Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json)
Hash identifier: bp+UW6H9OjvWmmODcIjhfUYh5PKNBP5nngbyNqO3sZI=
Subject key identifier: 89:E9:3D:0D:99:50:CF:08:2F:60:62:0D:D4:56:F0:CE:E4:A4:AB:59
Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6
Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6
Certificate serial: 2B23E378BBD2BEEF04424B7471CA80281F90B8E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
Manifest number: A9
Signing time: Wed 29 Jan 2025 18:11:56 +0000
Manifest this update: Wed 29 Jan 2025 18:06:56 +0000
Manifest next update: Sat 01 Feb 2025 19:10:56 +0000
Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=)
2: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=)
3: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: R4wYkSwsGjjy4pml2hiN++XuxrBDPEscxq+4q2ro3/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:23:e3:78:bb:d2:be:ef:04:42:4b:74:71:ca:80:28:1f:90:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6
Validity
Not Before: Jan 29 18:06:56 2025 GMT
Not After : Feb 1 19:10:56 2025 GMT
Subject: CN=89E93D0D9950CF082F60620DD456F0CEE4A4AB59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:31:c4:70:46:fb:9f:cf:17:4f:c0:f3:0f:
cc:4d:e1:d5:d4:2a:9d:1a:29:c9:80:b6:b5:51:eb:
ed:04:01:d7:8c:ad:7f:d8:4a:94:5f:95:c5:72:dc:
32:6f:ab:96:78:23:42:bc:4b:9a:16:de:d4:5b:c7:
ea:3f:0e:8f:cc:87:b6:d3:a7:46:9c:3c:7b:af:ac:
e8:b5:23:d8:53:a8:3c:1a:e5:05:72:cd:5a:60:b8:
20:88:71:d2:c6:02:06:5b:6a:1b:30:15:70:b2:b1:
d4:ec:57:b0:a1:a9:5d:59:c2:f4:2e:fa:f9:2b:ac:
db:2e:5f:06:7e:44:69:1c:93:01:dd:38:cc:82:d8:
37:be:36:a5:d3:6a:02:4c:b2:44:e7:69:6b:a4:69:
87:2e:01:aa:75:b4:54:34:d7:47:b9:51:00:76:ac:
18:97:1a:03:8e:88:b8:f8:74:13:e4:a8:e6:24:32:
8d:e3:29:33:7b:e0:cf:0e:13:0b:90:ec:9a:d5:f9:
18:7c:21:b5:f1:f4:d8:93:b1:ac:34:ce:79:c4:8e:
cf:71:df:e5:45:bd:3e:08:56:0e:8e:d1:54:b8:75:
b5:5c:10:28:b6:ce:0c:46:d1:c1:27:ca:c0:4f:e1:
96:6d:d8:d5:d8:b6:e9:cc:59:2c:bd:7c:d2:cc:60:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:3D:0D:99:50:CF:08:2F:60:62:0D:D4:56:F0:CE:E4:A4:AB:59
X509v3 Authority Key Identifier:
keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:90:14:eb:16:e7:1e:29:1a:f0:1f:55:f8:46:b3:fc:4d:d8:
04:69:f3:75:f3:e9:4f:86:10:7b:97:44:3d:81:a2:e8:68:9a:
90:3a:5b:48:03:d4:d2:cf:fb:af:2a:a7:31:f3:a1:e3:fb:8b:
0b:2a:aa:a8:f9:d1:7b:c6:fa:d2:11:4d:86:1d:a6:e3:d3:72:
4f:c0:d9:50:d6:ab:09:98:3d:29:44:61:cf:8d:f4:fd:cc:9a:
08:46:11:2b:c5:51:53:55:fb:31:84:c5:26:3c:6b:9a:4f:3f:
f9:2e:6f:86:50:6c:9c:53:b5:de:f3:73:20:3a:aa:5d:1c:ea:
d2:45:73:88:9f:8d:06:7d:53:bb:74:ea:62:9c:ab:8c:0d:cf:
17:15:ef:97:f1:84:1a:a4:5d:1b:e0:93:65:b7:e3:32:f1:5e:
da:41:94:d0:d8:92:f9:50:d0:5a:53:ce:ee:6a:5f:08:1c:6e:
ab:48:27:84:84:91:d1:32:e0:23:26:03:e8:53:4c:01:fb:02:
3b:7c:dd:83:05:02:43:aa:bf:98:ed:69:e6:53:33:1e:76:27:
ce:32:fd:66:4d:d4:d0:35:c6:c9:04:ea:d0:60:03:29:6c:81:
bc:db:8d:30:3f:cb:c7:37:f0:cb:9b:0d:34:db:bb:63:9d:2e:
89:cf:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:16:06 2025 by rpki-client