Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft
File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json)
Hash identifier: 7HBHDVjrqI39Ukik6EAwV7fhTtU1Vm3NgUhwP0jAx+I=
Subject key identifier: 1B:6A:6E:82:DA:75:09:06:C8:48:D2:90:E9:65:B2:09:71:47:BB:CC
Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C
Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C
Certificate serial: 192C4B82C92B49D26411FE282437942628703038
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft
Manifest number: 04A3
Signing time: Wed 29 Jan 2025 18:21:22 +0000
Manifest this update: Wed 29 Jan 2025 18:16:21 +0000
Manifest next update: Sat 01 Feb 2025 21:59:21 +0000
Files and hashes: 1: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: 59qMTv4paLdWXiwT2oV/vp66cGSBtXNIesoOS5CrUuk=)
2: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: 2RQ2kX5zDajb4kTPcsNyRUqORecvlGLhw0ztmJt9qpY=)
3: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: K6IPwg5vPS17ImLidsJLbGqSOx5ucj2gTrepRe+aavU=)
4: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: uwduCvzKqm6swEghv3Zot5Za1ysLZxOy6ByFYlQKNCs=)
5: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: 2l9WJirwQZDRv/TSoObPb5SI7hgV3kRaxDMplLJM4ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2c:4b:82:c9:2b:49:d2:64:11:fe:28:24:37:94:26:28:70:30:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C
Validity
Not Before: Jan 29 18:16:21 2025 GMT
Not After : Feb 1 21:59:21 2025 GMT
Subject: CN=1B6A6E82DA750906C848D290E965B2097147BBCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:68:d1:d8:1b:5a:a7:d4:de:ad:6c:47:67:ea:
a3:83:79:6d:30:39:d6:dd:bb:c9:80:4d:c1:74:f1:
a9:a1:39:d7:85:53:41:4f:42:0a:3e:b8:7f:49:9b:
b7:3c:5a:1b:c3:0f:d9:66:57:ca:53:da:ac:c1:02:
77:7b:6b:9c:33:b4:6c:40:e4:6f:39:52:e4:cc:14:
be:c9:59:69:ef:f6:7d:dc:8d:c9:66:ff:86:b4:df:
a8:0f:cc:5f:74:5a:ce:d5:ab:61:7b:84:97:40:a3:
3c:b8:c8:b8:db:76:ed:90:e2:be:6e:0d:1b:43:61:
3e:ed:41:fc:52:91:1c:b5:b7:f0:1f:4c:18:a6:1d:
97:62:75:63:fc:98:72:21:fe:c9:90:d5:54:ff:1e:
9b:d1:07:fe:1e:7f:82:74:98:fe:f8:08:49:74:46:
71:ea:c8:00:cb:a9:0b:80:9c:26:b3:81:54:83:ec:
f6:77:50:5e:0f:a7:71:4b:f3:51:87:2c:2c:6c:c4:
25:9d:6e:61:76:d9:88:ab:25:8a:9c:95:be:f7:10:
ab:0d:1e:f7:92:15:0e:fb:94:1a:ea:fe:7a:ac:40:
f7:d8:5d:7d:87:6d:1a:60:6a:0e:ee:d2:83:af:f1:
c9:a9:98:c9:5e:1d:e0:32:bc:17:0b:41:d0:f9:ac:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:6E:82:DA:75:09:06:C8:48:D2:90:E9:65:B2:09:71:47:BB:CC
X509v3 Authority Key Identifier:
keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8b:5f:69:b1:9c:a6:54:6f:ea:9d:ab:2a:40:84:42:44:5c:
9d:1d:25:18:67:17:d2:e0:a3:0b:c6:20:bc:b9:db:c1:ab:c1:
16:68:bb:92:8b:55:a5:78:60:e4:79:26:58:c7:23:fe:24:12:
9c:99:6b:f8:f9:f0:4c:cb:8b:e3:8e:15:ed:5f:81:c7:ec:80:
14:dc:9b:3a:dc:63:77:bd:e7:46:f9:2d:51:a7:39:ee:cf:9c:
ba:bc:97:cc:d5:e7:91:99:3d:1d:b0:2b:9b:79:d0:76:72:37:
fd:a6:41:b8:5f:4e:32:80:da:f1:39:40:77:62:bc:ae:a3:92:
bd:4b:4c:f4:9b:53:e3:c2:f5:a3:0a:e5:cd:9f:f0:89:b2:a1:
a5:87:2d:99:60:5c:72:65:04:5a:ad:51:b0:af:48:6f:28:71:
46:cc:03:c7:8c:52:f2:97:23:eb:d5:20:f5:84:de:63:75:88:
31:68:b1:10:cc:f2:18:cf:17:94:92:31:75:5e:b3:6b:5d:42:
14:17:5d:d8:ee:75:65:07:23:9a:49:29:1b:d8:fa:fb:ed:95:
6d:48:e3:9c:9e:22:0d:fd:71:ac:fa:da:d6:7a:13:3e:15:c3:
7e:71:57:eb:cc:16:76:98:c9:e2:3e:d1:71:49:9d:5d:c0:f9:
22:d7:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:59 2025 by rpki-client