
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft
File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json)
Hash identifier: QKbqsFANtOUr/YS4WbsYQJ0qx4RjrO9hDse7ULkN0I0=
Subject key identifier: AA:88:B4:1B:F5:D8:AE:CE:C4:73:D9:15:04:D3:B9:22:44:0B:9E:D2
Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED
Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED
Certificate serial: 364BD3C32E84DC497ECBC359265A1729F0AC8F6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft
Manifest number: 03E2
Signing time: Thu 30 Jan 2025 21:21:14 +0000
Manifest this update: Thu 30 Jan 2025 21:16:14 +0000
Manifest next update: Mon 03 Feb 2025 04:40:14 +0000
Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=)
2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: bcid9ukY61zFZlWfc8yeb+Cak2kIfl+J31hFZcnMeZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4b:d3:c3:2e:84:dc:49:7e:cb:c3:59:26:5a:17:29:f0:ac:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED
Validity
Not Before: Jan 30 21:16:14 2025 GMT
Not After : Feb 3 04:40:14 2025 GMT
Subject: CN=AA88B41BF5D8AECEC473D91504D3B922440B9ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:28:f7:df:d2:fb:b5:ec:76:86:ea:17:23:
9a:1b:cc:af:42:cd:22:ce:0e:ce:ac:a2:9a:82:7b:
c1:24:2b:b4:57:6a:db:79:77:48:08:01:f0:b5:dd:
46:65:19:04:03:56:48:ec:e4:a7:e1:04:62:96:36:
52:58:f6:13:f7:5f:ec:59:1c:61:ba:88:49:34:e7:
d5:bb:fc:4a:d6:d1:ce:b7:4b:ca:70:a2:f6:1d:1e:
60:75:83:37:52:c5:9f:57:0f:82:27:35:d2:6b:dd:
be:35:85:f2:0e:5e:70:23:60:b2:11:cf:0f:2d:97:
61:ee:33:e2:67:1b:0a:c0:42:61:36:88:bb:54:5c:
17:6d:c8:4f:82:7e:a9:ae:59:76:77:ba:0b:00:56:
6c:7b:ac:3d:fa:1a:55:43:f6:af:d1:4a:68:7d:cc:
6a:04:b9:1e:a0:b1:66:cc:38:a0:0c:87:ee:32:08:
dd:43:e2:dc:86:70:90:92:81:f7:ab:cb:5b:16:f8:
dd:1f:5a:93:63:05:90:c2:34:b4:b7:f9:b8:00:da:
61:77:19:67:1e:d3:3f:42:a2:a2:b1:db:1a:0b:ec:
39:49:b8:f2:64:05:8b:c6:d0:db:2e:ec:40:da:de:
c7:3f:c2:8d:8b:27:93:b6:6d:59:e0:db:8d:e1:cf:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:B4:1B:F5:D8:AE:CE:C4:73:D9:15:04:D3:B9:22:44:0B:9E:D2
X509v3 Authority Key Identifier:
keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:85:1b:ad:63:58:13:31:af:dc:1e:b6:4f:d7:a8:ba:ba:32:
69:58:e4:89:87:58:28:24:e8:a8:0f:4c:8a:84:da:41:c2:03:
45:d5:b4:3f:74:a5:72:9d:af:b8:59:44:a3:8d:c2:a3:e3:48:
c5:8c:88:6f:ef:6a:36:09:f1:84:d8:cd:92:6f:04:6e:77:80:
70:d0:8e:ac:e8:72:5a:b8:bc:a1:64:c0:cc:b2:46:a4:9b:81:
60:be:79:ec:5d:49:b0:8f:a7:90:78:37:e5:01:03:d8:e2:a1:
7c:5a:fe:7b:33:a2:47:d4:09:16:f3:8f:e5:33:82:b8:5f:94:
49:a0:66:78:85:01:81:70:d9:34:78:04:85:d8:2e:28:72:c0:
21:79:bd:e5:e1:83:d0:d3:64:4b:9f:2e:40:78:e2:42:b9:04:
fd:a2:92:68:4e:af:84:f4:fa:b0:21:bf:14:94:d5:02:02:75:
72:31:20:9c:3b:3c:36:f7:28:5d:af:60:3e:70:dc:a8:83:46:
0f:72:dc:6a:d7:a1:92:7b:ae:9c:c0:60:85:87:2c:23:69:22:
e5:af:db:b3:25:94:91:cc:27:9e:df:44:97:60:64:89:fd:ec:
5a:1f:8b:39:35:c5:84:b6:80:d7:2f:2a:ea:69:4e:f7:f4:36:
6a:8c:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:51 2025 by rpki-client