Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json)
Hash identifier: M0ti1MP/APnfQ+TrxuVatU+71kcYfuab7HJecDWeVfU=
Subject key identifier: 56:59:95:5F:6B:76:39:EE:EF:04:CF:07:28:BD:0C:00:B2:B5:89:49
Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Certificate serial: 0CAF0058E9189F6498A4CD619738872EE89B0C13
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
Manifest number: AC
Signing time: Wed 29 Jan 2025 19:11:17 +0000
Manifest this update: Wed 29 Jan 2025 19:06:17 +0000
Manifest next update: Sat 01 Feb 2025 23:26:17 +0000
Files and hashes: 1: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: IA/UGg6Z8UZzATFKFs6vKMnjalU+cO5M3GbivYlIplc=)
2: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: SdfVlvgb41TvQfFCAAr6Hvu/iM3n38wFz7a+3vMqJi4=)
3: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: YbG5Gw9xgbijBTbp7E/AZR+gn02wD0TeW2SCv/sSqKI=)
4: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: NjJcmD+G+kiFwmmP8zS7heQcwBVqq18Sis+HXMvM+ZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:af:00:58:e9:18:9f:64:98:a4:cd:61:97:38:87:2e:e8:9b:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Validity
Not Before: Jan 29 19:06:17 2025 GMT
Not After : Feb 1 23:26:17 2025 GMT
Subject: CN=5659955F6B7639EEEF04CF0728BD0C00B2B58949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:da:63:32:d8:57:8f:eb:c8:00:c3:8f:3b:
89:99:92:8b:f1:02:5f:46:78:fd:ea:ff:58:9d:4a:
3c:d5:30:c9:26:c1:d5:da:07:33:b0:1d:be:b7:99:
34:37:f0:e6:7f:20:34:dd:97:57:65:c0:8e:80:c4:
b0:4c:e7:97:b2:70:f4:8e:fc:1d:15:df:03:65:5e:
fb:16:a1:f1:52:46:c7:67:2e:e1:61:53:05:da:75:
31:f0:81:61:e6:c9:4a:44:c8:3b:24:63:7d:0a:a7:
9a:0b:be:77:24:f9:e1:bc:34:9a:33:2c:91:6c:37:
6f:88:22:1b:31:1a:0d:10:7a:55:f3:5d:2d:e3:31:
7e:13:11:04:f1:fc:60:45:79:7f:a8:72:2b:00:da:
e6:8e:f4:4a:f3:52:67:b3:ea:2f:aa:92:9a:24:9b:
f1:57:70:5a:b1:ed:c3:0a:bf:d5:e0:6f:69:9e:9d:
2d:b1:82:61:9d:03:1d:10:1c:6a:74:90:b6:ce:5a:
88:0a:61:42:76:94:b9:75:3b:75:9d:92:97:26:f3:
37:25:ff:f9:a6:2e:63:c2:b7:71:72:76:73:15:f9:
f0:e9:65:64:7e:18:2a:40:20:54:e8:07:12:e0:07:
2c:87:08:8f:81:d8:db:2d:63:c6:bf:20:4c:66:f7:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:95:5F:6B:76:39:EE:EF:04:CF:07:28:BD:0C:00:B2:B5:89:49
X509v3 Authority Key Identifier:
keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ab:2c:69:6f:37:4b:cb:e9:64:6e:f3:b5:34:b3:fb:d4:94:
f0:c9:15:51:0c:ff:ec:66:1f:65:c4:57:cf:67:46:3d:a0:32:
85:20:f5:5b:70:10:e1:11:0b:36:00:d5:b8:52:5a:eb:51:b7:
cb:a0:97:c4:a7:6a:20:5b:43:f8:08:41:c2:c0:1b:cb:9f:dd:
3e:b9:6a:83:14:42:6f:37:25:95:9e:b9:3c:b2:e8:49:fd:d2:
70:c2:ba:14:fc:20:a1:f8:38:f3:47:6e:52:32:3d:76:8f:41:
27:a5:5e:dd:8d:be:b1:aa:70:c4:68:3b:92:2e:8e:e7:ae:ab:
06:4b:f4:b3:bb:8b:e9:d3:64:9e:6a:1d:3a:f1:de:47:c3:59:
6a:db:05:38:08:9b:16:0d:da:94:a2:44:59:2f:96:b2:26:b4:
cb:a8:c1:c9:c1:fe:7d:49:cc:e6:b0:47:b8:ca:ad:fd:df:fb:
ef:eb:c2:30:3d:fd:26:c5:8c:67:8c:4e:31:bb:60:63:e6:ce:
45:26:bb:a3:a3:82:91:31:02:33:0a:8b:d5:dc:74:35:0d:43:
77:48:5e:21:d8:7a:73:ea:69:31:8b:82:d3:40:a7:ed:2d:0f:
5e:64:78:e8:26:47:61:64:ee:83:d2:17:3c:9d:d2:3e:86:04:
79:a1:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:25 2025 by rpki-client