Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json)
Hash identifier: qX8arUrHtdVxkmccG5shL0A3f30I0HqL3levUeHP1zQ=
Subject key identifier: 35:6B:AC:FF:21:1D:27:5C:08:F1:57:CF:04:A6:2F:5E:B7:ED:A4:56
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial: 4E2699D0E6CBAFF11D313A58EA2CDD942A09EEF1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
Manifest number: 04A4
Signing time: Wed 29 Jan 2025 19:11:03 +0000
Manifest this update: Wed 29 Jan 2025 19:06:03 +0000
Manifest next update: Sun 02 Feb 2025 00:07:03 +0000
Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: aiqggAzdcdtm0B30Fkn6BPjIRWihb5Wkvu7iMkpkz24=)
2: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: kQRWXA6reeWbWpcQ2sBu2zxu4KdXsMA5JZcQ7F88PdI=)
3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: l/5HgKnT7J8DLMc5KXCSqh4O/akFH+dhFOMVMx/cS/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:26:99:d0:e6:cb:af:f1:1d:31:3a:58:ea:2c:dd:94:2a:09:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Validity
Not Before: Jan 29 19:06:03 2025 GMT
Not After : Feb 2 00:07:03 2025 GMT
Subject: CN=356BACFF211D275C08F157CF04A62F5EB7EDA456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:b4:ef:5f:76:fb:d8:f8:a0:38:e8:0e:42:
a2:00:42:89:d6:91:c5:f2:b1:5b:2e:6b:00:8a:04:
04:16:3b:a9:77:47:0c:c0:4c:31:04:ff:3e:56:75:
c6:70:0a:26:4e:50:70:6d:f3:4f:6a:28:03:87:a1:
94:50:d5:31:36:58:74:01:4e:75:03:ac:7e:4d:e1:
ab:db:bb:ab:48:4d:5a:47:fb:27:88:e4:1d:5e:d2:
4b:ab:98:5f:ad:d7:0e:b2:ed:e3:3f:a5:a8:19:ef:
11:3b:bd:df:82:6a:2f:fb:3a:d1:20:61:1b:c8:78:
69:77:9d:c5:b6:09:a0:26:e9:9c:84:f2:8f:cc:52:
56:08:ae:2d:ad:65:65:fc:91:de:df:86:66:fa:d8:
f1:44:ad:b5:f3:a0:81:88:ca:3b:73:b6:94:d6:d6:
2e:b8:f2:2e:b9:b7:59:02:72:d0:4b:40:7d:77:d6:
05:43:28:0d:1e:86:5d:79:3f:a2:e3:27:50:c0:9a:
c6:83:48:24:e4:f5:31:2d:b8:40:3d:1b:e8:72:56:
bb:17:50:95:f0:97:01:f5:92:6e:45:4c:9f:6a:12:
e3:02:e4:94:5c:7e:1d:73:98:73:7f:65:b0:86:4f:
b0:d4:8d:c7:23:1b:f0:9e:cf:8f:f3:b6:4e:06:36:
1f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:AC:FF:21:1D:27:5C:08:F1:57:CF:04:A6:2F:5E:B7:ED:A4:56
X509v3 Authority Key Identifier:
keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6d:65:53:82:ba:ad:ab:a2:c3:be:8b:df:13:86:91:ad:fb:
1c:4b:ee:53:15:27:f1:92:e7:f0:b5:79:25:0a:4a:56:50:87:
f8:30:44:c7:8c:fe:e7:3f:79:8f:b5:17:be:70:a8:88:bf:52:
c9:35:7c:9b:99:bd:e6:44:4e:25:26:96:0c:47:6f:8f:f3:15:
79:f9:74:3a:e1:74:37:1d:01:af:ee:72:9d:ce:f1:09:96:0e:
d9:41:09:36:62:07:6e:0a:3d:30:14:0d:5e:45:e7:25:92:d1:
a5:e6:16:27:74:1e:11:2f:16:a5:2b:4a:67:06:1a:82:38:8b:
80:82:d1:a6:cc:8d:b5:c9:a1:2b:2a:64:02:5e:2a:c6:31:2c:
88:92:f4:37:0f:0e:43:08:38:8a:6b:b9:a3:c4:ba:18:62:44:
9e:eb:49:ca:d4:79:7f:76:f5:d1:bd:c4:10:d6:99:ea:c9:fd:
b5:c6:2f:ac:8d:bf:53:52:c0:cb:b7:bd:52:0b:8b:66:50:a8:
d7:0c:0a:bf:83:bf:ac:b5:3a:34:e9:bd:b8:bb:f6:47:79:41:
34:43:14:4c:72:9b:1c:51:98:55:41:1c:76:57:83:5f:9e:54:
77:07:96:0c:1c:05:6f:49:75:4a:97:9a:4e:e4:ee:e4:f9:08:
5d:b8:de:fc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTiaZ0ObLr/EdMTpY6izdlCoJ7vEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB
MEE3Mjc5OTAeFw0yNTAxMjkxOTA2MDNaFw0yNTAyMDIwMDA3MDNaMDMxMTAvBgNV
BAMTKDM1NkJBQ0ZGMjExRDI3NUMwOEYxNTdDRjA0QTYyRjVFQjdFREE0NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDchbTvX3b72PigOOgOQqIAQonW
kcXysVsuawCKBAQWO6l3RwzATDEE/z5WdcZwCiZOUHBt809qKAOHoZRQ1TE2WHQB
TnUDrH5N4avbu6tITVpH+yeI5B1e0kurmF+t1w6y7eM/pagZ7xE7vd+Cai/7OtEg
YRvIeGl3ncW2CaAm6ZyE8o/MUlYIri2tZWX8kd7fhmb62PFErbXzoIGIyjtztpTW
1i648i65t1kCctBLQH131gVDKA0ehl15P6LjJ1DAmsaDSCTk9TEtuEA9G+hyVrsX
UJXwlwH1km5FTJ9qEuMC5JRcfh1zmHN/ZbCGT7DUjccjG/Cez4/ztk4GNh/hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNWus/yEdJ1wI8VfPBKYvXrftpFYwHwYDVR0j
BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC
RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3
Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2
YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3
MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABJtZVOCuq2rosO+i98ThpGt+xxL7lMVJ/GS
5/C1eSUKSlZQh/gwRMeM/uc/eY+1F75wqIi/Usk1fJuZveZETiUmlgxHb4/zFXn5
dDrhdDcdAa/ucp3O8QmWDtlBCTZiB24KPTAUDV5F5yWS0aXmFid0HhEvFqUrSmcG
GoI4i4CC0abMjbXJoSsqZAJeKsYxLIiS9DcPDkMIOIpruaPEuhhiRJ7rScrUeX92
9dG9xBDWmerJ/bXGL6yNv1NSwMu3vVILi2ZQqNcMCr+Dv6y1OjTpvbi79kd5QTRD
FExymxxRmFVBHHZXg1+eVHcHlgwcBW9JdUqXmk7k7uT5CF243vw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:21 2025 by rpki-client