Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json)
Hash identifier: jT57yeC6ptM2jO8SoFllzp0jt5gzU5yAbHnjgJ6Vkq8=
Subject key identifier: 4D:5E:DD:BB:5B:11:FE:85:FA:09:7D:D7:7B:7C:F2:44:E7:50:4F:59
Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Certificate serial: 34768A0A0E9A00C55E0E551920D7D16D2F4B104A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
Manifest number: 04A6
Signing time: Fri 31 Jan 2025 05:10:41 +0000
Manifest this update: Fri 31 Jan 2025 05:05:41 +0000
Manifest next update: Mon 03 Feb 2025 08:45:41 +0000
Files and hashes: 1: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: OI9Dbbh3AxBZ/lUfEAmwLldVzXyZ0yA+CnQ3viXQgc8=)
2: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: 71jqN8DhE0JKYB0EqMDkvLldp1gfS+xo4HcST08Qg/k=)
3: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: dlsqZUGTjCRx+krpGNhgh3Umv+mTDrb/1GV2U8GokZ0=)
4: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: gmlwk1E3suVjn/8fiND0vsV46kLjlNiZNpLWBhFFIPo=)
5: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: O8mIp2m2uJAcP/Uvu+pURtBO6dfdW2ej1Mv0k3y3PdE=)
6: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: sOLICWbkOQCKZGJuOxKOtJraYeaZ/2+UOwySpa2U+Ms=)
7: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: OT+Mk5WwssGJkg82hSQpE4gvwieaMEJQhhjdSn/cLTY=)
8: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: AhfedWLCTEc5EhocODFri+NBZVGPcnF3DEyLO8J+BrU=)
9: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: cAMxueznS/nh3h73C9cG6Tq/nGQZqb7kaIFcHdsdkqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:76:8a:0a:0e:9a:00:c5:5e:0e:55:19:20:d7:d1:6d:2f:4b:10:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Validity
Not Before: Jan 31 05:05:41 2025 GMT
Not After : Feb 3 08:45:41 2025 GMT
Subject: CN=4D5EDDBB5B11FE85FA097DD77B7CF244E7504F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:77:a8:0a:51:fa:3a:e5:07:78:6e:fa:f0:
62:bd:5b:13:80:eb:85:be:35:61:a8:f8:95:f4:63:
ae:19:fd:3e:89:fd:e2:66:c4:2e:fc:a0:16:ec:01:
dd:02:a3:f8:04:5f:ee:8b:23:60:99:3e:af:cd:54:
de:3e:f1:4a:24:7b:d4:04:d1:2e:f4:b6:0f:97:eb:
ff:76:2f:f8:e0:0c:dc:d7:80:88:35:06:e0:8e:2b:
12:66:1a:f5:87:a4:8d:19:ea:25:fd:be:3b:85:74:
0d:cf:9b:37:e6:4c:1e:60:3f:41:9b:c5:27:92:a5:
8f:2f:ae:8e:e1:7e:5e:d4:06:b3:83:96:68:6f:f9:
8b:7b:5a:89:e1:f9:76:19:06:5b:13:c5:c6:6f:eb:
4b:57:11:12:08:69:9a:a6:45:af:60:05:f9:21:52:
5c:d5:3f:4b:8e:68:31:12:c8:5f:41:83:01:33:6b:
49:c3:6f:43:0f:fc:d0:8d:ef:0c:ab:75:46:8a:2d:
32:1a:aa:53:27:e6:72:6e:e3:c0:7c:79:89:a1:c3:
c0:20:6c:5f:9d:bb:f6:02:1c:36:08:d4:9a:ef:4b:
07:cf:db:8b:c2:76:62:e1:4b:a7:e0:31:fd:69:07:
bd:1b:5d:f8:34:4c:e0:19:6f:37:c1:4f:ca:14:d7:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5E:DD:BB:5B:11:FE:85:FA:09:7D:D7:7B:7C:F2:44:E7:50:4F:59
X509v3 Authority Key Identifier:
keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f6:e5:10:93:c0:fb:b0:08:75:c4:dd:cf:bc:cd:80:60:40:
06:52:69:10:84:69:2b:bb:47:00:73:88:07:9e:4d:66:b1:be:
71:85:25:97:31:57:5d:26:73:a2:c4:c0:4e:f2:07:c5:68:04:
e6:bf:63:ba:c6:c5:ca:f5:a0:d4:a7:5e:e1:84:30:ec:2e:38:
bd:44:55:bd:73:8c:f8:67:3a:cf:27:e7:6d:0b:a4:5b:aa:f5:
68:9b:2e:27:ab:47:7d:4d:5b:70:96:34:96:65:6b:4c:0e:f2:
a8:d0:19:95:b7:34:07:48:f5:d9:39:07:73:f5:00:fd:b9:ba:
03:d8:88:7e:e2:10:83:4a:06:d2:68:39:1b:39:cc:d1:bb:60:
d4:6c:1e:e1:d1:b4:1f:c6:b6:f4:72:81:31:e0:20:af:20:37:
ef:cb:b3:ad:fb:87:86:dc:58:7b:b1:05:05:9c:fc:38:7c:45:
41:a6:6f:02:23:2d:1d:a6:aa:88:63:f1:55:9d:4b:3d:5a:11:
b6:6c:8a:6b:d9:0e:6c:24:7d:7e:94:77:89:1f:79:72:d6:62:
27:73:cc:c6:19:ba:8e:f5:0a:af:66:95:fe:38:c4:6f:27:b8:
49:a9:b2:4b:f6:6b:94:44:49:f9:a6:42:cd:8a:81:d1:89:5a:
aa:6e:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:10 2025 by rpki-client