Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json)
Hash identifier: RBpYKwahD0DT870sKjA+7NCxrCAixTwukDukwZ6Afr8=
Subject key identifier: 45:4F:7C:C3:12:09:5E:2E:A1:94:14:1B:61:19:90:C9:A3:BD:12:5D
Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5
Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5
Certificate serial: 7001F399D9C42CF5829B7B828290494A7C18767A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
Manifest number: 3F
Signing time: Fri 31 Jan 2025 05:00:50 +0000
Manifest this update: Fri 31 Jan 2025 04:55:50 +0000
Manifest next update: Mon 03 Feb 2025 08:31:50 +0000
Files and hashes: 1: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: N92kZ4ZcLygoHRGZ8wa0v+8PQVT1OrE2SmPMoTa8aYQ=)
2: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: FLXPGBJ4Siq1VvBVIqzQdgs5xnGBom5EjCtqarg0Eqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:01:f3:99:d9:c4:2c:f5:82:9b:7b:82:82:90:49:4a:7c:18:76:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5
Validity
Not Before: Jan 31 04:55:50 2025 GMT
Not After : Feb 3 08:31:50 2025 GMT
Subject: CN=454F7CC312095E2EA194141B611990C9A3BD125D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:40:63:40:68:be:df:bb:5a:49:a2:be:07:
30:75:9b:53:1a:73:15:02:55:8a:42:80:20:66:1d:
7d:7e:f2:89:f5:65:04:66:65:f3:7d:1e:54:cd:d6:
5f:a3:93:9f:ae:15:fe:8b:be:62:14:da:69:49:26:
18:b0:fe:62:3d:65:d3:a3:be:bd:06:1c:73:8d:93:
a2:78:2b:fa:34:15:d4:ed:7f:84:f2:73:f2:99:f7:
c3:9b:66:18:af:bc:92:77:38:93:97:d5:98:4b:05:
ef:db:3e:a2:ea:fb:ff:21:5c:b2:0e:43:dc:b8:9a:
df:fd:7e:02:da:01:e9:45:1f:e7:d0:ee:ec:7b:1d:
4c:78:20:49:ea:41:db:29:31:dd:2f:ed:e2:b1:8d:
11:9a:7e:c5:b0:96:b7:ea:36:fb:74:97:d0:91:98:
76:b5:c7:4a:f0:be:a3:2e:68:9e:73:8c:f1:ff:f3:
e6:06:ad:37:35:d1:e1:11:2e:dc:cd:c6:a1:0b:35:
d3:b1:9d:f0:af:9d:75:c6:ed:55:49:14:33:49:3b:
a0:13:9d:8a:12:72:3c:9f:8c:f1:ab:f8:a7:86:92:
b6:dc:a5:fe:db:3f:49:2b:07:84:41:ff:d9:1d:8c:
e7:ad:c5:32:1b:dd:f4:61:5b:cd:5a:4f:ad:54:1d:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:7C:C3:12:09:5E:2E:A1:94:14:1B:61:19:90:C9:A3:BD:12:5D
X509v3 Authority Key Identifier:
keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:44:7f:7b:c7:60:d8:9e:aa:27:a4:63:31:b3:8b:a6:f7:1a:
01:21:9e:bb:4c:d8:dc:6d:39:5a:12:7f:89:ac:d2:d6:7f:04:
62:46:f7:87:a7:83:fc:1a:7b:ab:53:dd:36:76:1e:c1:3b:98:
76:e8:d0:26:70:00:f6:ea:0b:61:6c:98:dd:96:80:25:d7:45:
13:ee:98:b3:7b:1f:0d:79:a6:0a:d5:a5:48:f5:67:d2:b9:5f:
0f:ce:c3:26:b3:e4:f6:8e:a5:0f:df:36:d0:9b:37:9c:4d:e3:
46:17:73:89:46:db:ec:d0:0f:18:f6:1f:38:fc:e7:a0:0e:e7:
27:8f:d3:80:af:3e:39:81:d0:59:d9:bb:19:d3:d6:f8:c9:ac:
e0:29:3b:d6:d2:8e:b3:ce:83:9c:78:b2:a9:2a:3f:34:69:78:
50:94:e0:12:5c:b4:18:68:87:ad:ce:e2:c1:78:14:7b:18:44:
da:76:f5:ea:6b:24:f4:f5:8c:14:e6:22:27:c7:c6:56:bd:aa:
40:a3:69:4c:6e:73:15:85:b4:e0:8b:01:92:26:74:44:7c:f4:
7c:e4:1d:b3:8a:b4:f4:fc:a7:8f:5e:3a:3e:af:af:46:32:70:
93:7a:33:01:d9:9e:fd:d4:8e:f0:13:66:12:ff:66:85:b2:0c:
58:c0:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:52 2025 by rpki-client