Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json)
Hash identifier: Jih+0ZuZu1aIILsPN+90m70xK0cpWk8bzMtY64eA7Cw=
Subject key identifier: C6:5A:FE:54:69:85:40:B0:84:62:A3:4C:C5:28:FC:9A:F3:68:B5:6F
Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70
Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70
Certificate serial: 30C1B610E5C26D49F83FC34653425E8A758BDDD8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
Manifest number: 04A1
Signing time: Wed 29 Jan 2025 09:21:41 +0000
Manifest this update: Wed 29 Jan 2025 09:16:41 +0000
Manifest next update: Sat 01 Feb 2025 19:03:41 +0000
Files and hashes: 1: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: +nqofuvEbBfsZqlztZgscbdrDBEKeChRARKHZSmH79g=)
2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: BSvE+OLnytfbf8toiJJMEZBKYqLTRbQfxnqbMWT62fk=)
3: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: eNLJDc3oDS1+gVJV+kASdB4vnKXgpdyYCgXLvuTAJok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c1:b6:10:e5:c2:6d:49:f8:3f:c3:46:53:42:5e:8a:75:8b:dd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70
Validity
Not Before: Jan 29 09:16:41 2025 GMT
Not After : Feb 1 19:03:41 2025 GMT
Subject: CN=C65AFE54698540B08462A34CC528FC9AF368B56F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:26:69:02:9c:ad:1f:4f:f9:80:dc:ee:eb:
1b:14:82:41:96:0a:dd:d8:4e:b3:db:15:30:ab:18:
45:5f:ff:53:7a:54:bd:56:db:6d:01:1f:7f:57:0c:
39:02:f6:59:eb:67:20:a1:df:45:ee:34:b0:81:c3:
ad:1b:79:64:21:56:3a:8e:aa:ea:23:4d:6a:cd:36:
2d:5e:0b:0f:62:42:c7:cc:5c:ab:af:62:9b:5f:e7:
75:4e:7a:2d:f5:04:b1:8f:25:ec:6f:0c:a5:b1:99:
75:22:e2:3c:49:de:66:5d:a3:b4:be:76:7f:f1:26:
f7:d2:7d:02:d0:99:5f:a8:cb:12:c8:85:09:ac:f7:
3b:b0:38:52:20:05:8d:f0:c5:ff:36:47:ae:17:34:
89:ea:7e:e0:2b:38:88:41:cc:80:4d:37:06:06:aa:
fc:7a:27:e1:6e:0e:10:f8:c5:07:ca:ad:ab:98:63:
c2:21:84:0c:00:f0:3a:ef:5a:d2:3a:99:4e:83:d9:
64:94:6e:be:ec:3d:a9:77:1d:3f:33:01:6f:8a:20:
f9:91:6b:6f:cd:52:6c:b0:ba:d6:cd:12:15:46:e7:
fa:4f:78:b8:bb:66:e3:41:26:98:fd:47:eb:4c:de:
f5:57:c0:9d:44:28:eb:d0:71:23:0a:45:b3:5f:78:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:FE:54:69:85:40:B0:84:62:A3:4C:C5:28:FC:9A:F3:68:B5:6F
X509v3 Authority Key Identifier:
keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:37:80:7e:dc:e7:f7:2d:42:17:9e:3a:73:68:e3:4e:10:3e:
68:6b:f9:d4:f6:5a:e6:4c:84:38:e6:c5:7c:9e:e3:a2:cb:3c:
c4:e8:45:f5:bb:bd:b2:ee:9f:96:8c:0a:a5:39:38:a1:39:34:
3e:85:57:94:97:e3:58:40:74:14:51:82:c5:7a:5f:18:70:a0:
f7:60:55:1f:b1:8a:f5:32:05:97:84:c3:fa:6c:6a:ef:ec:05:
71:59:aa:b5:76:6c:df:4e:24:b9:3a:9c:0b:76:6a:04:ec:e6:
c0:92:8f:b0:7b:6e:1c:7e:da:e4:17:d0:89:1e:9c:79:6d:5c:
9d:de:f4:c9:2d:2c:b9:4e:26:d8:fd:40:7a:98:ea:c9:e6:f9:
26:f4:8e:1a:a2:a4:5b:ae:d0:5d:77:fc:28:8a:bd:fc:8d:f7:
bc:61:82:e9:cf:8c:5e:6c:ef:24:27:c6:8f:64:c0:a3:6d:80:
2c:c9:39:fa:3e:5e:7e:18:88:aa:5b:37:14:53:54:ca:f1:f9:
c2:04:5f:13:0a:19:2c:46:91:78:b6:7e:22:3f:2f:56:25:a8:
ce:31:0c:89:80:3e:0a:9a:d3:61:f4:f0:2e:43:c8:5e:9f:f4:
57:07:08:c4:39:43:4a:9f:d5:98:4f:dc:57:ba:6e:38:4e:05:
09:19:85:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:13 2025 by rpki-client