Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json)
Hash identifier: ri5UfT3lPUeh2pEpNT065MvHKiVwLDNfT/BPvRB2A/s=
Subject key identifier: F2:F2:BA:81:29:B3:56:0D:AE:5D:23:89:C7:E1:C0:47:ED:9C:0B:18
Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E
Certificate serial: 4F2F290BDA3A905D84EEDD2EA78A793F2E24F7AC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
Manifest number: 01AB
Signing time: Wed 29 Jan 2025 18:51:39 +0000
Manifest this update: Wed 29 Jan 2025 18:46:39 +0000
Manifest next update: Sun 02 Feb 2025 01:46:39 +0000
Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: WzwmoAgwJpy0fOhlhTBq0tlHcsdTwjesJQ7o6p9hr6g=)
2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: t5DejjB0RIUWbv5rBvHI2IZcGXatMqyeVcj20ftLyZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2f:29:0b:da:3a:90:5d:84:ee:dd:2e:a7:8a:79:3f:2e:24:f7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E
Validity
Not Before: Jan 29 18:46:39 2025 GMT
Not After : Feb 2 01:46:39 2025 GMT
Subject: CN=F2F2BA8129B3560DAE5D2389C7E1C047ED9C0B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:73:95:3e:f8:cb:a1:fd:49:75:54:78:67:
7a:07:44:25:a4:25:ee:fc:df:76:e1:b0:19:94:d2:
07:e3:99:e8:14:9c:14:4b:e3:8e:01:07:ee:be:49:
7b:ae:db:96:e2:75:3a:38:cf:ad:b6:1e:6e:78:f0:
e1:ad:4a:ad:0d:62:8b:66:f9:38:b3:da:54:66:a3:
74:54:db:26:2d:75:fd:46:6a:c9:b0:cb:73:0d:ce:
2e:a9:90:ad:31:5a:b3:d0:16:a0:96:f7:ad:ac:e4:
f7:9a:82:65:1e:f8:a5:ca:7a:14:b9:ac:32:d8:0d:
50:1e:30:d0:05:20:59:b7:77:b5:41:7c:0a:11:ad:
c9:2d:98:6b:48:c3:ac:9c:24:c3:2f:14:79:cc:c4:
73:8e:c2:85:e7:ab:a5:2f:f3:7a:08:84:5f:0e:4f:
c9:05:d3:f4:93:04:3e:86:33:f6:ba:0d:cd:bc:7b:
5e:72:2a:05:92:71:10:45:dd:1c:d3:ca:53:a1:73:
c9:c3:69:7f:a5:a5:aa:97:1d:90:66:62:8d:c3:75:
ca:c7:97:6a:4b:e6:4c:ff:46:2e:76:d1:38:4c:c7:
c8:13:d3:a3:11:d1:6d:5f:2b:b5:b0:80:2e:46:e5:
17:ca:49:4f:4f:91:5f:0d:0c:be:8a:52:c0:d2:0d:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:BA:81:29:B3:56:0D:AE:5D:23:89:C7:E1:C0:47:ED:9C:0B:18
X509v3 Authority Key Identifier:
keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3d:0d:ec:1d:24:4e:81:23:38:88:78:68:48:e2:4a:90:35:
d9:e7:90:2b:e8:78:ab:6e:66:e1:43:56:e9:2d:89:ad:cd:87:
8f:ec:2a:7e:59:ae:24:6a:27:46:1a:d6:28:5b:e3:07:88:02:
f9:ed:18:42:cf:ff:d3:9b:8b:cf:c9:fc:1f:e4:51:93:04:a2:
0c:04:e8:19:62:56:d1:58:d8:2c:90:04:6a:56:c4:37:8d:1f:
0c:b6:29:0c:6f:50:9b:09:ef:53:d6:1e:cd:04:eb:f5:c8:3f:
96:21:ce:1c:7e:38:ca:ce:ca:54:6c:6f:0b:b5:08:0d:ed:4f:
9e:cf:8e:37:79:d9:23:f9:d7:79:ad:63:62:ab:46:b1:a8:99:
09:9c:07:fc:a5:bb:e4:fd:92:13:f2:d4:14:b1:30:9d:8b:30:
e9:46:bb:1e:1c:e9:71:81:a8:ab:8b:84:d4:4e:db:20:17:e0:
bd:5b:a1:33:6b:43:3e:ae:e7:83:b8:0e:1e:fa:77:a5:51:b4:
df:41:0b:ac:3b:3c:ec:7f:f0:31:65:38:1f:45:fb:57:1b:f1:
31:8f:64:8c:df:0e:6a:44:16:b2:4e:2d:72:49:2b:53:a3:cb:
fa:46:1d:6d:f7:06:91:bd:87:67:2a:4a:31:62:b5:85:42:62:
bd:3e:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:18 2025 by rpki-client