Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json)
Hash identifier: Kkdv0yiGBEJX+xmJwBHHGfkWVP2uMSJZ8+2Urq1B6VM=
Subject key identifier: 89:65:41:81:6D:AF:EF:D1:74:2A:61:A5:77:3E:34:70:62:41:31:76
Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Certificate serial: 4E246603F95240350D6E69918963447B48393873
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
Manifest number: A6
Signing time: Fri 31 Jan 2025 14:41:30 +0000
Manifest this update: Fri 31 Jan 2025 14:36:30 +0000
Manifest next update: Mon 03 Feb 2025 15:13:30 +0000
Files and hashes: 1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=)
2: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: 5PxnVCDnHCa7UxM/xKnj3gdA7YO/2aIbqfL8Rca9/pE=)
3: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=)
4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:24:66:03:f9:52:40:35:0d:6e:69:91:89:63:44:7b:48:39:38:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Validity
Not Before: Jan 31 14:36:30 2025 GMT
Not After : Feb 3 15:13:30 2025 GMT
Subject: CN=896541816DAFEFD1742A61A5773E347062413176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:7d:a2:00:cd:d7:25:29:cf:6c:a2:18:a5:
34:c9:fa:c5:88:07:bf:26:ae:42:85:8a:e1:cb:a0:
23:b4:0b:ab:21:b1:b7:4f:cb:dc:05:ef:eb:ab:4a:
26:de:ec:51:a5:87:c1:97:00:c7:5d:e5:43:32:4c:
04:d8:01:5e:6e:9f:ec:5f:3e:8d:e6:f5:ff:ed:28:
fb:16:96:6b:2c:a4:ed:d9:dc:31:67:00:b2:24:44:
3d:e3:08:f2:a0:48:0d:33:32:6a:3a:60:3f:39:a9:
87:e4:31:71:5f:d0:f6:e5:77:dc:ff:cf:6e:59:c2:
26:5b:ee:fb:96:22:3d:d7:78:c4:06:b6:76:dc:7e:
48:ff:f7:e3:23:e4:d3:52:a8:57:e6:83:69:ab:41:
6f:5f:48:93:40:cc:e5:36:13:03:cd:0f:5c:ad:2c:
6f:25:c1:f2:84:9b:99:23:38:6e:03:cb:74:ce:59:
e5:37:4b:80:43:2a:bf:e5:3c:ca:c3:4b:1f:3f:2d:
cd:70:4b:4b:e4:1a:60:38:ae:87:ff:47:37:c3:41:
57:db:5f:53:26:26:6d:db:41:04:e8:30:f0:ae:3e:
3a:bc:b2:1f:1a:33:96:fb:28:77:8a:e4:58:95:e5:
58:ac:58:e3:d6:9a:5b:5f:dc:4c:ea:35:91:0d:fe:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:41:81:6D:AF:EF:D1:74:2A:61:A5:77:3E:34:70:62:41:31:76
X509v3 Authority Key Identifier:
keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:63:94:c4:87:ac:dd:c2:74:6d:ba:2f:47:9d:c0:3a:76:
0b:09:22:a7:8d:eb:1e:ce:50:6f:57:ce:aa:80:24:45:e8:14:
09:f1:04:99:7c:4d:6f:e3:e9:ea:45:a4:f2:80:c8:e8:30:e8:
5f:f7:95:4f:c5:54:77:6b:73:55:40:10:88:87:a7:a1:80:b7:
f1:fa:71:99:1d:7c:40:db:d9:b9:1a:fe:cb:25:f7:f5:e4:71:
27:dd:37:3d:72:8a:0d:f6:dd:04:ed:7c:08:1d:6d:66:35:50:
ad:9f:85:70:ea:c7:be:44:b4:eb:97:46:7d:0b:65:02:27:16:
73:c0:a1:32:1a:3f:db:c7:fa:06:fe:0b:90:63:9c:c9:c4:de:
35:85:35:15:0d:79:2b:76:4c:86:33:29:4d:c1:8d:11:08:f0:
f4:63:f5:14:97:db:7e:f2:46:3c:14:43:ff:1e:d4:16:ed:45:
cb:9e:48:46:82:80:d2:16:7d:40:ef:b1:7b:14:b1:4b:5f:e9:
de:f6:44:9c:15:9f:77:dc:6d:04:4b:cd:ad:c0:d3:bc:cb:12:
fc:ad:bc:21:b8:eb:ee:61:46:3f:00:26:8e:c8:a4:db:80:67:
48:04:97:be:fd:ba:c9:71:3f:e2:94:34:ab:ba:0b:d0:bd:6c:
8a:06:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:51 2025 by rpki-client