Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json)
Hash identifier: DBEh3HP12hx4HjE9kaKmSqMfMuENmR4pcjVcLuCDg+8=
Subject key identifier: 4F:2A:11:26:4A:10:91:69:EC:48:8C:44:38:88:0E:F1:07:87:28:D5
Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Certificate serial: 67A383802BCB53F213ED3BF7D2B6CE710488403D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
Manifest number: 01A1
Signing time: Fri 31 Jan 2025 00:41:30 +0000
Manifest this update: Fri 31 Jan 2025 00:36:30 +0000
Manifest next update: Mon 03 Feb 2025 11:25:30 +0000
Files and hashes: 1: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: xkgaskag55C2ZNPy2mls6/Sa/6nRWAsBNS+0aUv4PjA=)
2: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: PVZ1yYGC/jgslayhCKgLwQXUE5218uVNFMeRwwnLhxs=)
3: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: uJH2WdppNd7CooLOq8bWz9dAx6vHTSYx5IupLzxDIwE=)
4: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: SwqSF+oNUcILPVJViciO7vmypIFxSyzc6kEGhc2M+vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a3:83:80:2b:cb:53:f2:13:ed:3b:f7:d2:b6:ce:71:04:88:40:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Validity
Not Before: Jan 31 00:36:30 2025 GMT
Not After : Feb 3 11:25:30 2025 GMT
Subject: CN=4F2A11264A109169EC488C4438880EF1078728D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:c0:0f:3b:86:86:fd:dd:36:ce:87:26:2a:
1d:9c:63:8a:46:36:93:68:0f:a5:d4:71:98:ce:1b:
32:66:0b:00:a1:dc:30:b0:0a:bb:34:9d:e8:da:aa:
d6:40:a2:11:33:1f:d5:f7:82:ac:5c:16:8e:dd:b7:
7d:8f:e9:25:b5:52:4f:a7:aa:a7:ed:de:21:a9:4d:
93:ed:4f:6a:cb:aa:76:51:4b:f6:7a:57:06:e2:7b:
ce:1a:24:7c:54:9a:1a:08:34:c2:5f:b3:f0:7b:ba:
55:12:3d:60:27:f3:0a:bb:28:50:1e:1c:29:2f:ff:
1c:dc:ae:cd:b2:e3:84:03:bf:1e:93:9c:b0:89:47:
05:92:a8:2f:7a:ed:d1:54:ac:5b:55:b1:6f:6c:99:
3c:ee:29:02:fe:79:5e:81:2c:07:b9:9b:2b:c9:2c:
fa:c6:3d:24:48:c9:c9:88:3a:73:1e:79:63:04:5c:
40:10:40:74:95:44:75:b1:93:46:56:df:15:5b:84:
e6:57:55:99:00:a6:58:d8:3b:b4:f9:83:cd:6e:a5:
95:67:67:29:d8:cf:b5:63:c9:56:d1:a6:ea:0b:ae:
7a:98:2b:bd:7d:66:42:54:cc:08:a9:f7:21:01:64:
73:b2:06:2b:e8:bc:11:15:d8:e5:ee:63:c2:1d:17:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:11:26:4A:10:91:69:EC:48:8C:44:38:88:0E:F1:07:87:28:D5
X509v3 Authority Key Identifier:
keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:22:f9:a7:2c:d4:76:50:64:59:80:38:76:45:be:3f:06:90:
15:5c:c4:a1:f7:e3:d6:69:9b:d5:5f:c3:1d:73:0b:fb:0c:bb:
be:a1:15:53:4a:3e:31:b9:04:b5:e5:01:46:68:c2:47:80:58:
51:29:59:8e:41:79:5d:ce:8f:9a:95:91:91:84:ce:b2:81:53:
cf:d2:90:65:86:a0:d7:9b:ef:6f:96:f5:7e:7c:82:18:7b:0b:
a5:bc:f9:21:73:42:2d:e0:8d:f1:dd:22:9d:a3:40:17:42:9e:
d6:a8:1d:a9:14:f3:c6:91:a1:89:5d:8a:3e:34:5e:77:3b:44:
1c:e1:af:f0:a2:08:68:50:da:2b:12:f8:99:52:05:7a:4a:13:
ef:6b:2c:8a:63:84:06:40:47:36:a6:ff:7e:dd:0f:7d:c5:7e:
06:63:5b:15:d7:8e:cb:cb:d3:f9:5f:28:59:69:6e:36:25:f9:
76:98:22:94:d0:e5:29:e9:c7:a4:d1:2a:f5:6d:b4:52:d1:34:
e2:bc:4e:9e:33:02:a7:08:46:ac:a5:18:af:70:61:40:12:f0:
66:e0:3a:fe:e6:a3:9d:8a:00:e1:4e:71:9c:ec:00:b7:2a:e9:
44:d3:69:c4:7f:6f:02:38:e1:45:ce:dc:9b:b3:83:4e:df:24:
33:83:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:15 2025 by rpki-client