
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json)
Hash identifier: fZNlRBMBuVguH1JceA7rUoJYwjnVp1fWjR8ZETDMvU4=
Subject key identifier: 66:85:23:79:4C:A1:9D:14:E0:44:A9:A6:7D:7E:C1:65:E4:DA:45:AB
Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25
Certificate serial: 42D69E2B96ABB14311A1A27EDB4FB947065B7F9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
Manifest number: 0138
Signing time: Fri 31 Jan 2025 02:00:05 +0000
Manifest this update: Fri 31 Jan 2025 01:55:05 +0000
Manifest next update: Mon 03 Feb 2025 11:01:05 +0000
Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: xpg49Nfq/sB11g5KQhUWXEHK4a8ms95RwSERdSP3Dp4=)
2: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=)
3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d6:9e:2b:96:ab:b1:43:11:a1:a2:7e:db:4f:b9:47:06:5b:7f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25
Validity
Not Before: Jan 31 01:55:05 2025 GMT
Not After : Feb 3 11:01:05 2025 GMT
Subject: CN=668523794CA19D14E044A9A67D7EC165E4DA45AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:4d:1a:75:74:98:1f:18:47:e5:71:df:5b:
f2:94:c2:80:cd:88:ef:5c:5d:d9:e1:3d:31:b6:3c:
50:d6:dd:a5:26:f4:c4:89:70:9a:e9:28:98:fe:a4:
e0:83:01:db:44:dc:e0:44:50:be:f9:c3:ae:aa:d9:
1c:98:f6:56:e6:d5:6d:fe:54:cc:51:16:dd:15:5c:
0c:98:27:14:21:ac:53:04:e5:a7:f1:e2:e6:e0:81:
15:db:87:89:dd:0d:1e:e0:0c:fa:aa:c6:4a:9f:b7:
88:43:c1:76:3f:b1:f0:13:6a:99:03:11:d2:a8:17:
0b:65:2c:1b:9e:f0:41:cb:ae:89:f7:61:0d:ae:9f:
59:0d:09:0e:5d:99:84:b2:42:ba:0f:9d:2b:bd:39:
9a:7c:3b:5e:b9:af:a3:cf:b3:94:dc:df:20:d9:f5:
a6:fe:8d:b3:30:7f:dd:2f:6a:03:a0:cb:65:0f:71:
a7:a3:e0:f2:33:2f:f1:c7:ae:41:f5:5a:eb:27:2d:
b8:84:3e:a6:50:92:67:e9:a7:a1:60:5e:18:e2:de:
fc:eb:ad:d2:55:3a:c7:ec:97:54:57:54:b9:fc:8a:
01:2b:4e:2b:7a:92:9d:f1:5d:d9:1c:83:97:4e:4f:
3d:d9:7b:2a:01:86:53:54:7b:7a:6f:ef:2b:54:2a:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:85:23:79:4C:A1:9D:14:E0:44:A9:A6:7D:7E:C1:65:E4:DA:45:AB
X509v3 Authority Key Identifier:
keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c5:4d:34:d1:57:3b:88:14:70:31:dd:93:79:51:03:a6:87:
6b:fb:12:36:62:b9:03:02:aa:51:6e:ea:f6:22:ef:7a:9a:c3:
f5:44:0d:57:a5:8d:05:6d:ed:0b:a7:25:4e:bd:68:a3:8a:63:
7a:c5:92:7a:b0:3d:39:b3:7b:cd:ce:c7:5f:7f:1d:a4:db:67:
d5:a2:5a:0a:17:02:f8:5a:cf:69:31:19:f9:8c:f7:b5:c7:56:
3b:d0:d3:2a:96:3e:a6:d5:8c:f2:4d:fa:7d:c2:0a:b1:07:cc:
3e:9c:eb:97:28:aa:44:c1:ff:8b:ff:39:00:03:24:6d:2c:2a:
5d:b5:de:d9:e1:6b:f3:e6:42:f0:3f:34:61:06:78:15:99:b2:
bf:c8:76:3c:26:9c:45:21:8d:e6:b1:87:36:9b:33:61:9a:e0:
bf:a5:5d:fb:c5:0a:4f:e0:2c:a5:04:ba:49:9a:cd:71:2a:c3:
55:76:18:12:08:77:88:47:94:56:5c:76:02:59:5a:18:46:88:
cf:53:01:b4:8f:1c:2a:f8:d6:08:59:94:55:b2:3f:65:7c:10:
09:4f:a9:7a:bb:a7:08:b1:65:aa:9d:93:59:40:ab:2e:a7:e4:
a2:1a:22:c2:27:05:7a:3f:e3:3a:ba:7b:fb:f3:57:ae:b0:af:
5e:ee:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:08 2025 by rpki-client