Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json)
Hash identifier: MMinVuv0Ymzb6VhexomBV2UFBN1JAsjsTHOs8pFXP0I=
Subject key identifier: CE:61:10:3A:6B:D3:9E:17:0E:5A:1C:58:CE:E2:43:77:41:37:F7:B2
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 08DD2AE53AED29F9F8299BDBD3FD61EDCBB49C46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
Manifest number: 0567
Signing time: Fri 31 Jan 2025 07:50:03 +0000
Manifest this update: Fri 31 Jan 2025 07:45:03 +0000
Manifest next update: Mon 03 Feb 2025 12:06:03 +0000
Files and hashes: 1: AS24203.roa (hash: uCzL89fT+2rTp/PjfzcCLzCjNSE0Gj5NCg172nJhGEA=)
2: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: zpWbT2lavrOHJyIyMCSsM9GhzcxbRsrZ5wbkFq+JIIo=)
3: AS17885.roa (hash: CKDxmU+q1RLXdIhC4iASLqBT7kNMXDo5ZBfHvcZdSos=)
4: AS139994.roa (hash: tapfWc9CLo0LUCDs2SNV3i2P+yVogKVvWIPgt3+MIWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:dd:2a:e5:3a:ed:29:f9:f8:29:9b:db:d3:fd:61:ed:cb:b4:9c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Jan 31 07:45:03 2025 GMT
Not After : Feb 3 12:06:03 2025 GMT
Subject: CN=CE61103A6BD39E170E5A1C58CEE243774137F7B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:24:1a:ad:44:35:ee:e3:29:c2:c3:bd:dd:
31:cc:16:2f:d9:0f:fe:c5:0c:f8:27:a7:43:fa:3b:
d4:cd:a3:7b:c9:b5:a8:03:89:e7:b3:38:c5:ab:e7:
ff:66:3a:7e:0b:9d:42:a1:7f:81:d5:11:0d:92:b2:
55:2f:10:d2:5d:89:ed:4e:5c:c5:92:51:a3:0e:c3:
d9:12:fe:95:42:c1:85:d0:49:4a:86:63:aa:82:8e:
3f:25:ae:7e:0d:04:06:c7:b4:43:aa:0b:a3:51:4c:
49:c7:80:9c:cc:21:f5:64:d1:83:66:b6:14:86:e9:
ff:e4:44:7b:34:28:f3:00:8d:78:a2:9b:e3:90:aa:
06:ea:f0:4a:f2:77:ad:79:41:72:3a:79:46:e9:37:
d6:a3:d3:e4:a7:17:0f:16:82:ee:dc:05:15:a1:18:
f4:29:22:79:ae:50:7b:c6:4b:48:db:15:3d:8e:30:
ba:44:4a:2e:74:cb:53:11:7e:74:d4:78:45:ed:26:
a9:51:00:e9:be:ce:81:d6:02:e0:c6:63:78:59:46:
2d:fe:49:79:cd:5f:24:b6:0e:93:1c:a6:28:e1:fa:
5f:81:35:90:4b:1d:fb:40:c1:8b:3e:2c:64:19:e1:
17:f1:ff:09:ea:77:78:d7:8c:9b:8d:d4:b8:79:ed:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:61:10:3A:6B:D3:9E:17:0E:5A:1C:58:CE:E2:43:77:41:37:F7:B2
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:34:37:b2:84:1b:ad:8c:9d:67:db:a7:ce:8d:23:0b:4e:40:
fe:bf:41:44:ae:31:64:2a:ca:9a:2f:de:d5:b1:cf:a1:83:ea:
79:11:8e:3e:ec:13:f1:23:dd:fd:c6:71:d4:f8:e4:1c:40:cf:
46:6d:61:c3:80:7f:01:0a:46:4a:3f:ed:2f:67:85:73:e5:dc:
ba:81:36:f7:0f:95:2e:98:2a:75:79:c0:59:48:dd:e6:a9:4a:
d2:80:4e:e7:27:75:b9:7c:4e:38:9b:ef:9d:73:37:f9:20:b8:
30:71:ac:d2:a6:5d:ef:de:60:8d:ea:44:fa:b7:cb:19:ce:27:
c7:b8:75:10:ec:ab:2d:c3:47:98:65:ec:32:c7:3a:71:bc:4c:
85:ad:8e:7a:00:55:c8:c2:da:83:49:54:28:b2:0b:0f:77:fa:
09:55:bb:8d:ff:a6:46:93:41:a3:62:c3:b8:b5:aa:99:d4:39:
a2:36:c8:ce:89:be:41:cf:4d:dc:2c:1f:d8:bf:e9:dc:48:ba:
1c:b4:3d:3f:e1:30:32:c0:29:87:9d:b4:4f:64:fa:00:ea:f3:
af:3e:f7:59:a7:3a:3c:58:98:4e:17:11:e9:27:41:65:4a:04:
96:f2:a1:e6:38:1b:16:2e:9a:4f:a6:fe:c0:71:8f:af:50:70:
6e:ca:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:12:34 2025 by rpki-client