Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft
File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json)
Hash identifier: KGSs9DqddcVsBMteqFWMYe1F7jkXJRh4FaSyi3+Mdu8=
Subject key identifier: 7A:A8:69:71:0D:FC:83:63:1F:C5:D0:05:B7:7D:E7:6B:82:D3:90:C8
Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F
Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F
Certificate serial: 3A63326654238BF145D23F5DF85AE16115674882
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft
Manifest number: 0149
Signing time: Fri 31 Jan 2025 15:01:05 +0000
Manifest this update: Fri 31 Jan 2025 14:56:05 +0000
Manifest next update: Mon 03 Feb 2025 20:55:05 +0000
Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=)
2: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=)
3: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: AjxIR39K8WJBGtBKw01qxsbmAhnWC4jpJGJjU2V69F0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:63:32:66:54:23:8b:f1:45:d2:3f:5d:f8:5a:e1:61:15:67:48:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F
Validity
Not Before: Jan 31 14:56:05 2025 GMT
Not After : Feb 3 20:55:05 2025 GMT
Subject: CN=7AA869710DFC83631FC5D005B77DE76B82D390C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:2b:99:0e:bb:c0:f0:69:c5:bd:a9:65:c1:
1b:5b:69:76:17:7a:9d:91:54:fe:3b:e9:9c:50:10:
68:46:01:61:ca:f0:16:4d:72:18:82:fa:75:8d:bb:
91:a5:d3:d1:3b:ae:f8:2e:61:82:48:de:23:48:c7:
78:5f:86:aa:09:63:03:d3:65:23:83:8d:22:80:69:
f3:4f:6a:02:b0:70:82:c8:32:a5:f5:5e:ac:9d:e4:
da:a2:37:2e:03:46:bf:c7:2e:e1:7a:24:ea:bd:31:
44:09:fa:22:4c:60:8b:67:b3:c4:21:03:81:0c:d6:
b0:71:72:2a:19:7d:23:0d:67:02:60:78:4d:0d:56:
09:30:38:7f:57:52:85:04:7e:1b:99:c5:50:5e:43:
0f:5a:b2:82:f9:23:82:0d:21:20:c3:22:a7:8b:79:
75:30:cb:7f:74:96:f0:15:69:46:e3:a6:06:42:9d:
8e:4a:07:f3:f9:7e:d7:e4:67:ad:38:f9:b2:e6:60:
a5:8e:a2:95:a2:4b:98:54:d7:38:ec:85:65:0c:11:
85:bd:51:59:30:41:8b:47:fb:a7:be:c0:33:7c:15:
fe:3c:0a:78:b9:57:9c:85:86:9d:e7:e7:38:1a:a3:
bd:b1:c3:37:47:0a:80:b0:c8:fb:9e:e4:9f:77:35:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:69:71:0D:FC:83:63:1F:C5:D0:05:B7:7D:E7:6B:82:D3:90:C8
X509v3 Authority Key Identifier:
keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:92:be:39:6a:3a:2e:82:62:38:4f:c9:b3:c7:13:ac:43:
ac:55:ff:86:e8:e4:4e:bb:49:aa:40:62:66:97:69:3d:8d:40:
f4:3e:42:52:db:a0:60:bb:17:24:74:72:27:02:9c:09:af:9a:
8a:75:bf:4c:72:39:44:14:4f:be:b3:39:2a:53:84:ac:ac:07:
fa:00:7f:d9:7a:83:74:8a:3b:74:db:08:ff:27:64:e9:17:db:
54:14:21:dc:64:8c:85:ea:60:06:f0:e8:ee:be:de:82:8d:b4:
cc:a9:35:fa:51:66:9d:d5:a6:fe:c1:27:55:ba:1c:5e:e9:49:
6f:8d:ec:d5:eb:6b:92:ae:a0:1d:bb:1a:a7:7a:24:90:e2:28:
c4:70:f0:27:83:6b:01:2b:75:52:73:8c:19:d0:72:77:8e:d4:
56:0c:75:0a:89:68:a6:83:40:4e:0a:c9:f7:19:d0:23:ff:0e:
2f:58:2c:4c:8d:0b:ed:8b:6d:b2:f4:30:86:9f:32:f6:0e:33:
5e:76:ad:b7:14:ac:b8:1f:5f:ec:ef:73:5c:e7:7e:87:71:c2:
55:d1:4f:3a:03:73:90:cf:5a:da:e0:b3:43:b3:b1:bb:fd:a4:
80:2e:16:f8:bc:6b:a8:54:45:93:dd:1c:a1:64:c3:3d:04:cf:
8e:0f:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:58 2025 by rpki-client