Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json)
Hash identifier: FH8qas3XtDQFUUxVp4mRbwwHu4ZgWiE8c/jtbleYPzM=
Subject key identifier: 25:1B:59:05:72:C2:B9:55:9C:0C:88:8E:91:FF:24:09:FB:F8:8E:AF
Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Certificate serial: 71AB30DEB191DC8DBC319D51202ECE53246DA3BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
Manifest number: 63
Signing time: Fri 31 Jan 2025 17:30:41 +0000
Manifest this update: Fri 31 Jan 2025 17:25:40 +0000
Manifest next update: Mon 03 Feb 2025 21:45:40 +0000
Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: Qz1Kg1HQXiKB/AScS9V+bE6Z+oOPaOLRSzeXmFVh+Jk=)
2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: U/5D/wcc21xTyKx1Bf3xmPBzCWcUefTmW86lc5VT3XM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ab:30:de:b1:91:dc:8d:bc:31:9d:51:20:2e:ce:53:24:6d:a3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Validity
Not Before: Jan 31 17:25:40 2025 GMT
Not After : Feb 3 21:45:40 2025 GMT
Subject: CN=251B590572C2B9559C0C888E91FF2409FBF88EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:9a:5a:42:3d:1d:4e:6f:a3:e5:e8:b8:bc:
ce:ff:82:9d:a8:0c:42:d3:ff:b7:38:d3:dd:10:fb:
fe:a0:43:da:95:a9:09:9f:81:f9:c6:df:94:27:57:
74:69:99:14:2a:88:0d:74:6f:5a:2a:bd:1d:6e:0a:
23:11:a5:b3:6d:c9:e5:06:4b:7f:0a:c8:a6:f1:72:
4c:26:d2:6b:2c:7b:b0:01:b3:b1:b9:81:b4:30:08:
0d:fb:c2:58:b6:3b:07:69:c9:5e:9d:d7:da:68:a0:
2d:c2:4d:82:5d:03:b4:ae:d2:44:f4:24:a0:05:bb:
97:3f:8c:e4:ad:5d:f4:c5:47:97:d8:c9:51:af:ef:
b5:ef:8e:d3:8a:d4:4f:af:86:02:de:45:4b:86:95:
06:99:bb:94:5c:16:56:1a:64:b0:e9:49:89:97:91:
c6:48:b1:d9:e5:77:f0:88:35:84:71:77:55:1d:9b:
58:a7:ae:18:25:c1:2a:f6:ef:1e:ee:db:c7:d1:b2:
b1:12:9b:53:f9:cd:85:ba:b7:f8:c8:9a:5b:e0:f0:
c2:45:56:65:c6:35:59:31:c3:de:47:63:97:e1:bd:
f9:2a:8b:0a:a7:41:6c:94:ff:f6:a5:a7:53:aa:bf:
cf:c5:70:09:0c:8d:83:2d:31:82:e4:87:28:f0:9b:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1B:59:05:72:C2:B9:55:9C:0C:88:8E:91:FF:24:09:FB:F8:8E:AF
X509v3 Authority Key Identifier:
keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:29:27:d7:d0:e1:21:7a:d3:10:98:fd:b6:e6:55:5d:96:e5:
b4:f9:90:82:f4:87:a5:ee:94:c8:9f:ee:11:15:4d:12:1d:e1:
27:22:ce:53:52:5c:b5:02:4f:52:ef:13:c7:68:02:38:47:a2:
c3:14:fa:76:22:7b:ea:84:4f:06:07:99:24:77:ae:cf:7b:8d:
e7:d7:32:f6:51:87:f1:e3:fb:fa:06:cd:30:e3:a6:9e:33:6c:
53:25:9c:a5:a4:c4:d0:6e:93:bf:d3:17:2a:73:6f:51:16:10:
eb:f9:3a:60:69:33:41:43:76:50:9f:6b:56:1d:b9:3a:38:7f:
72:6a:f9:94:ca:29:04:76:1f:40:50:52:bf:10:b9:07:4a:c7:
c8:79:26:8b:40:f4:1a:be:6f:ca:82:0a:d0:57:c4:ea:8d:a0:
75:36:d1:cb:0f:fd:d2:53:5b:0f:ad:b2:48:90:b8:29:ff:40:
7c:76:1c:ba:3a:90:cc:7b:b3:96:cb:fb:a0:80:e7:b3:ec:9c:
73:e3:38:aa:c1:7e:79:7f:a1:0d:45:03:60:b8:f3:f6:e2:19:
27:0b:a1:a0:8d:04:f0:ab:3d:6a:2f:ca:6e:51:6e:17:53:73:
f0:9f:6e:62:c0:d7:32:5d:ff:a9:65:1b:b8:17:c7:7d:95:a9:
7b:bf:42:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:43 2025 by rpki-client