Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json)
Hash identifier: y3A78XELxlIUPL6XLt1I5gJE14AOusOBf3n7+QwU1zc=
Subject key identifier: FC:06:1E:A5:B3:C5:C4:BE:7C:B4:C4:50:A7:04:F1:4C:30:C3:52:5D
Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Certificate serial: 2D96FF17719D4E2900157C462E4C14AAB8F03B5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
Manifest number: 014F
Signing time: Thu 30 Jan 2025 23:31:24 +0000
Manifest this update: Thu 30 Jan 2025 23:26:24 +0000
Manifest next update: Mon 03 Feb 2025 09:05:24 +0000
Files and hashes: 1: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: Me/oYVvla7nKBQUyROdmRQVMcDUq2A4XRPtN3ngFd3I=)
2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e/jDoMLJpVdueYsDRrBjLtNtEmI6MPmdRcvnXTsu7vU=)
3: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: /ux2kePKCtcJt/H4xt770XYnntc51Gy2zRjOsEI7g3U=)
4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: h0k8rz1v/+LMLzPa9cwssYfHs5GKBPWBZA56yzocfIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:96:ff:17:71:9d:4e:29:00:15:7c:46:2e:4c:14:aa:b8:f0:3b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Validity
Not Before: Jan 30 23:26:24 2025 GMT
Not After : Feb 3 09:05:24 2025 GMT
Subject: CN=FC061EA5B3C5C4BE7CB4C450A704F14C30C3525D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:ac:fb:c6:06:89:8a:40:e2:f1:8f:06:a1:
fe:7a:15:cf:c8:17:0e:70:5f:2a:ed:00:45:53:8f:
02:56:7b:75:d2:80:2d:23:24:b0:3f:77:37:e9:02:
98:56:56:ca:4d:19:b6:bb:b9:2e:0a:68:4c:fe:ac:
37:cb:69:97:90:9b:23:81:55:6c:4f:3a:a2:43:94:
8f:13:82:52:3a:16:53:fb:61:0c:ef:31:c8:d2:be:
00:69:f6:2f:5d:54:b4:f2:ee:5d:41:04:14:c9:ba:
02:1f:5a:f0:08:bd:58:e1:f1:7b:d0:d4:66:ff:62:
74:22:21:ad:c0:f1:41:82:5d:a8:6c:34:89:2a:06:
57:1d:32:04:7e:c7:72:8e:8a:d6:29:2b:c9:6d:0e:
4b:4c:c9:f1:a7:7d:ec:e0:92:da:04:df:55:3a:f2:
28:9b:45:50:4d:9c:be:a7:84:e7:d1:62:03:28:f4:
85:00:d7:90:ae:d0:9e:18:b6:b5:72:7a:b7:46:ff:
dc:5c:ca:e0:2e:2d:df:3b:0b:00:4c:d0:83:4e:62:
0d:d4:d3:93:e9:45:64:35:c0:60:50:b8:ec:99:a8:
12:4c:96:dd:48:c3:69:a4:87:3a:2b:dd:11:f2:ef:
85:dd:b0:62:6a:f4:26:b8:b0:9a:b8:16:ac:de:1b:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:1E:A5:B3:C5:C4:BE:7C:B4:C4:50:A7:04:F1:4C:30:C3:52:5D
X509v3 Authority Key Identifier:
keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:88:6a:4a:d5:91:10:c2:cd:a4:f5:db:d0:9b:75:61:3e:fb:
28:3d:b5:49:cd:77:bb:1f:9d:67:e2:32:ab:62:1d:4c:54:b7:
bb:fc:a4:cc:91:23:03:78:3a:53:8f:e4:d9:9d:be:ee:97:20:
65:c2:ba:84:b3:66:04:15:8f:60:e7:4b:5b:9a:b1:05:26:90:
85:25:57:ee:06:c1:48:34:a4:79:a0:0f:a5:ed:4f:ee:db:91:
77:66:95:af:cc:81:aa:2e:37:46:45:cc:fc:b7:47:f3:62:05:
c7:19:fc:87:95:79:2f:ce:26:ae:43:23:0b:e9:39:59:43:e2:
07:f4:4f:c0:0b:1e:dc:27:b8:dc:3b:3f:e2:e1:7b:22:a3:74:
24:ed:d2:d3:b6:65:f9:9d:5e:3e:c3:bf:d4:f1:38:5b:e3:d4:
68:7b:97:d2:31:c8:58:74:a4:1a:67:6b:14:e7:4a:73:b1:44:
ad:ae:cd:e9:64:a7:9a:64:15:57:dc:16:65:3d:15:3d:7b:07:
28:2d:55:fb:ad:63:0d:bb:8e:88:87:10:7e:90:96:8d:ca:5d:
55:e2:bc:ac:57:9a:89:1a:44:b2:29:45:0f:b5:c6:f0:b6:fe:
e3:7a:e9:e4:e7:b3:6d:57:01:37:09:d7:84:ce:e0:bf:5e:a6:
39:fe:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:06 2025 by rpki-client