
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft
File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json)
Hash identifier: Vev+6/nTu64FzRPuhLNGP9jI3p8PXHhP+BfASqVwuiQ=
Subject key identifier: 8C:00:0A:4E:5E:57:6E:8C:A7:85:11:94:65:C4:D9:05:11:06:E2:A8
Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20
Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20
Certificate serial: 3B23EA7C3AE5B58F8543F095BD898D8F9F8105EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft
Manifest number: AA
Signing time: Thu 30 Jan 2025 14:50:57 +0000
Manifest this update: Thu 30 Jan 2025 14:45:57 +0000
Manifest next update: Sun 02 Feb 2025 22:15:57 +0000
Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: dCPMVf9RqfFMXuD/kNm5AAmSui2zQ5woQ4mmF9+lOF0=)
2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:23:ea:7c:3a:e5:b5:8f:85:43:f0:95:bd:89:8d:8f:9f:81:05:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20
Validity
Not Before: Jan 30 14:45:57 2025 GMT
Not After : Feb 2 22:15:57 2025 GMT
Subject: CN=8C000A4E5E576E8CA785119465C4D9051106E2A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:b5:70:c6:3a:db:22:b3:2e:6b:68:41:de:
5c:2f:5d:8f:a2:65:86:24:b7:e0:0d:da:f6:60:6c:
68:25:1c:52:20:21:89:3a:c7:3f:bf:3a:d3:c0:bb:
bb:9d:1f:1e:93:98:cc:67:9c:5f:c9:76:e8:6f:3c:
50:3d:09:ea:34:0f:b2:25:38:ef:8f:92:91:ff:21:
a5:55:85:96:32:01:ba:e2:4a:84:7c:ee:f9:f2:77:
b6:78:86:ca:be:2c:17:76:f1:ea:9a:43:10:2f:f3:
c5:30:73:29:01:6c:e9:81:a3:c4:01:49:4c:f7:75:
91:88:4a:f0:89:0c:3f:cb:28:5f:d1:b3:b7:fe:39:
4b:34:ad:83:1a:d9:51:6a:69:3d:38:8f:d0:75:42:
a6:6a:90:fb:64:36:9c:4c:1e:18:eb:b6:63:09:7a:
dd:2b:26:5c:c1:42:7f:e9:18:d2:47:b1:6a:dc:7c:
e0:23:11:a7:bf:98:af:84:b1:1c:ca:fe:93:16:f6:
1f:ad:28:ed:f6:c8:52:5a:65:97:56:c0:66:76:be:
20:c5:42:23:68:0e:2e:94:c6:76:91:10:b8:66:17:
2b:72:96:90:29:23:8b:55:11:a1:4a:2f:75:43:f2:
74:61:85:bc:0e:f3:cd:cd:48:8f:68:51:b2:56:21:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:0A:4E:5E:57:6E:8C:A7:85:11:94:65:C4:D9:05:11:06:E2:A8
X509v3 Authority Key Identifier:
keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:98:00:af:c7:55:a5:91:be:12:3a:29:f3:41:d1:b0:8b:69:
bf:50:b5:7b:d4:86:0f:ab:21:aa:4f:7e:8b:50:2e:c3:51:90:
17:c5:c0:c6:46:8e:af:ce:94:c7:1b:57:df:0b:3d:c4:bb:07:
ae:be:47:11:0d:6b:c9:e4:83:03:17:f7:83:c5:30:91:c7:36:
83:47:a6:02:05:55:1b:75:ca:0d:d9:9e:0e:cc:f9:ad:dc:a7:
c3:e9:fb:ac:69:fd:0b:fd:97:8a:ae:a1:19:e9:e6:cd:e2:c5:
d6:d4:4e:94:f0:56:2a:24:96:64:3a:56:2d:17:96:6b:86:06:
cc:47:e6:65:99:43:30:eb:4d:c9:30:f4:d1:a3:db:92:c6:ae:
77:50:c1:4e:b7:d0:7e:58:4a:34:b2:8e:03:eb:b4:c5:fa:24:
a6:fe:5a:28:f9:4a:a4:9e:4c:a8:56:c5:f2:04:b6:ae:db:fa:
f6:a9:8a:9d:38:f0:bb:0d:31:d2:7e:88:6a:0e:df:1c:a2:5d:
a1:87:f3:18:c5:e1:57:61:fb:ea:d0:cd:c5:3c:e5:01:89:fb:
9d:64:53:ac:d7:e7:a1:ca:78:40:44:3e:21:4d:00:89:e1:2b:
ca:76:3a:da:c5:0c:1e:82:5e:31:95:c5:5b:bb:93:0e:da:18:
8b:3a:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:14 2025 by rpki-client