Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft
File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json)
Hash identifier: bu/I8XlsGi8W2AoUVJBQBuCH64keC++KZ7glKEW6N2o=
Subject key identifier: B8:3E:9B:77:42:67:CD:A7:0D:F9:5A:76:A8:45:92:99:4E:25:1D:DC
Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81
Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81
Certificate serial: 5BF1EA1BDFA76ABD6BB13574E3D80B5313F0AC3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft
Manifest number: 01B9
Signing time: Wed 29 Jan 2025 18:21:36 +0000
Manifest this update: Wed 29 Jan 2025 18:16:36 +0000
Manifest next update: Sat 01 Feb 2025 23:56:36 +0000
Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: uDXBVFYUNTnPfvQZqJcgLcV5wfpqDhHCmn9nDQ5hK84=)
2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: Eo2f5lJXKeAhMsRit+skt9gOQsrkdR5U+FjJRVj7OOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f1:ea:1b:df:a7:6a:bd:6b:b1:35:74:e3:d8:0b:53:13:f0:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81
Validity
Not Before: Jan 29 18:16:36 2025 GMT
Not After : Feb 1 23:56:36 2025 GMT
Subject: CN=B83E9B774267CDA70DF95A76A84592994E251DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:e5:0e:30:1f:58:c3:39:34:10:51:3a:f3:
af:5d:3d:f5:88:13:c4:a3:93:4a:11:c9:dc:32:07:
67:e1:2a:88:33:02:9a:02:27:22:33:31:fa:a5:2c:
54:6c:61:cd:df:61:50:f9:0d:8f:c5:12:8c:6f:f3:
e3:90:60:a3:0a:36:b9:01:65:1d:f1:a8:25:2a:3e:
e2:62:5b:64:90:98:bb:64:cc:b3:13:66:6e:6c:29:
06:97:7f:8e:a3:21:79:29:1b:04:ed:1e:5c:cb:f3:
06:46:4e:ff:ce:2c:7c:ec:a3:3e:56:9f:88:25:5d:
8b:cb:82:96:56:d8:d0:56:c6:3d:d7:f1:e0:1d:23:
d0:89:80:80:48:f7:cc:1a:ed:11:be:ee:cd:60:d3:
09:5d:b7:1c:c5:83:56:b2:42:71:11:26:d6:7f:a6:
eb:94:04:59:f2:6b:c7:7e:89:f0:47:36:7f:21:23:
c2:b2:ba:51:6f:df:67:b3:69:fd:a1:25:2c:d5:0f:
b2:b5:df:a4:0d:b8:5d:b8:49:cd:5b:bf:3c:e7:1f:
45:f4:a7:b0:ac:33:eb:fe:4a:7b:b2:42:27:29:2b:
e5:eb:e5:97:f3:e4:5e:1b:53:64:20:d9:98:c2:80:
fe:95:5c:44:ab:64:7d:2a:89:75:6f:6f:54:6d:10:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:9B:77:42:67:CD:A7:0D:F9:5A:76:A8:45:92:99:4E:25:1D:DC
X509v3 Authority Key Identifier:
keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:39:b1:03:89:80:bf:5c:95:c6:b1:54:1f:f8:23:21:9c:
b0:93:39:70:e2:e0:9a:de:4f:b0:45:83:25:a9:f2:d9:97:bf:
3d:61:c0:c0:32:c4:d7:cd:2a:75:2b:95:f9:fe:71:bd:dc:8e:
df:5a:10:63:22:d5:96:ac:78:5e:40:2a:e2:b7:29:2d:94:e2:
fe:2e:2e:d2:85:43:5a:e6:96:52:86:7b:43:ff:7f:53:df:b3:
f2:63:63:0c:90:a4:69:da:28:c6:25:f2:ee:68:ad:e1:c9:6a:
30:d8:b2:b3:3d:18:47:56:87:f1:4b:60:5d:53:74:94:08:8f:
9f:81:09:fd:57:6c:95:36:6d:30:ee:16:e7:d4:fe:40:55:65:
3b:3c:74:25:9f:be:77:dd:5a:6c:41:cb:8d:2d:ce:71:6f:07:
53:2e:b0:5d:e2:fd:ab:6b:b6:2a:2c:d6:83:1b:f0:6c:e0:f9:
b2:6d:6f:45:c4:e1:77:54:ad:71:d9:51:3f:d4:20:8e:8e:b0:
5e:75:c4:1a:d1:14:d6:fd:44:0f:32:40:50:90:41:4e:12:99:
af:1f:d0:f5:cc:74:3c:ca:b5:9c:75:9e:fd:0b:c7:80:d6:b4:
fb:03:34:2f:d4:da:9b:99:98:f9:f7:2b:09:c2:33:73:6c:93:
45:22:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:14 2025 by rpki-client