Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json)
Hash identifier: nVzM707l5A07yQf2ayEJMcWwMCbXe/At177GLhRVyjE=
Subject key identifier: 1C:D0:C1:99:BD:7B:B0:42:A7:F5:99:B1:3A:A6:EC:5D:81:CB:7D:DB
Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E
Certificate serial: 5397D825B333CD3470C4D2403B30F42F4698111A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
Manifest number: A6
Signing time: Thu 30 Jan 2025 18:50:03 +0000
Manifest this update: Thu 30 Jan 2025 18:45:03 +0000
Manifest next update: Mon 03 Feb 2025 04:39:03 +0000
Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=)
2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: HwVlkTMAab5bYCZarMh9Q3SfsZA/8+jxdy3c2UAaOUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:97:d8:25:b3:33:cd:34:70:c4:d2:40:3b:30:f4:2f:46:98:11:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E
Validity
Not Before: Jan 30 18:45:03 2025 GMT
Not After : Feb 3 04:39:03 2025 GMT
Subject: CN=1CD0C199BD7BB042A7F599B13AA6EC5D81CB7DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:2a:47:d4:1d:c7:d0:fc:2b:70:31:3a:fd:
07:de:be:be:2d:b4:3c:ea:fa:c4:ec:46:5c:7e:bf:
34:05:da:f1:93:3f:9c:66:d7:0e:81:fb:1d:8b:8f:
b9:86:6c:b6:43:9b:7b:ac:1e:d5:53:23:b2:cd:72:
b1:7d:17:ff:25:85:78:df:31:11:39:07:6e:c7:f7:
3f:7c:c5:8d:be:c4:6c:ad:61:d6:64:61:a2:b5:80:
00:46:f2:b3:32:5a:a8:07:c5:49:6c:22:af:03:8f:
cf:6a:cd:dc:3b:5b:13:4b:31:4e:77:ba:0a:61:cb:
97:46:76:e7:40:21:8f:ff:f9:88:b0:7c:90:7d:18:
30:82:23:cc:8a:c3:5a:22:18:cf:e5:12:b2:06:70:
3a:c7:bc:b0:61:4f:1e:90:85:fc:d7:ee:6f:f7:cc:
f8:2f:4b:58:46:ec:88:16:40:38:69:70:b2:1f:72:
f2:e7:06:ad:0b:12:50:16:70:87:58:1b:a3:6f:a9:
b6:32:9f:cd:70:41:60:cc:58:54:13:78:e9:3d:de:
a1:17:7a:f9:46:4b:00:e4:7e:65:fe:86:ed:28:a8:
97:81:4b:81:ec:f2:d1:89:e8:1b:09:b2:b6:9e:ee:
a7:0c:09:65:76:11:11:50:b2:d2:da:b5:c9:28:66:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:C1:99:BD:7B:B0:42:A7:F5:99:B1:3A:A6:EC:5D:81:CB:7D:DB
X509v3 Authority Key Identifier:
keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:33:85:ed:23:78:ca:e9:68:7b:b4:aa:51:e0:04:de:73:0a:
ac:a7:51:d7:14:1e:d2:ba:f5:3b:a8:d9:1a:1a:9a:f7:6d:c2:
86:8b:d9:c6:b4:f4:b6:5a:0e:4a:fb:18:b1:bd:49:35:12:30:
3d:15:da:f3:2f:08:97:e6:23:f8:9d:15:75:2a:b7:4c:26:92:
bf:a3:29:be:7c:51:dc:7c:83:f0:cf:ca:b8:6e:08:7f:c0:cc:
fa:46:f8:37:b6:1e:a5:f5:ce:1f:c6:ad:a3:7a:23:bb:4b:53:
1a:0b:07:77:90:81:51:92:b7:e4:17:c6:e3:02:b5:8d:01:a2:
43:4f:1e:97:03:6d:19:c0:61:6c:96:f3:d1:3b:ac:12:25:63:
af:ae:39:2d:ad:f9:ee:a8:ea:8c:b5:00:02:e4:d1:84:9b:5a:
2b:82:2b:b6:ba:e8:0b:49:c2:2d:b4:54:0a:59:5c:f7:55:a5:
5d:60:ca:e5:6b:ee:00:71:6e:b6:58:32:e6:8a:be:e2:c0:27:
e8:4d:ef:03:d3:2f:48:fc:4e:29:ff:99:0b:98:47:38:3e:32:
aa:99:ed:50:55:f9:1c:0d:7b:54:55:54:37:05:fd:e2:55:10:
e3:62:e2:bc:4e:79:34:02:1d:e3:da:12:3c:1c:08:c3:60:12:
69:ca:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:04 2025 by rpki-client