Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json)
Hash identifier: mKTnnJrPm6oNrP2xkN9dIKRLRZeZCWLMNd4J8TjFqVg=
Subject key identifier: CF:14:6E:F7:A1:7C:4A:D9:EA:17:1F:65:7C:FB:F0:22:AC:C2:11:1F
Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259
Certificate serial: 592919A2CA8B4017BA3FF3185158FDE7BA0C849F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
Manifest number: A3
Signing time: Thu 30 Jan 2025 13:21:23 +0000
Manifest this update: Thu 30 Jan 2025 13:16:23 +0000
Manifest next update: Mon 03 Feb 2025 01:11:23 +0000
Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=)
2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: 5Hvx9jd61hthYN2bAzfjFRfg2COamSzMB0pFsw1DUAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:29:19:a2:ca:8b:40:17:ba:3f:f3:18:51:58:fd:e7:ba:0c:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259
Validity
Not Before: Jan 30 13:16:23 2025 GMT
Not After : Feb 3 01:11:23 2025 GMT
Subject: CN=CF146EF7A17C4AD9EA171F657CFBF022ACC2111F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:80:60:f3:12:d7:6a:a0:b7:f9:c3:8b:1a:
aa:50:8d:f0:62:d4:ba:91:a3:3f:a1:b1:b8:f2:3d:
dd:65:74:06:af:e0:64:3f:35:00:7e:ba:4a:18:3d:
9a:49:de:b0:95:b1:0c:5e:1b:b8:32:3a:83:aa:34:
e5:88:b4:00:6f:9f:b3:6f:bb:94:2b:13:c0:e1:4d:
60:04:3e:b2:4c:d1:15:dd:34:50:09:07:55:82:33:
6b:ff:88:bf:02:b5:38:d4:f7:1c:fa:43:33:38:03:
4d:c6:bf:64:16:94:77:a9:46:0e:ff:f3:3d:e7:56:
0e:f7:c4:c3:df:d9:49:3b:0d:ba:32:2d:ae:0d:7a:
53:1a:23:84:67:5d:7d:88:ed:4f:d8:46:aa:9d:eb:
70:6c:c7:ba:77:76:5c:1a:75:97:ca:75:15:9c:99:
fd:1c:c4:4a:98:0c:c8:a9:4d:3c:05:6b:0c:33:74:
0f:3f:82:3d:b7:cb:12:02:21:04:2a:ad:93:d4:6e:
62:b7:80:81:a9:bf:69:14:29:cb:7f:2e:a1:72:d6:
7c:8c:72:73:8e:b7:d2:c6:86:27:5d:0f:85:e1:39:
05:09:da:20:a1:23:42:7c:58:7a:70:87:2a:c8:41:
87:fc:d4:9f:f3:a1:5f:dd:ad:f9:89:8a:42:ca:1d:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:6E:F7:A1:7C:4A:D9:EA:17:1F:65:7C:FB:F0:22:AC:C2:11:1F
X509v3 Authority Key Identifier:
keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:49:03:fc:8e:5f:24:df:c8:9f:4a:d9:7f:6b:8f:ab:fc:79:
18:0b:dc:8f:51:ed:b1:e2:cf:57:28:ce:86:37:3c:8b:63:78:
6e:23:c8:ff:51:96:e9:9f:e2:fd:05:66:1b:16:71:31:aa:65:
ab:62:41:e0:71:09:f4:37:8e:2b:66:fb:93:20:7b:a7:d3:84:
74:30:2e:7b:56:0c:76:24:4b:1a:da:37:9f:1d:ac:d4:9a:35:
28:d1:f2:f2:b3:67:2a:24:5a:ff:c0:c9:c6:04:53:87:cf:09:
3d:75:0b:14:0d:3a:24:8a:9b:b2:93:e7:c7:6f:fb:10:1a:40:
8f:a0:d8:0d:86:a3:e0:10:a4:ee:59:d7:d5:ba:95:ce:b4:4e:
23:aa:4e:68:5c:2d:68:62:62:a0:67:7d:d6:41:31:a6:66:85:
db:33:c9:e3:d1:eb:18:20:7e:27:7c:8b:b7:02:ca:a5:db:f1:
04:09:d8:b0:ef:39:a6:a1:f7:9a:20:ca:5d:54:f7:59:84:60:
c9:14:d6:9f:d4:1d:9c:c0:47:49:a1:b8:2d:2e:a2:f4:33:17:
99:13:f6:f2:20:a7:dd:9f:44:ed:33:2d:3d:04:7b:9f:c6:04:
2b:a7:ca:ef:54:3d:85:1d:ea:2e:ca:0e:a7:d1:7c:f4:58:a7:
f9:b6:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:41:07 2025 by rpki-client