Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft
File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json)
Hash identifier: 8HBh2dE4LKLvjwZsOeMEIx3txOfUtfsDcL7hniEeVOE=
Subject key identifier: 96:33:7E:31:56:E9:F2:C6:43:3A:14:55:85:18:A6:5B:E5:CF:DA:60
Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Certificate serial: 731F05DEF3A1C4EEB4F758C4E0AA6F2B94945672
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft
Manifest number: 1A
Signing time: Fri 31 Jan 2025 11:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:56:15 +0000
Manifest next update: Mon 03 Feb 2025 19:17:15 +0000
Files and hashes: 1: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: ANhL2I+A3+vtl0F+/Tjx496Br4rgWhau7o4PexY5f6U=)
2: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo=)
3: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 66g0GBTdSeAme2H37nLc01yyifW6eVqeoyuhCfgsCgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1f:05:de:f3:a1:c4:ee:b4:f7:58:c4:e0:aa:6f:2b:94:94:56:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Validity
Not Before: Jan 31 10:56:15 2025 GMT
Not After : Feb 3 19:17:15 2025 GMT
Subject: CN=96337E3156E9F2C6433A14558518A65BE5CFDA60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:63:32:9e:c8:cd:52:ae:b2:5c:85:e8:38:
8a:3d:52:5b:37:99:27:2c:c2:84:ed:68:15:a5:8d:
dc:ab:49:ae:14:a7:09:d4:bb:bf:f0:9f:33:b8:24:
6e:c6:69:bb:0e:ce:6a:35:41:51:d7:83:2f:21:98:
3a:64:b7:bb:d5:7b:41:80:5f:17:37:ec:41:88:21:
18:4d:4c:01:70:81:97:00:64:80:cf:a7:d0:e1:48:
ca:1c:00:e6:4a:bd:a9:52:7d:85:f5:bd:08:f1:a8:
5b:97:30:d0:2d:a9:ba:f2:52:f2:44:99:6a:9f:99:
0f:17:9e:a7:7a:2b:5d:92:96:a3:f1:4a:c1:3a:c6:
31:b4:2a:74:5d:56:7a:56:7f:c1:50:c5:43:83:cb:
18:0a:6c:65:32:41:67:53:0a:60:c7:8d:c4:4e:0a:
cf:4d:a5:59:49:96:37:71:bc:47:14:65:34:53:4b:
e1:c0:88:f7:21:ba:be:fe:d4:d6:48:e8:5b:67:c4:
39:72:37:6a:bc:cb:25:f2:ef:94:a1:c3:ca:99:29:
38:61:ca:4c:96:09:ae:7b:41:59:87:82:c0:8c:07:
b7:54:16:a2:d1:bd:9d:e9:fd:d1:7d:6c:df:1d:10:
5b:43:13:03:6b:ea:38:ca:24:63:f2:65:4b:a7:a3:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:7E:31:56:E9:F2:C6:43:3A:14:55:85:18:A6:5B:E5:CF:DA:60
X509v3 Authority Key Identifier:
keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6c:a8:82:2a:58:c8:37:c3:91:a2:a3:1e:68:74:1f:3f:bc:
7e:28:7c:55:18:e4:50:7f:3d:3d:66:47:12:27:73:98:ce:1e:
c7:1e:26:56:44:88:3b:0f:4b:c7:77:e9:ce:ce:ca:1b:2d:4c:
ec:53:8a:d9:52:65:8d:c2:6c:f0:b5:80:e7:a2:bf:21:4e:62:
ae:43:24:6a:2e:36:ba:9d:71:b9:b6:8d:3f:ca:06:11:78:e4:
05:ca:76:61:1c:d4:1e:49:a1:bd:cc:d4:bc:94:8e:31:e8:1d:
b6:b9:1f:90:b6:62:90:4c:b7:33:bc:47:d0:b2:64:0c:b8:3b:
0c:99:00:2a:47:21:9c:04:1d:28:f3:2d:50:f7:54:c7:b4:2e:
b9:7f:6a:fb:9f:18:6b:7c:4f:d4:22:25:3c:c9:c9:0d:d5:1f:
40:96:ff:7e:58:9f:47:83:7f:5d:d5:53:c4:47:c9:f5:a3:f3:
32:c3:ba:5d:51:23:82:d3:bb:9c:88:91:05:43:11:dc:43:3d:
e5:ee:45:c0:c0:df:35:9a:5b:68:84:2a:f3:ff:4d:76:a9:dd:
a3:2d:ce:41:89:cf:0f:8a:70:00:a2:4e:22:0f:26:c2:3c:7d:
1c:c9:a3:17:62:ef:c8:67:bb:84:ca:0a:3c:27:14:9a:df:d7:
45:fe:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:55 2025 by rpki-client