Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json)
Hash identifier: dWVvhz+pAkpUquVGc1oUPF8RP2Gwov8YBg+4R6xkWWg=
Subject key identifier: B8:25:A1:29:A0:6D:D4:E7:4A:F8:EF:2D:D1:E2:EA:A9:6F:C6:E0:47
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial: 6638F944E0AE3518CFCDFFD8454EDA4DE6D1F0EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
Manifest number: 01AB
Signing time: Fri 31 Jan 2025 06:02:08 +0000
Manifest this update: Fri 31 Jan 2025 05:57:08 +0000
Manifest next update: Mon 03 Feb 2025 13:47:08 +0000
Files and hashes: 1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: hAbscyxhtXS0fgGU8fiJkyRtlilBB1Y02xa0Ku6P+IY=)
2: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: pkbRHNFhw5j9jy8IwvKItVJ1SiI2XBEwv4F4IPwjiTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:38:f9:44:e0:ae:35:18:cf:cd:ff:d8:45:4e:da:4d:e6:d1:f0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
Validity
Not Before: Jan 31 05:57:08 2025 GMT
Not After : Feb 3 13:47:08 2025 GMT
Subject: CN=B825A129A06DD4E74AF8EF2DD1E2EAA96FC6E047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:b1:d6:b4:2b:b7:93:3d:d1:58:2d:e5:6c:
cc:48:d5:7a:53:77:6f:50:fa:3d:b9:94:97:6e:e0:
63:14:4f:e3:2a:e5:d4:2e:aa:a0:d6:c0:55:6c:79:
a0:ac:6a:ad:c0:43:0a:45:e6:5a:39:37:6a:8b:a9:
58:bb:4e:1d:bb:48:2e:d7:97:8b:6d:05:32:8e:22:
97:a1:89:01:f5:d2:79:64:5e:a3:73:79:ca:65:28:
64:99:a3:53:ad:cd:02:1a:12:e3:c8:c2:84:94:16:
8f:c5:87:7d:48:1f:01:7a:25:3c:87:ee:7c:9f:9a:
1a:4d:4e:e0:41:76:ea:61:e2:b5:9b:00:89:11:d0:
ec:ec:58:b7:75:db:f4:e2:2c:a9:23:e5:10:96:04:
55:5f:15:4d:a3:91:b3:7e:ff:32:67:c7:20:f8:3a:
f3:30:4b:e4:98:c1:3c:2a:7a:7f:62:f3:17:10:f1:
58:2f:b2:69:95:41:e0:51:fe:5d:5f:48:a4:82:29:
6d:46:09:42:9e:bf:3a:66:f9:23:be:04:5d:19:60:
57:8b:d5:65:4a:e8:ad:0f:b4:c9:66:de:32:00:68:
de:58:00:6d:2e:ba:82:c1:38:00:5a:8d:a9:a9:bb:
1b:e4:ce:6f:20:7d:8a:e7:9a:b4:5a:f5:ee:b9:12:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:A1:29:A0:6D:D4:E7:4A:F8:EF:2D:D1:E2:EA:A9:6F:C6:E0:47
X509v3 Authority Key Identifier:
keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:cc:1a:76:56:70:08:a3:a2:f4:a1:55:25:f5:c9:98:e0:
00:d9:67:a5:a5:cb:32:35:09:cb:3b:01:2c:cb:b2:d4:f3:47:
73:37:d2:54:b4:83:b7:04:35:1f:81:16:99:87:21:39:39:e9:
46:25:33:4a:3f:e5:ac:e4:c6:c8:ac:29:e5:0c:ed:1d:20:95:
bd:78:35:77:d2:18:fa:14:f1:ae:a2:80:e7:74:d5:91:a0:6c:
70:f8:07:06:96:82:04:3a:f2:72:c9:60:7c:4a:20:4f:b2:92:
f9:93:ad:a7:89:06:0e:87:26:48:c0:02:01:27:57:03:52:58:
5a:e5:18:7c:87:5e:91:c4:bb:f5:dc:29:22:3f:26:0f:d5:40:
63:5b:50:85:a3:db:a0:bd:c7:90:a7:ce:15:5d:99:60:9e:d1:
16:74:1f:85:d4:95:d2:30:24:25:86:9c:40:bd:1d:0b:dd:e7:
91:03:cd:bb:34:17:8b:e2:1f:58:64:ae:a1:d0:2b:3a:e8:0e:
3a:cf:0b:40:f0:a2:b0:f9:f7:96:2f:df:73:f9:33:dd:be:fa:
96:0b:47:76:be:17:16:47:f9:9c:62:53:22:c1:1c:95:cc:fa:
f3:5c:00:e5:07:df:e5:17:9b:5a:8f:52:17:e7:99:39:5f:d5:
2b:74:41:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZjj5ROCuNRjPzf/YRU7aTebR8OowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF
MzM5NTc4NjAeFw0yNTAxMzEwNTU3MDhaFw0yNTAyMDMxMzQ3MDhaMDMxMTAvBgNV
BAMTKEI4MjVBMTI5QTA2REQ0RTc0QUY4RUYyREQxRTJFQUE5NkZDNkUwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1LHWtCu3kz3RWC3lbMxI1XpT
d29Q+j25lJdu4GMUT+Mq5dQuqqDWwFVseaCsaq3AQwpF5lo5N2qLqVi7Th27SC7X
l4ttBTKOIpehiQH10nlkXqNzecplKGSZo1OtzQIaEuPIwoSUFo/Fh31IHwF6JTyH
7nyfmhpNTuBBduph4rWbAIkR0OzsWLd12/TiLKkj5RCWBFVfFU2jkbN+/zJnxyD4
OvMwS+SYwTwqen9i8xcQ8VgvsmmVQeBR/l1fSKSCKW1GCUKevzpm+SO+BF0ZYFeL
1WVK6K0PtMlm3jIAaN5YAG0uuoLBOABajampuxvkzm8gfYrnmrRa9e65EgaRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuCWhKaBt1OdK+O8t0eLqqW/G4EcwHwYDVR0j
BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx
MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5
NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl
NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4
MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACL5zBp2VnAIo6L0oVUl9cmY4ADZZ6WlyzI1
Ccs7ASzLstTzR3M30lS0g7cENR+BFpmHITk56UYlM0o/5azkxsisKeUM7R0glb14
NXfSGPoU8a6igOd01ZGgbHD4BwaWggQ68nLJYHxKIE+ykvmTraeJBg6HJkjAAgEn
VwNSWFrlGHyHXpHEu/XcKSI/Jg/VQGNbUIWj26C9x5CnzhVdmWCe0RZ0H4XUldIw
JCWGnEC9HQvd55EDzbs0F4viH1hkrqHQKzroDjrPC0DworD595Yv33P5M92++pYL
R3a+FxZH+ZxiUyLBHJXM+vNcAOUH3+UXm1qPUhfnmTlf1St0QYI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:40 2025 by rpki-client