Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json)
Hash identifier: DUGIx21LdrEMwVrXl0RokWRhhGkb2g77OewEVX5+Qw8=
Subject key identifier: 24:15:DE:A5:DB:39:52:AC:3E:5F:F7:DE:19:03:89:7C:B9:D3:A4:33
Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02
Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02
Certificate serial: 29408BA88FF3837DF3902B3B29F14358865BD022
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
Manifest number: 0164
Signing time: Thu 30 Jan 2025 15:30:50 +0000
Manifest this update: Thu 30 Jan 2025 15:25:50 +0000
Manifest next update: Sun 02 Feb 2025 22:23:50 +0000
Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: ylSZX5cbUBNlOtpilc1bdTHmI4pPUFW9DQ4DF4we3cc=)
2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: gpKP80eZFgz1Xe+59VM+E5nhQuUU0t/9JV7P0fWMBTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:40:8b:a8:8f:f3:83:7d:f3:90:2b:3b:29:f1:43:58:86:5b:d0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02
Validity
Not Before: Jan 30 15:25:50 2025 GMT
Not After : Feb 2 22:23:50 2025 GMT
Subject: CN=2415DEA5DB3952AC3E5FF7DE1903897CB9D3A433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:ac:21:24:13:37:00:86:5a:ec:10:e5:d1:
73:4f:b4:ee:1a:f9:42:25:b9:a9:17:42:4a:6f:a5:
26:f4:b4:f3:64:ed:eb:04:79:5d:a6:6d:e6:e4:ea:
a0:20:35:09:2b:5a:22:cf:f1:a3:31:d9:9c:54:6e:
aa:16:79:9f:9c:fc:53:4d:79:bf:f4:cc:59:41:71:
19:6e:40:59:cb:4a:df:a5:84:38:cb:c1:e9:75:ad:
fc:ed:93:9d:29:09:8d:3e:9d:33:14:28:db:c3:10:
3a:3d:a9:2d:2f:0b:e3:36:80:72:b6:44:1d:4d:99:
41:9e:22:dc:54:a1:3a:10:18:d7:01:64:f2:be:fd:
64:f2:c7:e4:01:99:a2:0a:b6:20:c0:90:e3:f7:fb:
c3:2e:2b:6a:82:4a:ee:bc:d8:c6:48:0f:f5:81:48:
d8:da:f7:2a:74:47:f6:f4:af:b6:b0:fd:93:ba:48:
5c:06:ed:b1:62:ac:bb:e4:f7:f0:90:60:77:6d:9d:
74:e2:ce:87:37:ce:02:e4:d8:eb:c1:44:a5:41:43:
fe:65:cb:13:00:88:6c:e4:12:f7:5b:88:38:c5:36:
cf:2f:c5:71:09:7d:b9:c2:ca:0f:83:2c:96:77:e2:
fa:93:c2:e0:5a:65:0a:35:87:26:b5:db:31:04:80:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:15:DE:A5:DB:39:52:AC:3E:5F:F7:DE:19:03:89:7C:B9:D3:A4:33
X509v3 Authority Key Identifier:
keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d9:69:c6:87:7c:a2:da:f1:f2:86:62:34:65:6d:b8:03:3b:
73:e0:5d:20:f6:bf:3c:f8:b8:21:aa:dc:34:c1:29:d9:b8:6b:
08:6b:d7:14:1b:17:3e:33:85:f8:b3:44:72:2a:d7:ee:b3:f7:
61:05:7d:3e:e3:63:6d:16:3d:66:9e:05:38:3f:01:ec:99:6c:
ec:35:16:17:6d:97:97:54:1c:59:3e:a8:20:14:ed:42:11:41:
98:db:04:8c:5d:84:74:3d:dd:d2:33:f0:67:ca:63:dd:d4:91:
b1:81:6c:a7:6a:1c:48:b1:5b:78:86:cf:1a:51:04:8c:86:48:
b2:00:37:68:09:fb:41:ef:71:c0:21:b3:dd:5d:5e:c9:5a:6d:
ef:d3:b9:de:94:c2:39:48:22:58:94:c8:f1:57:a6:3e:75:89:
7d:6b:56:01:18:cf:22:83:98:38:8d:fd:7a:83:6d:94:1b:ce:
ee:4e:3d:07:4e:8a:ad:23:0d:63:0a:2f:49:d3:b2:52:fb:4a:
87:a6:da:99:49:b0:aa:16:88:ce:95:cd:be:ba:93:f8:c9:e2:
46:f3:5b:5d:8f:a7:30:e1:fc:17:62:e3:9a:c0:8e:31:3c:af:
eb:6d:48:22:50:f9:4b:24:ec:70:b3:d3:b6:e0:15:09:4e:14:
ea:0c:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:27:32 2025 by rpki-client