Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json)
Hash identifier: ZGGYZgJDttQkCXIaQv6cFc66XJWgHDjLU500mkmKDr4=
Subject key identifier: 2D:9B:39:27:4E:C1:E3:35:A2:EB:10:34:48:12:B5:B7:4C:94:67:FF
Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B
Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
Certificate serial: 27B15799BBC5ED552DE70452B7E944CA7E66E196
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
Manifest number: 04A9
Signing time: Fri 31 Jan 2025 17:11:46 +0000
Manifest this update: Fri 31 Jan 2025 17:06:46 +0000
Manifest next update: Mon 03 Feb 2025 20:24:46 +0000
Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: who9UmEOJXRzPGv/uNCtBvkOaON2BEdjq0hsm7KVCxs=)
2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: bKZ9Kr5vGdouh2ZI4N+bxQ7MC1/jdvf7JVbCsDM4qhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b1:57:99:bb:c5:ed:55:2d:e7:04:52:b7:e9:44:ca:7e:66:e1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
Validity
Not Before: Jan 31 17:06:46 2025 GMT
Not After : Feb 3 20:24:46 2025 GMT
Subject: CN=2D9B39274EC1E335A2EB10344812B5B74C9467FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:c6:e0:2e:9f:09:c5:cf:67:8c:c6:1d:72:
12:97:bd:25:7a:ce:de:9a:a2:aa:1c:c5:62:58:b6:
78:dc:9d:ed:30:69:07:20:83:fc:ea:6e:6e:d8:e8:
27:0c:34:6d:30:b1:72:3d:61:08:66:7f:14:aa:19:
0c:a7:e9:88:46:98:27:a3:f0:bc:4b:d8:1f:3b:6f:
40:e3:14:53:18:f3:fb:e5:94:90:cd:6f:d0:4d:3e:
be:cf:0b:85:18:af:c3:c0:ea:39:aa:92:17:e9:a8:
e3:82:c8:14:06:85:dc:b9:eb:4a:06:88:d3:bd:a6:
8b:58:85:d0:e6:a9:18:7c:f6:12:bd:e7:b7:76:4c:
f4:0f:50:21:c9:b9:31:7c:38:ee:48:75:07:da:8f:
f8:64:a9:bd:b8:fc:0e:e6:b9:1f:91:d4:52:14:60:
42:15:cd:f5:ca:b1:45:aa:04:74:1a:12:76:b0:5e:
cd:b3:93:46:05:2d:cf:5f:12:80:29:64:65:44:6a:
3c:1b:e0:61:20:cc:87:71:e7:c3:7a:39:d4:97:1b:
e8:ba:41:ce:cb:c6:75:7f:e3:0d:0d:be:cc:ad:dc:
4e:2c:da:ea:19:c4:05:6b:99:7a:44:5c:44:04:dd:
62:c6:ff:e4:20:aa:1c:31:1b:31:1d:a7:63:0f:48:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:39:27:4E:C1:E3:35:A2:EB:10:34:48:12:B5:B7:4C:94:67:FF
X509v3 Authority Key Identifier:
keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d8:87:f2:93:db:ea:68:60:8b:a6:91:3f:f9:80:79:46:f2:
94:3a:30:f1:37:05:4a:21:cd:eb:f0:06:72:99:46:11:a6:eb:
b6:2b:40:6f:9c:a8:dc:48:40:ee:c7:3f:56:ee:e1:10:51:8c:
3d:68:6b:8e:d8:da:08:1d:bf:be:fd:6e:b1:8d:5e:43:4e:d0:
76:81:de:2b:01:78:45:46:87:35:c5:13:c3:38:ac:90:84:75:
03:1f:96:f7:16:4f:b5:8d:6e:04:f7:5c:0d:af:00:31:24:b5:
27:19:2a:9e:fa:94:7d:e5:66:f0:b7:4c:14:35:d3:64:2c:17:
56:12:bf:f6:85:59:b2:c4:f4:4f:68:df:09:9e:2d:f5:f4:fd:
3f:9f:4a:fd:7f:33:87:44:57:38:c9:50:39:0d:b6:f7:f6:1e:
ce:5f:f0:57:01:3d:f0:03:1b:6d:5f:8d:3a:d6:99:7c:76:89:
dc:d2:24:e8:a4:f1:b0:b3:00:df:fa:04:3a:61:2d:f6:ca:74:
61:a4:0f:39:e5:28:51:d5:81:60:39:0d:97:45:2f:dd:e0:aa:
33:44:c1:08:80:75:20:7d:4f:12:7f:b2:5d:79:f6:eb:95:a6:
e6:95:1e:dd:1a:a6:0d:59:23:2a:d3:ba:a6:f1:4d:60:05:2a:
ef:68:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:46 2025 by rpki-client