Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft
File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json)
Hash identifier: 5Q+ke/ls6wTSYCzAWgGwUfyw7xLJ2MmBXV2evAz8MkM=
Subject key identifier: 42:01:90:FC:1F:7F:52:77:68:C9:55:7D:F3:13:D3:77:B8:8C:7A:17
Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09
Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
Certificate serial: 201AE75B04479F79283A67929B1A85D7A6EA2711
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft
Manifest number: AE
Signing time: Wed 29 Jan 2025 17:21:18 +0000
Manifest this update: Wed 29 Jan 2025 17:16:18 +0000
Manifest next update: Sat 01 Feb 2025 22:53:18 +0000
Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: nAXaKxesiumr488Pfo/ulY/iaiVxbqIKCJir/ej9vxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1a:e7:5b:04:47:9f:79:28:3a:67:92:9b:1a:85:d7:a6:ea:27:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
Validity
Not Before: Jan 29 17:16:18 2025 GMT
Not After : Feb 1 22:53:18 2025 GMT
Subject: CN=420190FC1F7F527768C9557DF313D377B88C7A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:3c:ee:2e:a0:42:0e:c5:dd:3b:f7:2e:cb:
e9:b0:45:e8:fa:4f:ae:fe:99:c4:f5:1b:86:d2:59:
a0:d9:66:1e:8c:f9:4c:6f:97:62:42:78:25:93:3d:
7f:c4:aa:ee:5c:de:29:94:f9:0f:b2:67:63:e1:3e:
c5:b6:08:1e:bd:fe:1c:dc:db:19:50:fc:59:aa:dc:
15:8b:38:56:98:7a:4f:7f:4e:27:19:29:53:18:3d:
55:5b:1c:5e:7a:d8:02:a6:18:fc:f8:cd:f6:ca:17:
51:a1:01:b8:da:48:9f:95:47:93:6e:30:47:b1:e2:
59:08:dd:69:2b:68:e8:53:a3:ad:44:e7:ad:ae:81:
94:5b:5f:5f:a3:c8:fe:ee:2a:d8:a3:94:ad:73:0c:
b2:de:98:76:4c:57:57:e4:d9:b0:be:c7:c6:8a:74:
03:09:6e:35:c0:2d:d9:02:e2:07:b6:99:06:ba:d9:
a6:7b:57:68:2f:bc:ad:8f:bc:e2:a0:8c:40:a1:7f:
2d:87:f9:89:38:4a:0a:fe:ec:f8:ad:02:57:93:f3:
ad:bd:2b:67:6e:b7:9a:3a:2b:7b:46:f7:15:57:5b:
7c:9b:d1:29:b7:d2:a9:72:bc:10:de:a7:2c:77:11:
b1:e8:cb:40:5f:fc:73:8f:7c:4b:80:ea:9e:c3:f0:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:90:FC:1F:7F:52:77:68:C9:55:7D:F3:13:D3:77:B8:8C:7A:17
X509v3 Authority Key Identifier:
keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1b:4e:f2:ad:bb:e3:f7:c7:cc:6b:00:66:4c:a9:d7:fd:91:
68:01:f1:5c:7b:21:1d:03:34:fe:31:9c:e0:4a:22:72:e2:93:
f8:4d:12:93:8a:27:8e:30:35:73:5f:1c:4a:fe:52:be:02:b9:
42:72:aa:9b:ea:cc:ce:7f:b6:8a:b2:22:dd:3b:64:81:b2:fb:
9f:d5:e0:b6:b6:f4:84:20:76:e7:e2:2a:41:63:bf:72:9c:db:
85:68:49:ac:24:21:38:89:61:e9:75:ca:bd:34:8b:61:3e:99:
1e:d3:d9:bc:07:e4:b4:da:11:9c:67:83:49:b9:fb:55:2f:01:
c2:65:8d:fb:34:65:d6:cf:25:78:89:e7:4d:87:a7:e3:90:b2:
2f:3a:d9:bf:f4:fd:4a:80:9f:7a:de:80:64:c5:83:52:85:19:
e3:d8:d6:20:ba:43:ec:e9:1d:17:9a:a6:4f:3f:05:63:f1:77:
55:73:e6:a1:6d:ca:0f:92:34:6a:c2:19:05:37:00:d2:61:e8:
19:8d:14:7c:5c:fd:04:64:58:e2:f0:ad:58:83:ea:81:5f:af:
08:2a:44:0f:e1:0e:1a:c8:71:ec:a4:0e:4d:fc:54:0f:0a:e9:
66:54:08:06:4c:00:e5:12:cc:5c:10:f3:36:be:c1:14:16:00:
54:2c:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:52 2025 by rpki-client