Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json)
Hash identifier: aptkxeEuRYSbe142v/TCGH/CuMmdqMKfOEKLLVca1ik=
Subject key identifier: D8:0D:46:6F:FC:17:D7:8A:7C:77:A7:01:D1:87:99:65:9E:2B:EB:7B
Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Certificate serial: 191F5731B5E4D63EC726DA362D8EC5EDDC0F9D20
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
Manifest number: 044B
Signing time: Thu 30 Jan 2025 23:50:48 +0000
Manifest this update: Thu 30 Jan 2025 23:45:48 +0000
Manifest next update: Mon 03 Feb 2025 09:16:48 +0000
Files and hashes: 1: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: +Sh30nDK5FN0F+rgaXdcf8t+v+X9RkFfwm8Ti8cbstU=)
2: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: b4KiMwiJASyBICznuxWYSVpBPiU9qpEIZ1f+n3s+3IM=)
3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 2wmGpgdLLad+yQRBpECeWO5okHIOK5XLuX+ZtyFeGtw=)
4: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: rcjXUsXOpURiA2+pmbM/bAEEVFOWyl0kIjrYrfbgw2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1f:57:31:b5:e4:d6:3e:c7:26:da:36:2d:8e:c5:ed:dc:0f:9d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Validity
Not Before: Jan 30 23:45:48 2025 GMT
Not After : Feb 3 09:16:48 2025 GMT
Subject: CN=D80D466FFC17D78A7C77A701D18799659E2BEB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:1c:c3:18:15:6a:09:2d:64:35:95:f3:a4:
40:5c:84:8d:95:29:3c:7c:4e:3c:40:e8:12:3d:e9:
8b:af:a7:f9:50:b6:4a:b6:6e:15:57:2b:57:cf:13:
dd:4a:de:57:c7:78:44:fe:ef:5c:ab:84:d5:c7:44:
82:58:f6:f3:0e:c9:9f:2e:03:3b:d0:73:12:50:bd:
4b:7b:ff:c3:40:99:ce:89:15:e7:0e:5f:2b:d3:d4:
0c:15:fc:8a:3b:07:bf:f4:56:d3:30:f2:3c:16:f7:
49:c9:cf:19:03:30:2d:5a:e6:6d:d8:0b:6d:37:a9:
d4:ed:55:20:70:5c:6b:d9:90:1f:0f:bc:35:f1:c6:
e4:ed:1b:21:e1:6a:af:fb:8b:51:0f:34:67:41:11:
d1:38:1d:b5:31:fc:44:4a:a3:16:49:58:ae:82:b4:
de:ec:e8:ef:27:96:85:e2:e9:08:95:1a:33:61:81:
6f:70:55:be:67:8b:55:8d:07:41:3a:ac:fd:73:a6:
40:76:35:71:96:93:57:32:e3:8e:58:a4:1e:4c:31:
bb:48:65:16:fa:99:51:ee:8c:23:17:0f:7e:ac:26:
e3:e9:66:b1:9b:2a:70:b9:ee:cd:f2:f1:a9:8c:6f:
18:fc:02:9e:15:5d:5a:1e:f2:12:e0:ff:89:29:5b:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:46:6F:FC:17:D7:8A:7C:77:A7:01:D1:87:99:65:9E:2B:EB:7B
X509v3 Authority Key Identifier:
keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:68:77:f3:71:c8:57:9b:31:7e:0d:89:c6:52:10:d6:a4:d0:
ae:77:08:77:88:e6:8f:35:3f:82:fe:89:14:b1:8f:9c:29:f5:
8c:fc:78:80:8f:f9:29:f9:7e:26:22:ef:44:db:34:43:e6:39:
ff:bb:c3:57:c7:ee:39:7f:ef:78:73:21:36:de:97:ec:6c:d7:
cd:92:97:2e:f5:05:f7:27:8e:81:f8:f6:58:d7:91:b9:2f:eb:
45:3e:dc:b3:93:0b:71:8f:62:c9:a5:c1:ca:bb:99:ac:a5:a0:
67:7d:9e:c0:75:d3:bc:17:a5:54:fc:ca:73:0a:ca:8c:eb:c8:
44:aa:2d:0d:42:34:5b:4d:ab:9a:eb:c2:4a:72:23:06:79:36:
d5:e3:49:3d:59:95:c4:25:34:f4:88:97:52:02:4e:d9:09:c0:
62:e0:eb:34:cf:5b:eb:64:18:ff:75:ec:89:db:c5:10:3f:c3:
a7:3b:71:da:ef:73:53:f7:c3:92:28:2d:98:18:f3:6c:0f:c7:
b8:ad:1a:80:17:8b:5a:90:e2:da:cc:d9:87:fb:bb:4b:d4:e7:
6e:f8:4b:da:e2:47:10:5d:03:c1:4e:01:53:69:87:1a:c7:44:
8f:f9:49:aa:6d:28:81:fb:b9:5a:d5:92:b2:25:9e:93:d5:1b:
37:4d:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:08 2025 by rpki-client