Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json)
Hash identifier: vV8OqKdEOMtErRWnzv0e0PilX0shFFbNItnHg0kVO3o=
Subject key identifier: 2B:DB:F6:E2:49:BF:CE:62:2F:00:BF:E6:05:40:8B:88:25:EA:77:23
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial: 1371BE3F1E18A0EDEA08619F2E80D82FD4BDF7B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
Manifest number: C3
Signing time: Fri 31 Jan 2025 02:20:41 +0000
Manifest this update: Fri 31 Jan 2025 02:15:41 +0000
Manifest next update: Mon 03 Feb 2025 09:01:41 +0000
Files and hashes: 1: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: ULoe8O7PlqnoSlXORq1pQ+4xdYyiJHc7agT70Z3ckjc=)
2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:71:be:3f:1e:18:a0:ed:ea:08:61:9f:2e:80:d8:2f:d4:bd:f7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Validity
Not Before: Jan 31 02:15:41 2025 GMT
Not After : Feb 3 09:01:41 2025 GMT
Subject: CN=2BDBF6E249BFCE622F00BFE605408B8825EA7723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:95:06:50:1d:1f:ac:55:19:2e:eb:06:a4:
d4:55:7d:51:6f:db:38:f5:44:8f:df:c1:fb:37:04:
1d:dc:a8:41:d2:20:62:f0:aa:56:21:44:f5:93:08:
48:e0:ff:9c:7b:48:cb:6f:95:3e:4f:81:ba:fa:fd:
d0:16:eb:dd:52:f6:66:e6:7d:28:2c:e9:cd:73:ed:
50:4c:1a:13:f9:31:a3:f5:f5:91:ac:1d:77:1b:1b:
99:2b:56:54:c5:79:f3:87:73:0d:4b:1d:e7:88:56:
bf:9f:4a:22:b0:b9:35:e4:cc:a3:22:2b:01:0c:78:
52:77:0b:46:55:35:34:20:59:f3:8f:9b:3e:93:e3:
81:92:67:be:10:24:f6:32:f7:f2:c0:83:c3:6e:dd:
87:f6:c9:a7:27:e0:52:c8:21:7c:f6:a0:9a:38:b4:
48:0a:32:cb:ad:3d:0d:c0:dd:f0:27:c1:10:c8:0f:
0d:eb:c9:46:35:df:54:b2:78:91:e2:b0:d7:aa:4b:
88:87:d3:74:16:af:cb:82:1d:75:8c:e7:15:f4:9e:
0d:ad:b0:21:16:63:62:bc:98:2a:88:33:c8:7c:8e:
83:71:c8:17:25:fe:70:19:8b:2d:ce:bd:5d:45:b8:
b6:66:c1:1c:66:b2:42:f5:5a:02:67:e6:6c:c8:bd:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:F6:E2:49:BF:CE:62:2F:00:BF:E6:05:40:8B:88:25:EA:77:23
X509v3 Authority Key Identifier:
keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:bb:6a:2f:a1:37:29:70:ed:a9:1f:ed:70:81:3e:05:02:
14:b9:6b:11:4f:a0:23:b3:26:39:f4:f1:fd:2c:57:37:d2:6a:
32:e3:9f:10:66:07:42:04:94:58:d5:a9:db:78:f0:58:51:76:
8a:c1:54:ab:c3:54:2c:b9:90:81:dc:0c:89:2c:ce:1d:d4:be:
c8:25:1b:94:ef:7c:5f:7e:97:6f:62:cd:37:f7:ac:16:7e:e0:
3e:bf:0d:3f:7d:2b:c0:28:62:a1:8f:90:35:4d:d3:d8:a0:2b:
0a:59:bd:eb:cc:93:ef:61:15:ae:30:92:2a:12:99:a2:08:43:
25:f1:f7:25:41:9a:fd:3a:8d:49:d8:97:02:96:1a:d5:c7:0d:
5f:c4:77:0e:4a:a2:1b:2a:d0:30:dd:c7:42:f5:71:c6:10:3b:
e4:70:c0:89:fe:d5:32:ab:2b:e3:5f:59:8f:11:f3:b7:74:d1:
fa:d0:cf:f1:be:6c:2a:0c:e1:85:14:9e:c0:8e:bc:a2:60:77:
5c:16:0f:8d:d8:cd:26:42:87:7d:75:29:09:6d:b2:25:47:a4:
66:66:21:f4:4d:d1:a8:e7:e1:bc:65:fd:1c:5c:66:0c:f3:e5:
0a:52:fe:a3:45:c9:38:2f:5a:85:fb:7f:53:90:68:db:88:00:
f3:f9:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:27 2025 by rpki-client