Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft (raw, json)
Hash identifier: Vx5txjpK5tWV8Uwi4JO1mEwYOn/Vz82mS4mq7X47oj8=
Subject key identifier: A4:6B:96:C7:42:FD:F9:10:CD:CE:01:88:51:79:62:72:07:90:CD:7E
Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
Certificate issuer: /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Certificate serial: 1EC8CF6E38DE9C92ED8B6CD63F8D197CB679745D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
Manifest number: 01D2
Signing time: Thu 30 Jan 2025 07:41:52 +0000
Manifest this update: Thu 30 Jan 2025 07:36:52 +0000
Manifest next update: Sun 02 Feb 2025 10:43:52 +0000
Files and hashes: 1: 3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (hash: Ytn4J3L//ntkx3dIdir2Ut4ptmhaS3TkbsBspKupuTk=)
2: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl (hash: 7PkMJ3lK/wXotAZq1dMefeuGYB8b2KYIrl4+Xko6AFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c8:cf:6e:38:de:9c:92:ed:8b:6c:d6:3f:8d:19:7c:b6:79:74:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Validity
Not Before: Jan 30 07:36:52 2025 GMT
Not After : Feb 2 10:43:52 2025 GMT
Subject: CN=A46B96C742FDF910CDCE0188517962720790CD7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:f3:ff:42:5b:a5:49:04:73:40:c8:d7:fa:
43:21:77:ee:5b:dd:0c:53:24:ed:cb:d1:33:64:85:
10:c3:6c:4a:bc:53:7d:8c:04:1a:eb:96:9a:3e:62:
f1:7e:b0:52:e0:19:19:de:7c:02:be:4b:dd:37:3f:
d8:f9:aa:ba:28:c4:48:93:9e:a3:d7:cf:29:0f:21:
b9:88:31:f3:88:54:54:9e:b8:e3:a9:f5:a3:d5:87:
79:2d:e3:de:2b:b6:3d:bb:74:3f:0e:a8:58:29:9c:
93:81:9c:bd:e5:db:2f:dc:8d:b7:6f:ff:44:ab:7a:
54:12:ff:a5:84:17:8d:03:d8:5f:93:15:94:14:be:
4e:71:2c:d1:a6:a2:06:9e:2e:d5:31:f8:a6:29:46:
0b:f9:3a:58:a5:1c:0c:ff:d9:b4:6d:b8:61:c8:78:
a2:40:38:67:26:5d:09:75:e6:fb:0b:04:fa:ec:d3:
d6:fc:28:3e:72:02:18:31:f9:ad:38:10:7e:ad:3a:
94:d0:6d:df:0b:e3:02:da:41:59:5f:01:f6:47:2f:
22:a2:2d:0a:42:65:29:a9:c8:61:51:62:05:80:d9:
bc:03:d1:cc:3e:0b:b1:f1:d0:73:d2:01:e9:c7:b5:
53:35:02:c8:32:bf:53:4e:e1:79:fd:1e:53:9a:66:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:96:C7:42:FD:F9:10:CD:CE:01:88:51:79:62:72:07:90:CD:7E
X509v3 Authority Key Identifier:
keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:03:f1:5f:e4:6b:fd:90:f0:e8:71:57:9a:9a:cd:9a:28:
b6:74:8b:42:b3:62:3b:ff:05:a7:a3:84:12:e6:fd:05:70:e5:
7d:da:cc:53:91:72:28:ac:2a:ca:56:f1:4d:ca:e1:b0:d5:7c:
70:6e:64:62:e2:d8:1c:68:b0:61:04:5c:3e:a0:0d:ce:00:76:
1b:d0:d5:10:9a:27:ba:bd:b9:d1:21:72:8a:69:da:79:c5:ff:
50:6c:cd:4a:1e:18:b8:9d:75:16:6f:4c:40:bc:9e:6f:f4:7f:
d5:1c:2c:5c:8a:79:47:7e:07:7b:bd:5b:73:94:fd:ec:d0:95:
00:12:e9:6c:48:fd:85:7c:d1:59:58:c6:63:8a:ae:af:64:a4:
eb:85:2b:f8:14:3f:f8:72:4f:dc:11:42:59:00:9a:ed:53:d0:
59:b4:bc:7c:0f:9a:41:dc:42:c4:c6:43:be:c0:28:1c:95:3b:
31:ce:bf:25:88:2e:5d:93:3a:e5:dd:96:1a:4a:05:55:13:c6:
d7:bb:b7:12:1b:ae:cc:30:97:ed:17:ea:f0:56:76:25:b2:cd:
8a:e5:fc:e3:7b:b8:28:a2:b1:1d:b5:19:62:15:73:47:cc:45:
3e:47:0e:98:e8:be:ae:e3:5c:d2:2a:bc:2d:16:a9:9b:ad:49:
fe:ce:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:41 2025 by rpki-client