Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft
File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json)
Hash identifier: 1l/7iKWEk3gijWkaIcMjRJ4Elt+kvVdJgey3SZoqIBY=
Subject key identifier: 89:B7:EA:0B:92:99:50:50:9D:44:61:93:C1:A8:E0:9B:1E:41:56:F7
Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8
Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8
Certificate serial: 620BFA53A748653DFDC621387BC81A10D5946EB3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft
Manifest number: 01A4
Signing time: Thu 30 Jan 2025 21:01:06 +0000
Manifest this update: Thu 30 Jan 2025 20:56:06 +0000
Manifest next update: Sun 02 Feb 2025 21:45:06 +0000
Files and hashes: 1: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: bQrOhxB3rB3wrJMYnCxlEP93xcikzOJZdJRP9WyIp8I=)
2: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: eCE1Vldg+6Zu0UbUoAu76XxJnAdggVm2QDq2eX1tBXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0b:fa:53:a7:48:65:3d:fd:c6:21:38:7b:c8:1a:10:d5:94:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8
Validity
Not Before: Jan 30 20:56:06 2025 GMT
Not After : Feb 2 21:45:06 2025 GMT
Subject: CN=89B7EA0B929950509D446193C1A8E09B1E4156F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:fe:c8:6f:c0:a8:b7:33:1d:af:ce:9b:09:
65:d8:1a:28:05:81:c8:15:13:a9:75:e4:8e:6a:3b:
46:11:0d:02:cd:b3:61:0f:f3:b0:a2:5f:e4:5a:fd:
97:a8:0b:33:54:c6:2e:ee:fe:2a:cc:08:50:4a:70:
7b:36:02:70:c7:df:b0:74:35:6b:e5:37:b1:94:90:
36:77:b9:77:4d:ea:bb:53:26:63:65:79:b4:44:26:
fc:dd:56:ef:73:60:ce:ee:52:c1:87:60:95:7a:d1:
6f:7e:ed:7d:7e:09:40:a2:08:94:b9:9e:96:90:d1:
8b:ca:88:63:89:72:c8:2a:b6:03:c2:4b:f2:29:de:
c1:d6:0e:96:ba:ed:94:5c:65:1f:75:d6:c0:76:79:
5d:47:c9:5d:ed:50:6d:09:be:8f:ad:2d:b6:b1:f7:
4d:2b:2e:69:1b:c4:eb:1d:c2:c4:47:b0:36:41:b0:
1b:ff:12:ea:25:cf:b8:4e:32:7b:a8:01:20:06:3d:
5c:c4:d9:b1:4f:40:ee:23:d0:8c:62:58:7c:3d:10:
82:2c:4f:b9:c6:be:8d:6a:f1:1e:73:22:f4:fb:3c:
b0:09:76:da:23:d9:10:f8:04:51:5c:bd:28:c8:3b:
9c:2d:9e:1d:3c:0a:86:7d:a8:b1:d9:10:20:23:01:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:EA:0B:92:99:50:50:9D:44:61:93:C1:A8:E0:9B:1E:41:56:F7
X509v3 Authority Key Identifier:
keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:54:15:78:e7:08:e8:a3:94:e4:0a:7c:68:2d:28:8e:01:34:
b1:f8:c0:fc:e3:e2:14:40:d7:13:21:49:95:48:4e:2a:15:ea:
11:ce:ed:b8:73:ae:28:56:09:a1:1c:c0:61:a0:e1:0f:c6:99:
8f:0e:6b:64:b6:4a:7b:26:cc:21:3a:d6:ca:42:76:54:69:a0:
1e:11:60:89:8a:ed:a0:49:ef:da:fd:30:0c:15:f7:73:36:6d:
9c:0a:74:94:25:39:8b:46:d4:58:64:39:5e:1d:09:29:8f:5f:
6e:9d:78:f5:a4:31:d2:d2:a9:22:4b:6c:cc:22:35:bc:c9:fb:
d4:23:d8:8e:dc:5f:e2:c9:6e:bb:8a:89:00:a6:bc:e7:a6:20:
d0:da:ce:0b:08:dd:60:b6:5c:2e:9e:77:fd:38:1c:ff:9a:89:
6a:06:df:6f:7d:9b:8b:92:05:b0:ba:1f:15:17:a6:2b:23:4c:
1b:c3:a2:23:a0:91:ea:e1:d8:a3:2f:f8:3a:90:a0:69:eb:ea:
f3:64:24:50:b5:01:47:1e:3d:61:02:1b:46:5f:3b:19:ee:e3:
1a:8b:01:2a:16:5b:3d:ea:a4:ef:13:e1:2a:d9:5e:c9:51:7c:
83:61:9f:ea:48:20:8b:09:26:df:a4:d9:e5:1f:e0:1d:18:db:
49:bb:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:17 2025 by rpki-client