Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json)
Hash identifier: cP9B12ZhHM+jvtRPUrW6ZEOx6EteZkQUR49CIO1vC/s=
Subject key identifier: B6:FF:7F:D1:F3:73:BB:55:7A:8F:03:ED:FC:07:4A:08:99:CA:97:24
Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Certificate serial: 6860FCAC8DB06094AFBB8FB6D16AA139FA80670C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
Manifest number: F9
Signing time: Thu 30 Jan 2025 20:30:48 +0000
Manifest this update: Thu 30 Jan 2025 20:25:48 +0000
Manifest next update: Sun 02 Feb 2025 23:04:48 +0000
Files and hashes: 1: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: JNpT1dZEf8opBHUFF8/Td2RSSEyhqKZs7uMYbfIzL08=)
2: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: BqxGJKAqY3UZxquI28IKBsc/mkpLT/fnwt3vMueahyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:60:fc:ac:8d:b0:60:94:af:bb:8f:b6:d1:6a:a1:39:fa:80:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Validity
Not Before: Jan 30 20:25:48 2025 GMT
Not After : Feb 2 23:04:48 2025 GMT
Subject: CN=B6FF7FD1F373BB557A8F03EDFC074A0899CA9724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:4d:a8:2c:ba:3f:02:d3:ed:59:b5:d7:c9:
d1:ad:0d:3d:ea:33:d0:89:ab:a5:7c:2d:53:8e:6e:
98:29:0c:dd:9b:36:ba:3e:d2:5e:5c:5e:62:9b:fa:
fd:a5:c9:d8:9d:61:9a:fa:a5:f2:44:38:61:b8:7f:
0b:96:1c:00:05:79:ce:24:8b:8e:63:e7:b5:73:1e:
da:e0:8d:6c:8d:20:1c:2d:17:2c:29:37:e8:09:18:
14:65:69:b4:80:92:2b:67:4e:52:6b:c9:e0:c1:63:
da:7e:b1:1b:c8:e3:b7:22:43:57:8a:34:c4:8e:25:
9a:9d:36:e4:60:35:11:ec:81:c8:b6:b2:e7:0e:44:
0f:93:e5:aa:08:4a:14:c5:7d:a7:7e:a4:0f:b1:9c:
0e:5f:f3:83:f7:6d:6a:95:28:51:e6:61:35:ef:47:
a4:09:15:19:a9:34:dc:16:d5:97:c9:6d:79:9c:b4:
7a:47:71:b5:92:8e:88:3a:cc:c5:ab:0e:6c:19:fc:
cf:62:41:c6:4c:bb:b4:7c:3b:c9:86:82:1d:51:e4:
90:f4:df:ca:03:19:7e:1a:fa:24:eb:f1:d6:fc:96:
da:02:ab:e1:67:61:16:1d:e6:d9:74:48:f4:b1:3d:
bb:49:14:9a:40:4d:1f:a8:88:9f:6e:32:98:f5:8e:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:7F:D1:F3:73:BB:55:7A:8F:03:ED:FC:07:4A:08:99:CA:97:24
X509v3 Authority Key Identifier:
keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:44:fa:89:fd:d9:e3:06:e4:ef:22:f5:80:28:f2:83:7d:4b:
24:32:27:dd:75:d3:8d:b9:3b:fc:61:45:5e:40:7f:ef:7d:22:
4b:c8:ef:2d:f5:1f:37:6b:22:b8:2d:2d:ff:1a:f6:ab:12:01:
dc:5e:e2:7d:d3:a0:2a:c3:82:80:ec:bd:e9:63:6a:0e:65:08:
26:c5:cd:0f:cb:d5:ba:ff:c5:5d:ea:6c:ec:fd:00:dd:46:ed:
77:28:3d:40:c9:fd:5b:5e:bb:35:3a:58:4d:ec:42:03:6b:b8:
51:75:0e:b9:f1:9c:63:b7:2d:7b:aa:b0:d0:e7:a1:75:40:de:
36:fa:89:e2:ce:7e:ee:e6:b5:0e:9e:aa:31:c6:02:0c:8c:1f:
ac:59:20:36:e9:03:cc:6d:c5:c2:f9:6b:03:08:c2:29:51:49:
cc:83:48:36:73:84:7d:c7:7e:d3:68:60:48:93:a7:7d:e3:07:
4b:a9:1a:c5:ae:7d:28:45:80:09:ae:59:5c:09:8f:ab:40:f3:
bc:dc:b9:fd:61:02:55:a0:69:53:6f:48:a1:f8:e7:b9:ea:3b:
e2:3f:79:8e:a5:32:60:02:1b:3a:45:40:26:5b:87:66:68:ef:
a9:a2:11:31:33:3e:31:0a:6b:9a:5d:84:37:96:ff:3b:2e:46:
04:ad:ed:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:01 2025 by rpki-client