Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft
File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json)
Hash identifier: zPMDmPsC0V0zV5GfuqPAw8MAFgrJEU0/xceoFkLPBdY=
Subject key identifier: AD:14:91:54:E2:5D:5A:F2:92:98:94:EC:0F:70:33:4A:F5:FA:F8:B5
Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38
Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38
Certificate serial: 3A5141F391DBEC7D4EE1F7C057104FDF6DA1F087
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft
Manifest number: 031F
Signing time: Wed 29 Jan 2025 14:11:50 +0000
Manifest this update: Wed 29 Jan 2025 14:06:50 +0000
Manifest next update: Sat 01 Feb 2025 20:09:50 +0000
Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: tKtkpNbgwkajvDwKEfvGXt1iOynf27oolNdv2T5dBaM=)
2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: e6zTKV5eeeBjTOLPA4Uct8apjvBjBaHZhQqPX177Lcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:51:41:f3:91:db:ec:7d:4e:e1:f7:c0:57:10:4f:df:6d:a1:f0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38
Validity
Not Before: Jan 29 14:06:50 2025 GMT
Not After : Feb 1 20:09:50 2025 GMT
Subject: CN=AD149154E25D5AF2929894EC0F70334AF5FAF8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:34:7b:c2:88:1d:f9:97:11:26:a5:c3:3f:
49:6f:06:da:eb:4c:d7:42:f8:0b:f4:48:e0:e1:1a:
9c:67:72:68:8e:d1:5a:34:02:8c:da:e0:7a:71:ce:
c4:17:01:52:26:b4:3d:6a:e3:73:2c:90:8f:4d:7b:
4a:a0:d1:2f:51:b9:b1:ed:ba:1f:0b:46:ea:5a:ee:
32:f0:08:b2:0b:42:2d:76:15:e9:14:f1:e3:1d:67:
be:2d:f2:c6:7d:ca:b2:40:bb:42:69:96:60:13:9a:
fc:5d:05:f1:ce:dd:cd:25:71:85:b2:04:34:a6:27:
d0:7a:9a:2f:7a:7a:e0:d2:e5:0b:b8:26:e9:76:7f:
29:24:42:fe:26:ef:fa:bf:ac:a3:be:f8:9e:1a:db:
20:3e:9a:32:5b:a8:8e:32:c6:92:08:41:cb:90:fb:
76:e3:ea:97:68:84:2f:f8:ac:a5:b3:4b:27:45:54:
a8:99:ca:25:fa:ac:a1:0f:15:bb:08:c6:42:11:89:
42:40:0b:ae:cb:5d:a0:69:ca:ce:45:87:76:b1:cf:
61:83:ae:03:84:3a:2f:49:0e:9e:c8:3e:a8:c7:69:
22:ae:c9:22:60:3f:1d:ca:3c:9b:6a:32:8b:a1:35:
99:5e:ac:a7:5a:db:9c:c3:d6:82:f8:4e:df:fd:53:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:91:54:E2:5D:5A:F2:92:98:94:EC:0F:70:33:4A:F5:FA:F8:B5
X509v3 Authority Key Identifier:
keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:30:89:2a:18:a1:65:56:8a:0b:97:fb:a0:57:91:fb:12:86:
6a:64:e6:e0:cb:6c:72:38:79:76:bf:c3:9a:3f:89:13:c4:bc:
42:81:fc:2d:68:be:9a:e4:1f:3f:34:31:2e:cf:23:d3:f5:0c:
0b:79:8c:49:c7:0d:04:5e:0d:a7:57:8d:59:85:dd:0d:4c:a2:
91:75:c4:70:11:cd:bd:2c:4f:9e:e3:68:62:1e:0a:38:b6:6c:
26:98:b9:02:a1:13:48:b7:d1:55:39:cf:d2:8f:5f:03:0d:f7:
6f:e1:1b:6b:0b:51:87:2b:e4:5a:20:50:49:67:85:9f:02:8f:
c8:09:7c:60:c6:cd:65:fc:1e:8e:ea:bd:35:e5:8f:28:4a:22:
1f:54:73:b1:7e:48:b4:65:cc:12:1b:22:a7:f0:54:6a:d4:40:
f6:8f:21:1b:84:fd:f8:5a:2a:ac:cb:79:3b:ac:c6:e3:d4:b3:
8e:6f:1b:a8:4e:5f:89:4b:a5:01:53:68:f1:d4:56:5e:b3:fd:
64:45:96:25:2a:d8:d0:cf:be:6a:39:76:8e:d1:23:ac:89:4c:
44:77:72:7f:3c:46:49:62:05:b6:a0:fb:51:62:19:0c:ae:0b:
7b:53:cc:73:fe:77:a1:79:5a:47:d4:71:68:ea:87:c4:8f:1a:
8e:04:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:05 2025 by rpki-client