Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft
File: 25D788BD2A450C01354B9AB70826895FDFF56208.mft (raw, json)
Hash identifier: y+DloUXcGA2RQ7c5jsOCyq+x0MD+E/gipPH274AJEhw=
Subject key identifier: AC:95:61:19:05:BC:DF:B0:27:5F:12:59:DA:A3:E2:FF:87:AD:ED:CD
Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08
Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208
Certificate serial: 16674AF683CF945E204153BF140C6ABEBFAD2169
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft
Manifest number: 02F4
Signing time: Fri 31 Jan 2025 11:31:00 +0000
Manifest this update: Fri 31 Jan 2025 11:26:00 +0000
Manifest next update: Mon 03 Feb 2025 19:05:00 +0000
Files and hashes: 1: 25D788BD2A450C01354B9AB70826895FDFF56208.crl (hash: KvWVf1Sznrou6dfvt1DheqtZS2jI89b6cfWvOl06fy4=)
2: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: LXUvF/9HV9LQjuPpMuWCi7neUUmU+exlVXTngKvHYow=)
3: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: wuLvX+Xgm0i3AJgZLRAJ8zSBRz4zFDFFXcC9P9aZOYA=)
4: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: fqCZ9+V4OhrivrL7rJsmVltpUel/D0iJtOWt/NWMlmg=)
5: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: rd1DlMh/MYO7HpSHAI7Fm6/tPrgqiJvxbgj5UtMH0zE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:67:4a:f6:83:cf:94:5e:20:41:53:bf:14:0c:6a:be:bf:ad:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208
Validity
Not Before: Jan 31 11:26:00 2025 GMT
Not After : Feb 3 19:05:00 2025 GMT
Subject: CN=AC95611905BCDFB0275F1259DAA3E2FF87ADEDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1c:85:58:c6:54:7a:fc:55:6e:38:13:49:90:
71:a2:bd:8e:7a:4a:87:b3:55:3b:cd:e9:67:c7:e1:
44:ed:2b:4e:47:0c:03:c9:52:8e:aa:eb:e8:bf:ab:
5b:54:b7:49:0e:28:1b:41:e7:a2:13:01:18:ea:29:
c4:7b:1a:8d:25:05:b2:e0:cc:68:63:93:92:88:36:
c4:8e:a9:eb:ce:a5:1a:e7:7c:bb:df:f2:43:4c:a1:
73:3d:3e:57:33:74:26:a2:6f:17:1b:72:67:66:8e:
e1:5b:e1:3b:25:c0:a8:04:70:11:bb:36:f1:dc:f0:
3d:81:63:6c:64:9c:60:23:22:01:93:ad:99:fa:5d:
ef:96:55:3e:ca:41:9c:b2:22:86:35:84:82:d9:9d:
c5:21:70:bb:3f:56:4d:c0:7e:1f:01:97:15:4a:91:
0d:12:ed:4e:fc:ce:da:36:aa:84:bb:df:bf:68:38:
22:ec:ad:41:fc:d8:0e:49:b8:53:cc:f8:f1:a5:8d:
61:b6:50:03:d8:cc:ac:6a:d6:1e:72:2a:57:af:d7:
21:9e:05:61:63:15:cb:bc:5e:e0:ac:7d:40:cd:bd:
69:33:17:20:9d:7b:3f:37:69:ab:18:37:40:2f:09:
bf:9d:6a:e0:20:a4:2c:66:ea:3d:01:72:41:c7:c2:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:61:19:05:BC:DF:B0:27:5F:12:59:DA:A3:E2:FF:87:AD:ED:CD
X509v3 Authority Key Identifier:
keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ac:c9:0e:ad:86:68:60:8d:98:06:bd:d1:6c:8c:27:31:2a:
5d:65:40:70:bb:37:38:a6:6f:db:36:87:f2:a5:f4:11:6a:a6:
88:0d:9b:10:e2:0d:3b:52:d7:f3:0c:28:72:02:2c:fb:41:5d:
7a:e4:66:c7:69:e5:d7:39:07:77:8e:55:33:c3:30:7b:07:6f:
a9:c2:84:be:c8:d3:57:39:a8:12:cf:e8:64:91:d3:37:2e:f6:
39:ea:60:40:79:f9:70:38:67:d5:98:1d:3a:09:38:cb:4b:cd:
d7:08:4d:ed:bc:0c:79:b0:bb:0d:c0:a4:40:67:c0:32:de:1c:
e6:77:6a:58:40:69:8e:e3:d0:ac:3e:36:0f:5f:f8:11:bb:ae:
a3:59:fa:3b:64:d4:88:6a:f5:04:4e:fc:34:5c:87:ee:dd:fa:
b1:c1:06:71:02:08:a4:fb:2a:36:a6:50:b6:a4:6d:e1:d7:f9:
87:4e:f8:b5:89:f4:50:bc:09:e5:1b:8a:b0:05:fa:f3:fd:d1:
c9:da:83:a3:27:be:98:38:28:4e:85:a8:04:e9:42:3b:45:d5:
46:4b:88:60:55:d0:6d:98:eb:4a:3e:94:15:ef:6d:1d:07:9b:
37:85:ac:57:c5:c4:ec:c6:c4:95:94:69:84:96:24:82:7c:9e:
15:d7:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:18 2025 by rpki-client