Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft
File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json)
Hash identifier: iUkniizLzSK7v+gZJYLwnze/Ox9xKUsgI/LK6MG9gtA=
Subject key identifier: C1:77:4F:AA:3E:CF:FF:61:20:04:32:CB:1D:0A:49:D3:34:C5:65:3A
Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92
Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92
Certificate serial: 3302C009FCFA1083CCD0A36EE073C8A7E50ED836
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft
Manifest number: 73
Signing time: Wed 29 Jan 2025 19:40:55 +0000
Manifest this update: Wed 29 Jan 2025 19:35:55 +0000
Manifest next update: Sun 02 Feb 2025 06:48:55 +0000
Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: ruDlvZxwzH98WABBPfx4jUikFQHB1Z32f5yF+Dmn3Ng=)
2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: gGqD44z1LvIfEwQIFwMSy22cIqszejjs5ZvuLEIN3uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:02:c0:09:fc:fa:10:83:cc:d0:a3:6e:e0:73:c8:a7:e5:0e:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92
Validity
Not Before: Jan 29 19:35:55 2025 GMT
Not After : Feb 2 06:48:55 2025 GMT
Subject: CN=C1774FAA3ECFFF61200432CB1D0A49D334C5653A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:37:65:fe:08:55:32:e3:8f:a8:cd:6d:1a:
a7:6f:7b:29:fa:0f:6d:41:5a:0e:7c:56:e7:c8:13:
ad:fc:ba:3a:9d:06:aa:e1:3b:b2:b5:d0:53:d2:b9:
2f:b4:1a:72:51:f9:67:91:5c:d6:13:e8:df:3b:dc:
59:a9:ae:2e:65:d8:41:09:dc:7a:a8:ca:a1:cc:74:
53:7d:61:89:0f:f2:c8:03:56:68:ee:83:65:02:dc:
f1:f6:b5:54:aa:11:3f:ec:87:61:d8:ae:04:d0:bd:
cd:23:d4:e2:fb:fd:45:21:3a:02:d2:df:f2:62:fe:
2f:77:d8:a8:bb:49:2e:23:a9:64:27:e1:84:01:90:
4e:5e:04:9d:f0:0e:ac:06:74:fe:06:db:c0:ef:b6:
60:da:1d:11:a6:10:84:25:d8:f3:af:cb:8f:3b:8f:
25:9c:b0:95:5a:da:e7:62:01:da:3d:9a:cf:d2:33:
4a:7f:fa:16:79:d0:4b:cd:9a:15:d5:06:74:d9:fb:
77:e0:60:c3:50:f7:51:04:56:ab:b9:9c:13:37:33:
c2:5e:4c:31:6d:e4:d7:40:01:3f:47:1d:a6:48:0e:
c9:11:38:bb:44:1b:44:9f:89:ab:3e:28:e3:4e:d2:
f4:87:d6:aa:ac:72:2b:9a:52:3d:57:53:0e:24:93:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:4F:AA:3E:CF:FF:61:20:04:32:CB:1D:0A:49:D3:34:C5:65:3A
X509v3 Authority Key Identifier:
keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:3a:a2:eb:d2:eb:cb:69:80:c0:2b:36:e6:7e:47:3a:af:
2a:34:5e:2c:36:53:5e:af:15:c7:8f:6a:1a:10:fe:73:d1:40:
41:7a:85:34:67:50:29:37:e6:c8:79:21:81:2b:69:f4:5b:b1:
ff:2b:e5:63:11:03:c8:07:24:4d:7f:d6:fb:9f:ba:58:a0:b4:
ad:e2:49:76:f3:fa:5b:c2:3c:0d:ff:6a:32:ac:f0:fa:e8:78:
5b:56:58:0b:8d:f4:83:e9:59:2d:6b:05:12:98:83:49:27:9a:
c8:70:aa:79:c4:f1:28:0c:e9:88:2e:2a:6d:36:65:9a:25:e2:
b8:0b:2f:8b:c7:bc:38:79:46:14:24:fc:0b:5f:72:75:be:a8:
9b:44:2c:9d:17:5d:72:d3:85:b0:87:f3:0a:a3:34:29:73:c5:
2b:eb:bf:65:c8:3d:fd:e7:ca:59:b6:53:a4:3e:37:f0:f7:d3:
be:1c:6d:40:22:a6:64:bb:e2:ce:dd:34:40:36:1d:92:86:e6:
cf:e4:f5:62:b1:d2:d6:eb:eb:ac:61:d5:b4:ed:26:cb:20:37:
94:7a:ea:2c:33:5c:f6:9c:66:fd:46:57:35:3c:1c:14:52:94:
59:62:f4:5b:d8:0b:dc:bd:02:eb:e7:54:e5:6b:2d:90:d6:c2:
bb:33:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:50 2025 by rpki-client