Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json)
Hash identifier: XsnL3tSg6ZNLxD4LM7CML6hcth+KBMn9Bw28fTCmVGs=
Subject key identifier: E8:2C:2B:B7:EE:EE:3A:D6:2E:59:38:E0:3A:A1:BD:78:73:2B:91:85
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial: 458AFD9567917599566A9E45E1A727FA7C016C71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
Manifest number: 0134
Signing time: Thu 30 Jan 2025 09:10:38 +0000
Manifest this update: Thu 30 Jan 2025 09:05:38 +0000
Manifest next update: Sun 02 Feb 2025 18:54:38 +0000
Files and hashes: 1: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=)
2: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=)
3: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=)
4: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=)
5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: ETGqi4em3d7iFPvTTbLzNEGHVb50jTVFKGpxmfQ15GI=)
6: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: i4PIqdAGUHJnqP3w5ydxt3bJjdrTFZsFyd9szs5BVAc=)
7: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8a:fd:95:67:91:75:99:56:6a:9e:45:e1:a7:27:fa:7c:01:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Validity
Not Before: Jan 30 09:05:38 2025 GMT
Not After : Feb 2 18:54:38 2025 GMT
Subject: CN=E82C2BB7EEEE3AD62E5938E03AA1BD78732B9185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:e8:46:72:9c:7a:4e:3f:00:59:af:22:18:
a2:df:cd:bb:de:1e:28:eb:d1:f8:5d:fe:de:4d:8b:
00:02:2a:d8:06:28:26:2e:47:e8:05:1a:df:ef:02:
dd:f5:eb:ba:1c:92:83:4c:f7:ec:1f:57:f6:b0:b4:
ee:8c:7a:7e:e2:b7:b1:58:96:f8:4a:5a:f7:d0:63:
79:d1:e9:5c:0c:ba:ef:3d:60:e7:b2:34:6e:53:fc:
44:b1:0a:2f:a3:06:ce:1a:aa:e7:63:72:73:a2:78:
72:4d:b4:76:8a:1a:33:54:90:a4:99:f0:e6:af:e0:
3f:58:84:18:58:57:8d:f0:ea:e2:dc:56:47:56:b1:
d5:c8:c9:2a:f5:cf:10:59:cc:ff:2b:e5:79:27:fd:
1a:29:7a:90:ef:42:43:7a:87:76:a8:bb:7a:f8:44:
74:9c:60:04:96:c2:58:a0:91:91:98:47:4e:b4:f1:
7b:85:7d:fa:b2:c2:d1:4f:8e:19:0a:a2:ad:62:41:
78:2d:16:1a:3f:2e:37:fd:08:42:bd:62:cb:57:10:
b5:ba:83:fa:f9:92:ca:27:e1:e6:7e:51:80:a8:9f:
ff:2f:99:07:5c:0d:ae:43:27:18:e8:ea:35:1c:24:
a6:77:bc:5a:c1:a0:c7:17:82:a3:ae:fd:ae:ed:1d:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:2B:B7:EE:EE:3A:D6:2E:59:38:E0:3A:A1:BD:78:73:2B:91:85
X509v3 Authority Key Identifier:
keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fd:18:bd:0f:d9:c3:77:b8:af:3f:b1:5d:d2:6b:3c:bb:11:
7d:e4:74:16:63:b0:10:91:9b:23:f7:bf:67:80:26:93:d7:56:
53:fb:09:a2:68:fd:64:4a:d3:26:8a:7e:70:a3:74:c9:88:2a:
9b:4b:3f:28:26:96:ae:26:65:6d:1a:21:5e:b0:66:7c:01:57:
20:ef:f9:8a:67:d1:ed:ef:9d:01:35:a9:0c:01:a6:da:a1:c7:
44:e9:a0:ee:8a:d2:b7:80:14:fc:83:00:a5:5f:c8:7c:3e:d2:
be:a8:17:23:c3:c5:81:f6:2f:ed:e2:9e:eb:1e:79:7f:b8:86:
99:3b:19:2b:cb:08:20:3f:e7:06:89:f9:d0:e0:0e:1c:84:10:
28:72:42:9b:ea:73:8e:da:55:b7:4e:95:d3:cf:e9:81:08:62:
0a:1b:91:54:e0:9d:7f:37:63:e4:88:ef:11:ca:7e:84:b0:2e:
c2:19:24:ec:22:db:5f:5c:9e:dc:d5:e3:c1:f8:96:74:92:6f:
2a:59:a1:d8:cf:bf:50:1e:35:c4:89:02:d2:e1:f4:7e:6f:f0:
38:38:17:19:fc:87:65:bf:8e:f1:ca:be:46:db:2f:51:ee:5d:
db:c6:c3:30:44:c4:e3:7f:d5:ee:b1:0f:57:83:b0:fc:93:1b:
be:a0:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:19 2025 by rpki-client