Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json)
Hash identifier: JiI13DQGlgeeYOUhCdWUjrbuARkcPANXSWPICdBgLAM=
Subject key identifier: 17:5C:09:9D:C2:D6:96:62:E2:33:C2:B0:F0:D8:92:BD:E1:BB:42:28
Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53
Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153
Certificate serial: 18F7D2BC4B6D81CE1F89A97FC8DAB24EE8CD4619
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
Manifest number: 5D
Signing time: Wed 29 Jan 2025 17:50:02 +0000
Manifest this update: Wed 29 Jan 2025 17:45:02 +0000
Manifest next update: Sat 01 Feb 2025 22:36:02 +0000
Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: yks7nJcsDo9XtgYxk9DnHK0wG2/vAHkj81nLw0hV720=)
2: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: jMQrhO68COGXLcIkDAhZlK/+Ktu74N2ruke82fu1rYg=)
3: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: 0nm8+wg97E8X0p8UXEGrmZEjRdWW322tQB5S1kkGNIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f7:d2:bc:4b:6d:81:ce:1f:89:a9:7f:c8:da:b2:4e:e8:cd:46:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153
Validity
Not Before: Jan 29 17:45:02 2025 GMT
Not After : Feb 1 22:36:02 2025 GMT
Subject: CN=175C099DC2D69662E233C2B0F0D892BDE1BB4228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:3c:7f:aa:f3:58:f4:15:7a:d2:fa:43:f3:
fe:2f:36:32:03:12:3d:32:23:70:ee:02:b8:99:10:
84:3e:0b:42:85:6c:bd:30:90:0a:3d:a6:4c:1e:82:
aa:1d:b0:72:82:2a:9c:1e:5e:49:48:6e:d9:be:c8:
ed:76:80:e2:00:d9:f7:4d:10:ed:89:c8:04:f3:ae:
a3:d3:d7:75:3f:c4:08:b0:bf:cd:2a:fd:6b:82:c4:
61:a3:81:b8:5a:af:66:69:e7:91:8c:76:5a:54:aa:
72:5b:df:58:46:86:d3:d1:fa:9f:fa:6f:fb:02:92:
cb:cc:6d:45:37:f8:44:1c:df:7c:7e:0c:c6:c8:4f:
c4:7f:5c:e1:34:2d:6b:34:1e:b5:be:15:c7:d8:64:
80:0e:c3:3d:bf:b6:60:eb:03:ec:91:2e:aa:59:05:
cf:e9:d4:d3:67:22:5e:73:c6:dd:3d:2c:92:0a:73:
b1:4f:e2:71:be:c5:64:38:57:63:6a:bc:52:ef:97:
bf:51:ab:a0:2d:49:db:b8:95:63:3b:1e:7c:13:7b:
99:ab:99:f5:d7:57:a8:a8:2f:de:1c:68:b9:f9:4d:
38:31:6e:b3:09:c1:17:27:2c:47:84:9c:1c:64:ce:
2a:e3:18:00:0f:10:fb:d6:90:f5:40:38:36:ff:a1:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5C:09:9D:C2:D6:96:62:E2:33:C2:B0:F0:D8:92:BD:E1:BB:42:28
X509v3 Authority Key Identifier:
keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8b:8b:97:8d:94:d2:de:89:13:7e:04:b7:f9:02:14:ed:31:
c6:1b:13:9c:41:e2:db:1b:d3:9a:fd:f0:94:d9:7a:31:e8:c1:
91:50:6d:e6:4d:dd:d1:11:cf:64:20:7a:ad:3e:eb:61:e6:2c:
ee:8c:b1:f5:80:cc:6e:02:25:ff:f6:30:33:f5:d0:0e:97:b2:
97:55:49:8d:7c:40:b0:f7:b6:60:93:55:ed:30:4f:2f:b1:2a:
8b:4f:42:5b:a4:1d:e9:7c:b9:6c:e7:e5:67:6f:35:8b:f8:30:
7b:74:2b:eb:97:d6:80:1f:16:e5:2f:6b:99:1b:09:83:7f:bb:
44:41:70:bc:60:8b:20:03:69:fc:d5:9e:d9:9c:02:1a:f7:d2:
8e:90:ee:d8:0c:a9:16:ce:14:c9:65:53:14:6d:d1:b6:a6:b3:
ca:a8:4f:e0:dc:09:6f:57:fb:f4:cd:86:4d:28:95:23:dc:40:
ed:a6:4e:38:a7:0e:af:c7:98:e1:e5:da:52:89:3f:b1:c6:1f:
50:42:df:57:dc:96:6a:74:9e:c0:72:f7:a0:fd:dd:5f:4b:53:
f6:01:fd:7b:ea:c2:ba:52:db:45:e3:04:19:cc:46:8b:3c:af:
90:d4:70:65:a5:ed:74:e4:0c:b7:7b:52:3a:f0:c8:31:57:37:
81:05:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:50 2025 by rpki-client