Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft
File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json)
Hash identifier: IOu4rBEiQUuRoOlMWUsgriFcuHdoaoyANPnjJmBk2xA=
Subject key identifier: 2E:41:FC:11:7D:2E:B5:B3:81:26:06:57:64:01:90:83:F6:2C:1E:92
Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43
Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
Certificate serial: 75C9863F2FD32BACDE504FAC63F91E8A593E894B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft
Manifest number: 0223
Signing time: Thu 30 Jan 2025 21:20:39 +0000
Manifest this update: Thu 30 Jan 2025 21:15:39 +0000
Manifest next update: Mon 03 Feb 2025 09:01:39 +0000
Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: KiJV2fTD/cc3U299ElvAj653pU4HUt4y4OPUVBZcl+g=)
2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: wyuyEKbS2Ewn8htT+BKpBIgg41360SiS7fL05DTu8X8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c9:86:3f:2f:d3:2b:ac:de:50:4f:ac:63:f9:1e:8a:59:3e:89:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
Validity
Not Before: Jan 30 21:15:39 2025 GMT
Not After : Feb 3 09:01:39 2025 GMT
Subject: CN=2E41FC117D2EB5B38126065764019083F62C1E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:32:9c:f5:86:49:df:84:b3:fe:7c:f7:40:
73:0e:3e:b8:a2:74:14:ba:09:35:a5:a4:0c:a1:96:
b9:a1:58:ec:43:e2:23:3f:64:3b:1b:c8:bd:7d:0b:
44:c5:3e:86:ed:13:df:e2:39:b4:f2:79:2e:4b:15:
99:89:d4:a9:0d:eb:aa:d4:47:4d:2e:35:38:bb:b3:
86:9e:6b:fd:67:f5:c5:e7:5e:f7:7f:fc:07:75:5f:
28:b3:63:a5:b0:26:1b:de:4f:ba:9d:87:77:3c:d9:
c8:0d:a2:00:0b:c7:ed:83:57:a0:ff:32:02:c1:5a:
a7:7e:2b:20:d0:8c:ff:0b:e2:25:68:69:f8:b8:06:
04:c3:8c:9b:57:c6:5e:75:65:2d:3a:4b:f3:b2:14:
39:55:b2:c4:2e:a7:78:58:d2:d5:d5:48:9e:54:9e:
b6:c7:ac:6f:b7:bf:a8:da:26:fd:07:58:58:c3:b5:
7e:50:7f:e8:f4:db:4a:a7:5f:ed:2e:58:78:ef:4f:
fc:41:b3:14:e8:85:a0:67:6a:9d:ca:a1:28:b4:7d:
21:26:9a:d2:28:ed:56:94:90:5c:7c:c3:91:be:61:
65:57:4d:c7:bc:b3:ca:cc:b7:e0:ea:d8:4e:1b:a8:
c8:5a:b6:e1:d1:3a:59:b5:8b:95:26:fe:6e:45:cb:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:FC:11:7D:2E:B5:B3:81:26:06:57:64:01:90:83:F6:2C:1E:92
X509v3 Authority Key Identifier:
keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c8:d7:ec:24:6f:f0:9b:c3:f9:61:b4:7b:8a:16:11:58:28:
b8:68:3b:5b:57:72:89:f4:16:2e:98:73:2e:67:10:d7:40:40:
bc:41:70:3d:ee:40:41:38:9f:58:ae:ad:b9:49:17:16:15:7c:
20:0f:32:3e:dd:18:15:f3:1d:d4:c1:40:f2:4b:1f:a5:c0:cd:
42:36:0f:44:09:a6:54:bb:ae:59:d4:69:c0:83:1d:d9:f5:1b:
d9:9a:8d:30:b6:5a:c9:fa:71:ef:d1:6c:c4:cb:fa:ca:53:93:
15:70:e3:7e:9e:54:02:68:5d:3e:5e:c0:4b:7a:0e:98:31:eb:
78:bc:68:25:c2:69:ca:c8:41:8f:70:10:34:72:73:64:6e:f9:
30:be:60:6f:58:50:0c:b5:49:92:cf:63:8d:f0:a0:a0:a6:76:
2e:d7:76:03:45:75:8a:62:59:62:c6:72:ec:2d:56:bf:da:ff:
71:53:a6:62:9e:c8:9c:7a:73:9d:b7:6f:2c:a6:48:b6:52:cd:
55:f4:f5:12:b4:01:ae:66:18:51:ff:be:88:11:bd:5b:03:58:
20:8b:65:6a:54:cb:c4:b2:50:f0:a0:e7:b5:5d:8b:b9:ee:3b:
d6:22:2a:9a:ce:25:c6:df:dd:6d:f3:d2:46:cb:0c:e6:c0:07:
2e:e6:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:30 2025 by rpki-client