Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft
File: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json)
Hash identifier: +ewPk/jv6nErDsIMajEt416cZ767Bf/8/6W7I+cJKNA=
Subject key identifier: C6:DF:69:48:8A:C0:96:66:A1:4A:4C:A3:96:5A:26:E3:9A:45:8F:02
Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C
Certificate issuer: /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C
Certificate serial: 26B65BDB900AF2284650BF8814C7E4E5AF4E04E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft
Manifest number: 3A
Signing time: Wed 29 Jan 2025 21:42:16 +0000
Manifest this update: Wed 29 Jan 2025 21:37:16 +0000
Manifest next update: Sun 02 Feb 2025 01:00:16 +0000
Files and hashes: 1: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: qZw0TBwDWmU1HIh4FMSwRZE72r2xxvJdKPjb+0sUlCE=)
2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: LDJv6wYx3HsP5pbUhXvKMJKGJv2fMd2X2nhqPoeeYwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b6:5b:db:90:0a:f2:28:46:50:bf:88:14:c7:e4:e5:af:4e:04:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C
Validity
Not Before: Jan 29 21:37:16 2025 GMT
Not After : Feb 2 01:00:16 2025 GMT
Subject: CN=C6DF69488AC09666A14A4CA3965A26E39A458F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:00:b8:98:02:2d:10:76:c5:04:cb:76:c3:
8c:c0:f9:3d:70:73:bb:b2:7a:ae:77:ce:ec:26:ef:
a1:1c:38:2d:37:63:c3:79:76:c5:7e:0e:24:1e:09:
b2:54:ea:b3:2a:43:76:f7:8d:8d:69:d8:30:56:08:
f2:7e:ab:1d:d2:93:b6:6f:77:d9:9e:d5:f3:f5:9b:
94:ee:0a:eb:93:b0:55:1d:ac:0c:9e:15:fa:88:55:
da:fd:65:e5:48:b5:7c:f2:71:26:20:9c:87:f8:86:
3b:97:bc:2b:df:43:ef:70:e8:41:bf:81:4e:7c:fe:
48:a9:c5:0a:a8:37:c0:5e:8f:bf:c4:b3:27:5c:95:
01:be:27:3e:7c:2f:21:8d:2c:e7:06:97:0c:41:a7:
c4:9c:ba:c1:84:bc:1b:e9:69:8d:6b:ea:97:0e:85:
ae:86:9d:32:0f:35:e0:b5:2e:98:bc:cf:cb:3c:1f:
c1:f5:2f:6a:93:15:17:bf:a4:60:5a:e1:bd:63:ac:
28:d7:a8:aa:5f:24:12:8c:58:85:59:61:c1:c3:73:
30:8e:29:4a:9b:5e:b9:3f:d3:16:d2:57:eb:59:26:
db:c7:04:d8:7f:a0:64:52:9f:da:2b:d9:58:e8:e8:
87:e9:4b:c3:0b:17:2b:e0:4e:35:70:b3:44:3b:fc:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DF:69:48:8A:C0:96:66:A1:4A:4C:A3:96:5A:26:E3:9A:45:8F:02
X509v3 Authority Key Identifier:
keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:eb:96:c6:eb:1f:89:50:b6:b0:04:2b:5c:c6:d3:a0:bf:1d:
4c:33:cd:31:b8:f3:88:f8:bb:d7:1b:47:f8:e8:38:13:55:4b:
23:2e:0e:3f:2b:d8:f0:ce:10:fb:f2:4f:52:27:b8:b4:19:bc:
a5:a8:64:21:5f:bb:d5:20:74:b7:51:af:98:49:50:84:e2:4c:
b5:78:40:17:97:a1:ab:2f:ee:f6:d7:db:82:d0:a0:a2:3b:47:
43:7e:49:77:b9:bc:35:ad:ab:42:8a:44:96:0c:ad:21:39:ac:
61:82:bd:92:39:91:a2:1a:2a:2b:23:9e:80:4b:ae:b1:0c:f7:
28:a0:00:dc:01:e5:e5:8e:b7:f8:ba:d5:d5:09:d2:d4:4e:dc:
f2:f7:ac:87:7f:54:a9:b2:cc:63:bf:99:ec:42:e5:6d:75:2d:
46:19:fa:94:08:be:c5:af:9f:d5:7a:c5:41:c0:48:7d:e9:24:
9e:3a:13:41:30:b0:16:8c:de:fc:d0:76:56:90:53:15:9b:b6:
e0:1c:43:7b:95:b5:ef:18:c6:1f:fb:b1:a2:d8:a5:95:02:00:
a1:f7:53:80:41:0d:38:5d:d9:5b:0d:c0:42:68:69:73:00:9d:
b7:27:c0:60:45:01:f3:9a:9f:08:e1:71:c1:58:2e:e3:cd:a9:
7f:63:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:31 2025 by rpki-client