Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json)
Hash identifier: 1myjibQ2e8iCLwq1TTb/iYUrcvDBqrPab9XkmB+jkI4=
Subject key identifier: EA:0D:A6:59:B9:7F:CA:7A:1E:8C:0E:F9:EC:36:17:44:4F:F2:06:FC
Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C
Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C
Certificate serial: 45E7909BFB946B6C8C48A1644845B87A5A0C61CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
Manifest number: 40
Signing time: Fri 31 Jan 2025 04:10:47 +0000
Manifest this update: Fri 31 Jan 2025 04:05:47 +0000
Manifest next update: Mon 03 Feb 2025 08:19:47 +0000
Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: z2uZKn+RSRn1c6K+YRbNj+jNoMn34ff+weuJDyNF4A0=)
2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e7:90:9b:fb:94:6b:6c:8c:48:a1:64:48:45:b8:7a:5a:0c:61:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C
Validity
Not Before: Jan 31 04:05:47 2025 GMT
Not After : Feb 3 08:19:47 2025 GMT
Subject: CN=EA0DA659B97FCA7A1E8C0EF9EC3617444FF206FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:f2:f7:69:b1:da:b9:d2:6a:9f:a2:66:5f:
94:64:c6:fa:94:6f:28:e3:e7:a6:cd:a8:00:b2:f4:
5a:bb:62:05:d9:50:71:5a:51:e5:25:cf:4f:e0:e4:
e7:e1:fb:53:75:42:d7:b3:61:87:36:01:e6:28:d8:
29:7d:a6:9b:59:5b:f0:01:e3:f2:ca:39:fe:8b:25:
c4:38:f1:e3:34:0d:ad:c3:14:f7:f8:4a:59:81:15:
92:28:8d:ac:26:ef:3f:0c:b4:5e:e4:b7:33:72:21:
0a:a5:e7:98:af:c0:b4:e9:34:8d:73:17:50:10:96:
43:e9:a1:b3:05:c6:5d:c4:6e:6f:b0:8a:6a:4a:96:
09:28:48:ef:92:c6:d9:46:2a:4c:f4:34:aa:93:2d:
e6:6e:97:7a:d7:8f:18:fb:62:94:f1:41:29:98:e3:
39:3a:83:69:9e:6e:3d:88:1f:07:ed:98:74:4f:9a:
01:11:9f:2a:7a:72:9b:1c:d1:76:9c:61:a8:2e:a3:
fc:93:dc:c9:12:b9:53:44:30:8f:7a:64:76:35:ec:
6e:e2:ba:38:a4:cb:b6:4a:b8:8f:d4:43:04:9c:3f:
ba:19:b0:a7:70:ab:61:b3:9b:04:74:3c:46:93:c4:
26:92:af:e9:78:ce:2b:68:7b:d8:8d:a5:c1:b0:39:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:A6:59:B9:7F:CA:7A:1E:8C:0E:F9:EC:36:17:44:4F:F2:06:FC
X509v3 Authority Key Identifier:
keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f8:b8:a9:42:f5:01:c1:fb:d8:bb:a2:8d:bc:e7:19:4a:3c:
45:78:4d:f0:06:08:7c:9f:41:3b:00:4a:d3:b1:e3:80:0d:d3:
a1:32:d9:43:1c:80:61:04:eb:c1:90:5a:fc:c7:6d:9c:57:19:
9b:86:68:8a:61:b3:23:c5:de:16:3d:b1:0c:03:d6:ce:a2:fe:
6e:60:45:25:8b:50:8e:32:d1:5e:ca:4b:13:9f:be:b7:49:81:
fe:be:f3:b7:a3:6a:be:c3:e8:80:dd:a5:4f:49:9a:ef:9d:33:
12:40:0c:80:54:ba:7e:cc:e1:9d:79:da:d7:1e:b8:ec:ed:28:
dd:e6:a0:99:3b:22:84:58:42:db:f1:5e:d3:54:8d:29:61:71:
6c:29:68:f9:77:a6:40:82:33:92:92:f7:fc:a5:81:80:7c:d9:
0c:04:89:8d:24:a5:31:b8:59:9d:1d:61:ea:75:2e:a7:3f:0b:
05:4b:2a:3d:8b:61:99:97:e5:21:3c:dd:83:43:68:6a:31:2b:
47:4b:08:be:04:39:8a:24:5d:d0:fb:1a:07:d6:30:fe:3c:9d:
32:a1:c1:aa:30:c4:8e:5c:78:2c:eb:3a:6e:5d:f7:72:7f:66:
08:bc:0c:25:02:4d:5e:ba:c6:fe:f4:a6:1d:7c:a7:93:27:ef:
b8:0c:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:19 2025 by rpki-client