Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json)
Hash identifier: uPEKIRXknI4cU9lAtY8cHI9c3XIj9K+ERjk87SYzvj4=
Subject key identifier: 8D:B3:1C:9C:AF:56:37:2D:42:2A:71:4A:01:4C:EA:8C:91:E4:D9:2B
Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB
Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB
Certificate serial: 5EEC51C870683BD266E712DA0D247AE6B767A13F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
Manifest number: 4D
Signing time: Thu 30 Jan 2025 13:00:55 +0000
Manifest this update: Thu 30 Jan 2025 12:55:55 +0000
Manifest next update: Sun 02 Feb 2025 15:24:55 +0000
Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=)
2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: Qst70w4GjoVehGB9fDbUlC2BGpF5FJD1fiUoyyOynXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ec:51:c8:70:68:3b:d2:66:e7:12:da:0d:24:7a:e6:b7:67:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB
Validity
Not Before: Jan 30 12:55:55 2025 GMT
Not After : Feb 2 15:24:55 2025 GMT
Subject: CN=8DB31C9CAF56372D422A714A014CEA8C91E4D92B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:e3:6a:b4:7c:58:98:b6:a9:4d:c4:a4:65:
59:91:67:8d:10:6a:00:f2:a2:a2:21:20:34:28:5f:
6b:8e:88:ad:2c:63:a3:a8:41:3a:eb:d8:a7:2c:0d:
7e:a4:3b:5e:c0:ca:84:99:9a:26:d9:b6:ad:f5:2e:
20:9b:6b:ea:4b:1f:31:a4:45:62:82:aa:8b:78:3a:
27:72:3a:6c:ca:fb:d2:1a:15:0d:b4:53:f3:20:3e:
b8:49:fd:dc:d5:b2:bb:0e:fa:9b:53:8e:97:3b:b8:
4e:7e:83:32:24:82:fb:fd:e0:17:76:e1:5f:a3:72:
7e:6b:5b:f4:40:38:ef:64:8f:df:20:96:0e:90:ff:
ef:5c:82:b8:64:50:8b:25:8b:7e:41:f1:ea:93:1f:
47:44:67:95:07:5e:f2:ae:c7:00:57:e4:c7:77:d4:
a6:01:ff:ae:15:79:26:68:b0:d1:d4:75:b7:6d:53:
6d:b5:b0:6e:d9:a8:2b:c3:54:f6:0c:08:e5:cd:96:
fc:11:7c:84:19:84:b9:ed:5a:e2:6c:88:91:c0:c6:
e9:86:72:1a:9d:6e:6d:12:ff:a8:be:82:26:36:94:
13:ee:a3:6a:66:5c:a3:bd:60:d0:ac:67:9b:6b:37:
7a:78:ee:19:5b:ae:eb:e6:2b:6e:d4:02:f8:d6:a3:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:1C:9C:AF:56:37:2D:42:2A:71:4A:01:4C:EA:8C:91:E4:D9:2B
X509v3 Authority Key Identifier:
keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8c:50:a7:4e:88:cc:6c:31:f0:2c:54:29:e3:f0:2f:2d:b8:
9c:0d:76:13:4e:db:6b:25:ce:79:4c:61:1f:0a:6e:cc:ee:8d:
ef:f3:72:b9:fd:15:f1:47:90:c2:32:b7:0e:bc:60:82:9b:99:
28:27:68:25:1e:c6:d9:28:9e:a7:a7:da:53:6e:14:d4:e5:bf:
84:e9:71:71:34:4d:a5:89:41:6c:72:24:95:46:ef:c3:d4:b8:
a4:7f:41:10:6d:93:41:de:35:27:61:88:5a:6e:c5:9d:5a:94:
fa:1e:f7:d5:02:f9:25:93:8e:67:23:dd:cb:af:fb:87:e9:04:
e9:a7:16:38:0b:0f:7b:2e:27:d6:5f:8e:54:a3:07:ec:d2:54:
06:f7:f8:67:cd:5c:f6:f4:f8:0e:21:72:2a:d9:a2:4e:cc:83:
78:9c:30:b8:82:fe:c8:91:a6:52:8b:c0:54:e4:1f:d1:0f:4f:
33:f8:6e:b9:43:33:c1:31:66:7c:0e:66:4f:e3:f2:3d:33:1b:
b1:ac:03:86:02:f2:09:11:5b:e3:95:99:5a:3d:f0:fa:c4:a4:
d4:eb:3e:21:70:7c:d7:8d:b4:cc:0d:d4:11:72:00:98:6e:08:
0c:07:7e:c7:16:e9:08:ad:bf:44:f6:d1:97:25:82:5e:24:2c:
45:14:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:52 2025 by rpki-client