Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
File: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft (raw, json)
Hash identifier: TLWLA+ov1rZsqWEOx+Tj111SuBtFoSGVd7Xhz5EBT/c=
Subject key identifier: BC:68:8B:10:65:8C:DC:3D:57:38:EF:EA:CB:2A:89:25:C9:A7:CE:2A
Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC
Certificate issuer: /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
Certificate serial: 5D4662DD9BDCDF1191AC74081E32FEA11034FDF0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
Manifest number: 19
Signing time: Wed 29 Jan 2025 19:22:07 +0000
Manifest this update: Wed 29 Jan 2025 19:17:07 +0000
Manifest next update: Sun 02 Feb 2025 05:48:07 +0000
Files and hashes: 1: 323430363a373534303a3a2f33322d3332203d3e20313431303637.roa (hash: bv6pC6gX0eRc1LFkXxFUMTO8NK/3ORK3VMfpVTQQLkE=)
2: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl (hash: DMtdmKCvl5Pxs4OcqnXMBPOi6NAJfwXeMH1/nnf7r4A=)
3: 3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa (hash: sCyLtPxP1W6eDrRKM5zzBxs1T1DM9NmEIRenFAs3CLU=)
4: 3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa (hash: sz4VmdCTe+rtqXvjcCCv+oeArdLugQ/bUPNEnmt0I5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:46:62:dd:9b:dc:df:11:91:ac:74:08:1e:32:fe:a1:10:34:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
Validity
Not Before: Jan 29 19:17:07 2025 GMT
Not After : Feb 2 05:48:07 2025 GMT
Subject: CN=BC688B10658CDC3D5738EFEACB2A8925C9A7CE2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:5f:f3:61:c9:4e:76:fc:b9:d3:bd:d4:af:
a3:42:9d:e8:24:b7:9c:1c:77:df:81:b9:00:18:89:
58:27:3c:6f:ab:22:b4:24:9c:a9:83:12:bb:d1:7f:
fc:3a:ed:34:64:14:30:24:56:09:f5:67:47:d1:08:
93:5b:4c:5f:22:58:af:41:b7:b6:ea:c1:74:60:b5:
ba:48:c4:5e:25:a2:26:a9:dd:91:b9:ed:54:9f:37:
42:d5:d8:d4:d3:07:4e:3a:6b:55:ee:2e:89:19:8f:
ab:ef:cf:ab:4a:79:ec:27:5d:a2:b9:93:b7:fe:28:
2e:70:aa:28:77:b6:44:22:38:f7:30:e0:41:7f:14:
b7:46:a5:82:4e:eb:c8:c3:3d:81:ba:f6:7a:9e:a4:
98:b7:1d:e1:72:2f:4f:ef:68:51:b7:f4:eb:79:77:
a1:7d:a9:94:f6:12:63:b6:27:ba:21:e8:8a:7a:ab:
88:99:e5:d7:cb:09:d8:eb:38:a4:73:51:2f:c5:bb:
16:0a:79:0b:1f:1e:70:6d:b2:1a:d0:f6:8b:95:74:
f3:ab:ab:94:21:9a:5b:af:b2:49:1f:b7:ac:4a:9a:
d4:1a:a0:8a:85:dd:c7:fc:57:1c:52:7e:87:33:78:
1c:fb:b4:c3:03:69:f4:fe:c5:e5:6c:d3:93:c4:cb:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:8B:10:65:8C:DC:3D:57:38:EF:EA:CB:2A:89:25:C9:A7:CE:2A
X509v3 Authority Key Identifier:
keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0b:22:a7:93:c4:f7:b3:5f:7c:7d:bc:9d:28:77:2d:7d:9b:
45:2c:87:46:e3:2c:91:d4:01:3a:4e:4b:f8:f2:00:e2:f9:e1:
19:32:35:87:83:e1:1f:db:e7:6e:ce:9a:7c:a5:39:fc:dd:de:
33:37:59:30:bc:2e:c1:cd:6a:45:be:14:fa:34:64:77:f8:b4:
18:45:f9:39:06:e7:4b:b5:dd:df:f6:d0:f0:f3:75:dc:c3:c5:
c1:1a:20:b7:87:be:c7:37:79:c2:5a:88:b0:29:60:01:a5:f3:
27:59:d3:ed:2e:27:19:e6:9a:61:24:06:1d:12:b7:e5:dc:33:
10:4d:e5:b1:29:94:ff:4c:5b:d7:b7:90:bd:fb:04:27:7a:b6:
92:14:91:05:7e:d7:65:a2:61:61:2e:2d:21:89:f8:bd:42:04:
3f:e4:89:3c:8b:4f:9f:31:6c:8e:6a:fe:b6:97:65:3e:d5:8e:
36:4f:a4:52:bb:a4:53:cc:1b:ad:1e:5e:e1:7a:6b:de:35:11:
f6:e3:1c:fd:9e:0e:1f:cc:07:07:b8:f8:f4:78:b6:aa:28:c6:
19:7f:d2:61:d5:ed:4b:a8:ed:3f:67:8c:8c:98:1f:bb:53:8e:
fa:25:12:09:ef:17:9d:46:5d:3b:bb:e1:fe:cd:9d:7f:7b:7a:
94:7e:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:06 2025 by rpki-client