Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json)
Hash identifier: phqntB30bGSm22KbS2tuapaKJPjJGNbPGEIW3kEXOt4=
Subject key identifier: AE:3E:0F:67:5F:0A:22:2A:F5:7F:2F:BE:53:4D:95:46:86:5F:1B:70
Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B
Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B
Certificate serial: 37DA57FFC9DB8FE8089D91B9E905566F3DD4121D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
Manifest number: 41
Signing time: Fri 31 Jan 2025 14:30:58 +0000
Manifest this update: Fri 31 Jan 2025 14:25:58 +0000
Manifest next update: Mon 03 Feb 2025 18:25:58 +0000
Files and hashes: 1: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: dVzkaZwBc16NerGBbnPkInQRl7szohhHPD7ETdIV3jg=)
2: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: cXd4y+URPb9BAJRar34rtNEucg0gMzyNyYpjm7mEtQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:da:57:ff:c9:db:8f:e8:08:9d:91:b9:e9:05:56:6f:3d:d4:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B
Validity
Not Before: Jan 31 14:25:58 2025 GMT
Not After : Feb 3 18:25:58 2025 GMT
Subject: CN=AE3E0F675F0A222AF57F2FBE534D9546865F1B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:be:5c:bd:96:55:21:20:92:52:a1:01:96:
d5:34:ae:71:ec:56:2d:9e:20:5e:22:da:ed:ae:f0:
11:47:1d:c2:a8:2a:15:bb:b6:65:5f:43:7b:da:11:
5e:86:25:3c:48:4b:ec:68:f3:dd:92:b0:d8:e2:dd:
c0:60:bb:4b:df:57:ea:1f:d5:1d:84:96:f9:af:c4:
73:07:73:07:18:65:3f:61:a5:56:37:98:a7:f2:65:
fb:5c:8c:d3:01:ea:72:76:4f:9b:73:56:ed:f8:9b:
20:16:be:df:07:04:14:df:50:f3:ab:a4:af:1e:c7:
59:73:e5:19:1f:bb:7a:60:d3:7c:3a:e9:77:7b:b0:
a4:15:24:41:26:df:59:0e:ec:81:cf:30:0c:e4:e6:
05:a4:98:bc:e2:56:2b:fe:b6:32:ad:42:26:6a:28:
80:a4:cd:0c:4f:cf:f7:f3:4b:f9:ee:83:2f:f7:e7:
18:b7:26:37:1d:93:43:6e:71:2c:93:b6:0f:83:56:
f2:d5:bd:26:86:7a:08:74:46:6c:5c:88:e4:ed:9d:
8b:88:54:bf:5e:0a:7b:e5:0d:e4:be:e2:f4:70:bb:
85:e8:79:ba:56:13:35:6e:c9:c7:50:10:98:9a:f9:
ea:c8:2c:db:71:83:c9:cb:87:bb:0a:1c:9c:bc:2e:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3E:0F:67:5F:0A:22:2A:F5:7F:2F:BE:53:4D:95:46:86:5F:1B:70
X509v3 Authority Key Identifier:
keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:08:70:2d:bc:3f:6e:d8:9d:b4:a5:ee:bb:d2:f5:26:6d:f9:
6e:dc:d9:05:a6:16:9c:41:b5:03:43:cf:9c:a5:6d:08:83:d9:
87:c6:ac:5d:4a:09:6c:94:b8:00:6b:73:73:a4:de:5c:24:28:
4d:25:ea:e9:8d:94:c3:0a:10:ea:eb:f9:9e:04:47:f7:36:d9:
fb:4a:b3:ce:9d:7a:9a:47:df:39:f8:b1:7a:20:eb:a4:c8:26:
ce:50:5a:5b:f3:59:9a:8e:a3:91:32:cd:0a:82:dc:ba:1f:6b:
06:f6:23:cd:00:c5:ff:62:70:44:90:d1:4c:41:45:7d:54:30:
af:89:8d:ba:1f:26:71:55:da:0a:c7:cc:b9:ae:14:48:0b:8c:
d1:62:7b:d7:a4:9a:89:d4:fb:ba:68:6d:7e:3d:f0:93:a7:1d:
da:8d:94:7e:f5:ca:fc:de:20:1b:41:84:b3:14:e5:45:da:da:
43:a7:85:96:f7:b4:5f:91:bb:f0:ab:ce:85:46:4f:80:c4:33:
85:9b:f2:d5:7b:a9:ee:19:e7:da:35:e5:5b:62:c3:bd:27:ea:
71:eb:fe:2b:3a:99:67:74:37:9e:9c:e0:96:57:52:59:d1:62:
96:49:e1:dd:c6:37:eb:74:d9:48:6a:01:9f:fa:8c:76:a5:63:
bf:01:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:08 2025 by rpki-client