Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft
File: FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft (raw, json)
Hash identifier: B2wP6n+aI8kFP2L5Jkcz81Q/mUskN/k0OkEO6uVThTQ=
Subject key identifier: 5B:9F:8A:D8:0D:5E:0E:48:CF:BD:40:AB:87:91:2E:43:A5:0B:00:97
Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1
Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1
Certificate serial: 7703CF967CBA9B850BA1F3DC8003A1A0FA9395A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 17:21:18 +0000
Manifest this update: Fri 31 Jan 2025 17:16:18 +0000
Manifest next update: Mon 03 Feb 2025 21:54:18 +0000
Files and hashes: 1: FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl (hash: 8AzUZDa19hVMUrfw8JWjvuctOwE0M3A4rk5cUWHqOrU=)
2: 3130332e38342e3230362e302f32332d3233203d3e203538343837.roa (hash: LWP4K69rTAmLzfZq+q8A6u6no/UP4pGP/p24TC0qbQA=)
3: 3130332e38342e3230372e302f32342d3234203d3e203538343837.roa (hash: npR7FfMqPJWN/psfdfS+I3WrtVR+flJthIe7wMJ+s1k=)
4: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (hash: 7arGMuC545SXWQKW/CPxALp6qAEVOocmqFJNcs6tC24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:03:cf:96:7c:ba:9b:85:0b:a1:f3:dc:80:03:a1:a0:fa:93:95:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1
Validity
Not Before: Jan 31 17:16:18 2025 GMT
Not After : Feb 3 21:54:18 2025 GMT
Subject: CN=5B9F8AD80D5E0E48CFBD40AB87912E43A50B0097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:34:83:3f:96:6b:f8:36:fb:8e:ec:26:ec:
e0:14:6d:ce:a4:66:e5:a1:01:3c:e4:5c:9c:2a:5a:
ab:1f:c2:c3:a5:ef:c8:62:e5:a2:a2:70:aa:ee:87:
75:c6:b9:39:3a:a1:aa:8d:50:38:52:36:30:48:67:
00:0c:5a:23:7d:24:62:5b:4b:d0:51:66:bc:c3:c7:
05:c4:7e:01:dc:a8:1f:ca:e1:c3:2c:af:d6:e5:a1:
27:42:14:9a:21:89:e1:35:8c:47:13:11:8c:6c:96:
8b:de:0f:e0:b0:e1:3d:01:bf:6a:66:c0:62:90:79:
5f:3e:a9:18:a8:3e:19:2a:1c:ea:a9:54:fb:44:0a:
ca:af:8d:a6:33:d7:6d:d0:bb:88:c8:3c:e5:0e:de:
17:d5:be:67:98:01:53:73:82:1c:5a:dd:36:0e:d0:
ef:eb:8b:65:44:5c:8c:30:05:fc:8a:13:db:9c:5d:
fa:59:3a:93:a6:77:df:d7:a0:23:ba:da:f5:ba:06:
07:2a:39:ce:8c:26:23:21:10:33:bf:1c:34:67:ac:
b0:19:98:67:69:3a:47:a0:58:43:85:22:73:c0:90:
01:e4:5f:5c:8b:bb:24:72:25:a3:7e:9e:41:4e:8a:
27:c2:cc:7e:9f:0a:2d:be:31:53:9a:24:48:e9:4e:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:8A:D8:0D:5E:0E:48:CF:BD:40:AB:87:91:2E:43:A5:0B:00:97
X509v3 Authority Key Identifier:
keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:26:0f:b4:9a:9d:01:86:38:a9:2f:e9:2e:fd:f0:66:a8:f3:
01:e5:34:d1:d6:21:f0:ad:9e:2d:c9:e4:fe:b2:cd:23:89:7c:
51:f8:ec:c7:f5:55:e6:55:07:44:69:ba:a2:1b:dc:77:62:c7:
6f:eb:3f:42:1f:58:d4:4f:08:b1:68:6a:94:f3:5b:79:9d:aa:
0d:f3:77:cc:13:fb:54:65:b9:4b:3e:b7:64:10:c3:b4:89:4f:
62:45:c0:f2:64:85:42:25:49:ca:a4:85:dd:51:8a:b4:bc:64:
82:22:6c:e5:b9:17:8e:40:4b:3f:c2:a1:78:dd:7e:fd:d1:71:
42:65:70:3d:f2:f7:fc:30:76:14:2d:c8:5f:82:10:da:c1:c3:
21:91:10:8e:0f:70:6b:a0:9f:8d:5a:e8:f5:0c:cc:5c:58:1d:
2f:c0:29:d1:0f:e2:b8:4f:d3:91:9c:63:20:0e:be:e3:e1:fb:
66:9b:c9:f3:8a:51:31:5a:0a:5b:77:b5:c1:85:7c:db:2c:9a:
d4:2d:bf:fe:95:32:81:b9:f5:9e:8d:71:f9:9a:a7:28:3d:c6:
8e:c7:7e:67:87:40:70:7e:6e:98:de:b0:0e:e5:c8:cc:38:9a:
6e:3a:8e:a2:b4:08:9b:e3:92:83:26:ba:14:af:46:46:ea:d2:
11:c2:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:38:16 2025 by rpki-client