Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json)
Hash identifier: 4CAwFXNPrEfjGXtvSq3z4M5wRfU7usvMgd7Ln0jA07w=
Subject key identifier: 38:83:2B:C4:85:7D:0A:47:A6:42:A9:A4:8C:5E:C1:1E:CC:9E:E0:71
Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248
Certificate serial: 72877023B75E4E2934C874535E0A84087C0C5601
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
Manifest number: 0177
Signing time: Thu 30 Jan 2025 21:40:48 +0000
Manifest this update: Thu 30 Jan 2025 21:35:48 +0000
Manifest next update: Mon 03 Feb 2025 03:55:48 +0000
Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: 3BxgBY3dX8feRwsm1hvpch2b234JpMx6XR/YBvSI5jE=)
2: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: 4pNSc9c5ub8ibTZQGJT8JKt5oBBKLtKg8JbP++DTCPI=)
3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ujITe6uXtdvP5WOayQADk+Rg7asyYqwio86khyT1Nho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:87:70:23:b7:5e:4e:29:34:c8:74:53:5e:0a:84:08:7c:0c:56:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248
Validity
Not Before: Jan 30 21:35:48 2025 GMT
Not After : Feb 3 03:55:48 2025 GMT
Subject: CN=38832BC4857D0A47A642A9A48C5EC11ECC9EE071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:0e:c7:27:3d:6e:ef:7d:19:9f:e5:fe:6b:
24:42:0e:e6:ed:52:66:ad:9d:71:2a:47:77:a9:a1:
cd:5c:85:df:02:be:a8:64:8c:26:f5:08:8c:54:9d:
93:9c:95:9a:6a:88:c4:3e:c7:ed:55:fa:9e:d4:c1:
5f:0a:a1:48:27:fc:2c:04:07:63:79:b4:a5:68:17:
41:bc:1b:12:ff:e6:b6:c0:6b:04:25:24:8b:57:27:
fe:9e:08:b4:6c:3c:6d:38:28:f7:f5:d7:81:cd:63:
69:7c:62:3f:c8:5e:f3:62:d5:6b:ed:5e:08:36:cc:
f1:46:40:e5:30:13:c6:e9:1b:85:6a:57:da:72:ea:
f0:1c:e4:98:ea:78:23:75:d3:9f:93:2d:de:5d:e6:
38:74:eb:47:b2:96:12:7e:d8:97:db:65:54:cd:72:
52:56:cf:b5:64:2f:cb:51:36:69:53:52:11:21:bd:
b6:6b:55:93:e3:83:e8:a0:8f:e5:e7:35:1b:cf:bf:
c2:08:11:03:8f:1c:3d:be:09:39:8a:1f:af:49:07:
2f:6b:bb:4a:c6:34:54:9d:da:bb:89:25:24:c2:a7:
ed:8e:c3:af:d3:87:7e:38:57:15:c6:98:96:d4:83:
96:3d:8f:90:09:c6:7d:5a:5c:f8:2f:50:53:4b:5e:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:2B:C4:85:7D:0A:47:A6:42:A9:A4:8C:5E:C1:1E:CC:9E:E0:71
X509v3 Authority Key Identifier:
keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a7:27:99:25:10:dc:b9:36:29:94:3a:6a:74:fa:ad:df:68:
1e:1c:75:f0:37:f4:0b:e1:62:ce:3a:c1:a0:7a:ae:4d:24:54:
4b:7d:88:d0:97:8c:86:49:3e:20:09:e8:ca:ba:a0:0d:04:ce:
0c:9e:ef:ee:b5:78:d5:38:cc:a4:90:5b:3c:05:c1:91:bc:01:
ef:e4:9f:e5:51:a3:c8:80:d3:f0:63:2b:45:78:f9:0d:20:ad:
5d:32:13:94:f8:32:0f:35:0b:e6:81:6b:76:49:b5:6a:d9:bf:
a3:32:42:33:88:4c:19:f7:11:b6:e6:b2:34:b1:3e:38:f6:45:
42:d0:54:78:9d:a2:c5:cf:d9:54:3a:1f:3a:d4:49:61:ae:cd:
f6:db:a1:c8:e5:87:b8:08:73:68:d0:e3:12:32:44:f6:c1:dd:
dc:55:c0:de:27:a0:59:4b:2d:b8:5d:10:33:6f:38:78:00:10:
02:b6:ea:7f:b6:9a:a4:86:ff:fa:96:06:28:08:1b:15:6e:35:
7f:60:05:14:c8:35:9a:b2:be:9c:b2:3c:4a:bb:cb:df:5e:5b:
f6:f8:36:49:e2:0b:53:95:5b:7c:be:48:c5:43:0d:3e:6b:57:
d0:0f:31:b6:85:a2:1e:cd:d8:44:8b:ef:f4:c6:f1:38:9e:ad:
90:d8:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:29 2025 by rpki-client