Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft
File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json)
Hash identifier: D+XJ9RYuQzzybb6GiSvxOdMckwfoiEsfD1SPmSwILvI=
Subject key identifier: 2F:62:F1:70:A6:23:8F:2F:F1:28:36:95:DA:38:25:CA:56:4E:E4:5D
Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A
Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A
Certificate serial: 609D7953FE41BF8BFC0D50F1F3ED515EA3DCDEBE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft
Manifest number: 04A2
Signing time: Wed 29 Jan 2025 10:20:01 +0000
Manifest this update: Wed 29 Jan 2025 10:15:01 +0000
Manifest next update: Sat 01 Feb 2025 22:14:01 +0000
Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: xgQd/rPuf45cpwMdqKxEdoY8KAZbjEHoNo5iZUmNsDg=)
2: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: 5aDyzRa8n/rYyY3P+NfC/KA9l0FvWfBCns+b+zox9D0=)
3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 5Gu2z13wsV8/WfeUY7V0KVxrIwfV0qSkIlTIHlKZ5/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9d:79:53:fe:41:bf:8b:fc:0d:50:f1:f3:ed:51:5e:a3:dc:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A
Validity
Not Before: Jan 29 10:15:01 2025 GMT
Not After : Feb 1 22:14:01 2025 GMT
Subject: CN=2F62F170A6238F2FF1283695DA3825CA564EE45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:14:fa:02:8c:04:f9:78:72:df:ad:2c:c5:
36:f8:aa:c6:7e:da:42:7f:0d:e8:e4:d0:29:f1:17:
62:f4:14:9e:5b:74:c2:0a:3b:10:63:4e:01:b7:62:
12:af:41:42:70:87:40:24:04:77:a9:44:89:1f:3c:
10:f6:80:8c:ce:b3:7c:fa:ae:d3:d4:c3:d1:86:d7:
79:25:18:4d:ae:b1:b2:81:51:26:0b:e3:29:c4:50:
da:f1:2d:03:69:54:29:47:7a:cb:5c:b7:b2:5e:be:
f5:1f:bf:28:87:06:7a:9c:01:e4:20:93:1a:6d:26:
06:63:5e:90:a0:c5:49:e9:cf:e6:7e:68:f4:32:1e:
1f:12:6b:c0:b2:74:24:53:6c:f0:22:3c:a0:29:c5:
f1:0c:7f:e0:8c:19:5a:30:f7:09:61:a8:cc:15:7a:
74:2b:ac:d5:ea:2d:d3:e4:57:80:fc:d8:96:28:46:
12:74:4b:eb:78:9f:75:67:44:cd:83:90:db:53:88:
43:0e:ae:1a:64:56:90:bc:4a:30:a0:2f:c1:7a:b4:
82:40:ce:09:ab:56:e7:67:52:db:0e:40:3f:71:2d:
34:09:d1:f9:e0:82:c7:c7:ad:48:83:d4:4b:01:1d:
63:1a:d7:24:97:84:7c:b5:bf:3f:5e:33:f6:85:00:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:F1:70:A6:23:8F:2F:F1:28:36:95:DA:38:25:CA:56:4E:E4:5D
X509v3 Authority Key Identifier:
keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dd:73:99:64:b8:1f:bf:ab:8c:40:93:de:9a:72:38:73:8a:
d0:4e:9b:1a:5c:e4:88:66:63:42:72:26:93:5b:c4:0a:dc:e9:
e8:ea:16:20:5f:94:18:bc:53:a7:72:b0:b5:6e:37:b6:19:47:
06:35:11:8a:44:64:60:9d:ae:15:92:e6:a6:86:9b:09:a4:05:
29:ba:65:89:a9:85:68:ff:b9:19:f9:2c:51:81:4c:7a:6f:d6:
dc:ba:85:27:99:83:81:20:77:f6:bb:61:78:43:e8:f7:57:c6:
24:d5:4f:10:48:2a:c8:e0:5f:58:65:df:d7:55:ab:18:1c:e7:
f0:25:2c:63:4d:d0:4a:a6:7b:e6:d4:1b:e6:f1:cb:e7:7a:b3:
f6:c8:ae:4a:7b:c0:58:9c:6e:19:ae:eb:b6:e8:3e:b2:84:e5:
13:38:de:27:bd:7f:68:88:d0:f2:b2:0e:9b:a7:18:3d:75:8a:
ac:c1:76:ab:d1:15:7d:d6:f8:62:d3:00:57:f2:d0:93:40:7c:
83:bf:b7:48:fa:2a:86:72:77:7e:f0:43:cb:bb:03:a0:ca:ea:
44:b6:50:ab:83:56:e2:d0:5a:9c:8a:f1:31:af:c6:5f:8d:16:
cb:6c:c5:43:d8:09:4f:32:00:32:4e:59:1d:72:6a:6f:ca:f7:
1b:67:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:47 2025 by rpki-client