Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json)
Hash identifier: mk03nK+qC/dZvHdVxpGJ62Hs1XwQ/mF+BmfU4EDb54s=
Subject key identifier: AF:C2:59:07:79:C3:4D:AF:CB:89:E3:F2:EC:2D:66:28:D7:92:AE:F3
Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Certificate serial: 3B04E5F9A21DC4761628023A62AD2CF626B0027D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
Manifest number: 72
Signing time: Thu 30 Jan 2025 17:20:47 +0000
Manifest this update: Thu 30 Jan 2025 17:15:47 +0000
Manifest next update: Mon 03 Feb 2025 03:59:47 +0000
Files and hashes: 1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: k1ABqECpixq2cAGwylGOS1bNZF6AWmXzRRrM23inilg=)
2: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: u9dQWQGRSpLrEXXoLD3wsof8bs3Stgm+PtPhrrrwsyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:04:e5:f9:a2:1d:c4:76:16:28:02:3a:62:ad:2c:f6:26:b0:02:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Validity
Not Before: Jan 30 17:15:47 2025 GMT
Not After : Feb 3 03:59:47 2025 GMT
Subject: CN=AFC2590779C34DAFCB89E3F2EC2D6628D792AEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:d3:f1:08:0f:3a:02:33:b0:31:de:db:ae:
1d:d5:b6:d4:85:5c:b3:da:32:a4:b6:dd:6c:19:f1:
88:bb:3e:5d:e5:57:79:51:54:75:d4:43:0d:3f:78:
d7:a9:b7:70:f6:25:88:5b:6b:ba:0a:e8:9a:f1:0b:
16:45:97:e0:8b:6d:25:e6:0c:c7:e0:22:42:e8:b8:
7e:3b:a9:1c:9a:cd:18:e1:d2:e4:17:91:1c:1f:95:
e4:22:ef:4f:03:ac:11:ff:f9:bf:1b:b6:b8:5f:c2:
24:c0:88:5e:ea:a3:cd:7d:de:d8:58:cb:28:ca:11:
19:cd:38:5e:c6:b4:f9:61:c0:c8:12:bc:a8:ae:59:
80:25:5f:2b:f3:75:d6:21:ee:e9:9c:6b:20:e9:51:
9d:59:0c:e5:e7:98:61:3a:d1:3b:9d:57:50:1e:45:
06:27:04:ce:18:e2:45:dd:66:7a:aa:42:5b:05:62:
9d:4b:b3:09:53:18:2e:9d:b0:63:e0:0a:85:22:78:
42:25:75:25:85:3c:d7:4d:c3:47:ee:a6:9e:0c:42:
8f:b5:b7:3b:4b:02:0c:a7:da:12:99:14:a3:04:cc:
45:99:62:18:3a:40:7a:21:91:a0:fe:0f:a0:c9:3f:
52:b3:90:b2:7c:87:59:30:5a:79:d8:88:1e:81:b3:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:59:07:79:C3:4D:AF:CB:89:E3:F2:EC:2D:66:28:D7:92:AE:F3
X509v3 Authority Key Identifier:
keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:55:2f:33:68:48:c6:42:30:c0:8c:31:b2:5b:93:15:03:
8e:d9:5b:3d:21:b9:33:52:25:9f:65:4d:4d:51:bc:48:62:a6:
bb:63:ca:49:aa:98:36:37:9c:ac:29:09:87:f8:95:18:d8:7f:
00:cd:0d:eb:5d:84:a7:dc:b1:46:1a:57:05:aa:e1:54:14:97:
36:a5:9c:a7:f6:77:9f:f1:1a:2c:76:e9:c8:60:d1:6a:00:66:
b3:10:b8:5f:39:90:db:fd:a0:d2:8e:1d:23:39:20:4d:4c:c8:
f9:3a:21:21:23:8f:12:d9:37:58:ca:83:db:c6:d0:46:af:d9:
1a:bc:20:ff:f3:f2:de:df:0d:2f:e1:7f:35:fd:ab:ce:cb:27:
57:16:2f:5c:cf:33:0b:3e:42:0e:82:76:92:3c:cb:cb:18:14:
0f:71:29:e9:10:35:9d:39:db:a7:83:3e:df:c3:2a:b3:9e:b8:
0b:c3:a9:62:50:64:9d:32:3b:5c:89:db:7c:96:44:3a:97:f0:
74:1c:ee:6a:87:f9:00:4e:ab:5f:d1:7a:3a:57:fe:d0:1b:0d:
36:24:ea:8a:80:93:51:5e:8c:ee:71:c0:c8:20:3b:e3:6e:29:
b1:9e:25:49:70:d5:9b:b0:6a:25:6a:2e:41:46:7c:7b:5f:af:
49:3a:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:23 2025 by rpki-client