Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json)
Hash identifier: 2yV4gWJd8F+C8X94hIBMRXsKbkF0rDTJ311bKpUNW2c=
Subject key identifier: 84:7C:68:61:96:E3:4C:D2:CA:F1:39:64:7A:B0:9F:CA:22:79:FD:2B
Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0
Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0
Certificate serial: 4AF589E232FCBCD9C7D36BB2BFE174127BBAB14A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
Manifest number: 04A1
Signing time: Fri 31 Jan 2025 08:11:13 +0000
Manifest this update: Fri 31 Jan 2025 08:06:13 +0000
Manifest next update: Mon 03 Feb 2025 11:16:13 +0000
Files and hashes: 1: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: NR2UNYb3LeQJUXpKgRfC9BlXAa2doRkgf74e1BcGCvc=)
2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: bYiP/gT3tssmEshWDR+uWvBdHdyDVEshU6H8/AUYQ8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f5:89:e2:32:fc:bc:d9:c7:d3:6b:b2:bf:e1:74:12:7b:ba:b1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0
Validity
Not Before: Jan 31 08:06:13 2025 GMT
Not After : Feb 3 11:16:13 2025 GMT
Subject: CN=847C686196E34CD2CAF139647AB09FCA2279FD2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:21:96:66:f9:2a:cc:65:d5:f0:3b:6a:d5:
b7:a4:d2:f8:2a:3a:91:94:c8:c7:2a:0a:ca:d1:79:
b8:a4:c3:7c:ac:2a:cb:06:9e:f2:65:af:30:e0:d0:
80:1c:a0:b3:7f:76:99:c3:4e:e9:43:58:ce:90:12:
00:89:cd:69:d4:00:68:df:70:5a:03:6f:48:39:da:
79:12:f9:c6:7a:8a:a5:98:32:d6:4f:ca:3e:b6:76:
26:ff:c3:40:85:75:f8:7d:b3:03:ef:91:c1:88:97:
67:68:76:ee:13:6e:49:c1:7d:5a:5a:10:3c:ee:ad:
87:94:8f:2b:91:30:36:0a:51:69:cd:ac:1e:f4:fe:
6f:da:c3:e3:39:23:c4:e9:22:ef:28:21:aa:21:89:
fe:43:a1:15:33:37:e6:a1:8f:f8:d5:02:18:dd:47:
2d:96:48:3e:12:39:fa:9a:c3:53:f3:bc:4a:72:95:
69:9d:f5:e7:32:5c:2f:c5:43:5a:81:7a:30:c3:74:
3f:7b:e5:fe:53:51:16:80:98:5d:1d:3b:0e:b5:ea:
30:e1:7c:04:3f:e6:89:59:df:0f:de:ef:3d:97:9e:
85:d5:d3:ad:74:95:02:91:f4:c7:2a:1c:6d:7b:bd:
8c:ec:f6:43:03:09:d0:34:55:44:51:29:35:9d:59:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:68:61:96:E3:4C:D2:CA:F1:39:64:7A:B0:9F:CA:22:79:FD:2B
X509v3 Authority Key Identifier:
keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:93:83:6e:0f:3c:9f:a4:70:8b:36:ff:a1:c1:de:8d:01:3a:
ca:9c:50:25:1d:46:8c:a0:15:aa:ab:ef:c4:b3:9f:e9:e1:0e:
69:ee:14:09:07:34:28:7a:1b:4f:02:6d:52:90:e3:07:d3:61:
6d:28:86:e3:65:a9:cc:75:73:fc:f4:8c:71:8e:a4:98:4d:9c:
b4:16:0a:6a:c2:db:0f:be:67:4a:e4:27:b3:1b:3a:b1:02:3e:
99:de:81:90:ad:d6:5a:a4:92:3e:94:7e:45:be:14:16:7f:a1:
08:69:03:1a:47:43:b6:aa:a4:7a:d2:00:27:91:9a:8d:cb:e1:
c9:e6:b8:12:6d:76:01:16:89:c9:c5:15:e5:1a:b2:5c:15:d4:
2b:db:c0:6d:3c:5a:7e:be:a9:ce:e4:5b:0a:5f:67:06:a3:49:
7e:43:41:a6:74:ef:c8:89:41:2f:a9:3f:54:e6:d3:f7:a2:e6:
7f:a2:79:6e:8f:18:47:99:49:68:72:9d:26:15:99:be:d7:1c:
0e:37:60:bf:cc:ae:fc:af:fb:f1:a5:68:43:20:fa:01:63:24:
61:f6:35:82:65:9b:92:3d:e6:65:6a:ec:e5:f4:52:92:ef:53:
5b:7e:22:a1:c8:d5:37:ee:dd:3f:03:b8:09:73:df:25:a6:04:
08:b5:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:43 2025 by rpki-client