4:d6:32:d6:d2:d1:9e:55:ff:d1:de:1d:
c8:30:0c:e4:ae:f4:09:a0:7a:f4:92:74:be:60:91:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:F5:86:3B:B3:41:5F:22:D2:04:7E:05:2D:DF:88:EB:36:8C:3E
X509v3 Authority Key Identifier:
keyid:47:71:7A:8A:2E:30:1D:87:2D:AC:12:9F:2C:BA:C5:87:F0:1A:08:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:22:ed:aa:c1:0c:0c:29:06:ac:44:02:29:b2:9b:1e:1b:
92:cc:fa:fe:a4:da:5b:21:cc:2d:27:f6:7c:c4:6e:06:21:12:
4f:4c:45:38:97:70:91:51:f4:aa:f1:9a:56:96:c3:ed:5a:ef:
6b:19:bb:26:72:e0:55:0f:fc:f9:87:e8:91:26:9c:96:63:73:
e2:13:16:02:b3:ee:01:a4:89:07:15:06:c4:db:d4:54:ff:0f:
81:2f:fb:02:79:d8:7a:2f:83:9f:30:6b:3a:44:aa:48:84:c5:
4f:63:3c:97:f5:38:02:33:ea:03:4b:11:92:95:5d:05:8a:71:
78:04:3b:af:81:b0:18:e4:0d:75:e9:f3:a6:60:3f:01:4f:d2:
52:37:7e:e6:3f:c0:73:ad:17:7f:d3:0b:94:cf:f6:c9:a9:bd:
0d:50:ff:fd:68:13:00:1d:88:37:2f:02:8b:0e:07:3c:e0:58:
a5:45:de:e3:85:25:7e:13:1b:72:91:a7:b5:b3:3d:8b:07:d6:
b9:38:83:9f:2e:bf:8a:85:2c:48:35:bf:b7:d0:fc:a1:8d:6f:
cd:0d:e9:65:cb:67:14:65:f3:09:35:d1:92:5a:d4:48:cb:ec:
e2:dd:b6:8c:d4:f1:15:2a:dd:a8:ac:cb:80:6a:0e:dc:e9:40:
81:f8:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:10 2025 by rpki-client