Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json)
Hash identifier: zNbfIZfSsFFqb0CCd16VGUs2qF6Ce8TTuHNIuUSqC2o=
Subject key identifier: FF:FB:0D:DF:DA:48:50:E1:70:E2:2B:62:BA:B6:58:E7:D2:9C:8E:CA
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial: 5443213EA9A040B792F3505B9F9BB4AC53D69CFE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
Manifest number: 04A3
Signing time: Fri 31 Jan 2025 12:11:35 +0000
Manifest this update: Fri 31 Jan 2025 12:06:35 +0000
Manifest next update: Mon 03 Feb 2025 21:38:35 +0000
Files and hashes: 1: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: cEM+4StkyEglCT4lHQCTAQwPGP8wSQIN6J/jKANGX3Y=)
2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 8DJcpf94efs7+wOfl+gt2z4KZlFft8eztT+k7q3T7FA=)
3: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: gXa03SiiukIJhZ/YGwH6hHI+OpKMn/NsgfJnbbDvLWQ=)
4: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: n5l2TDbr0eIZ7shRLW4LZaxy1MHMOTIK7ObeHbqVyPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:43:21:3e:a9:a0:40:b7:92:f3:50:5b:9f:9b:b4:ac:53:d6:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Validity
Not Before: Jan 31 12:06:35 2025 GMT
Not After : Feb 3 21:38:35 2025 GMT
Subject: CN=FFFB0DDFDA4850E170E22B62BAB658E7D29C8ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:33:19:ff:7b:b4:d6:69:45:be:18:91:21:
ce:ed:9b:ab:29:69:29:90:a8:cb:0b:49:1b:a6:5a:
33:35:78:6f:d9:e5:f2:d5:55:cd:93:99:be:13:31:
cd:98:88:d8:86:8d:d3:a3:04:b5:c7:b5:d8:29:4f:
b0:f6:92:3d:62:50:67:13:31:bf:08:c9:8d:28:13:
6c:67:4f:9a:21:14:b0:6a:c5:d9:f2:6b:83:5c:50:
a3:a8:bb:d7:8f:bd:43:d7:77:3f:6d:9e:e6:b9:ca:
9e:cc:58:8c:29:d3:47:fb:3b:6d:0d:5e:67:30:28:
57:3c:f1:89:db:19:bd:e7:f3:c1:b7:20:ba:3f:e7:
6c:79:80:37:f9:81:c0:f6:c2:af:fb:e3:04:ec:84:
ec:52:7b:8a:2a:30:8c:31:ca:72:2b:db:2a:be:73:
be:a2:74:1b:3b:68:d3:0b:cc:5f:4d:7b:8f:4c:18:
8a:37:13:02:fc:0d:d0:44:18:bd:50:51:73:aa:38:
09:a7:70:48:1b:1d:af:a2:c0:49:0e:d7:a4:3a:d6:
11:d6:d7:84:77:54:2f:83:02:8d:aa:28:2d:be:a0:
59:12:31:92:87:0f:0f:e9:08:b7:0a:df:85:01:bb:
84:47:92:a4:d7:31:78:f4:c3:0c:cb:f8:e1:b4:c9:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:0D:DF:DA:48:50:E1:70:E2:2B:62:BA:B6:58:E7:D2:9C:8E:CA
X509v3 Authority Key Identifier:
keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a6:eb:ea:36:f0:9f:38:c3:d5:69:b6:b1:dc:13:93:11:ba:
80:27:76:33:d7:1a:3d:83:71:ed:56:d8:3e:1d:f2:26:b9:a5:
21:8b:59:b1:cd:35:a0:16:6e:6b:40:f3:aa:d9:1b:0e:4d:fc:
96:d0:ce:e7:6b:1f:e8:79:82:6a:6f:f6:e7:42:ed:d0:26:5b:
18:b1:09:bd:ca:37:b5:7f:66:e8:27:fb:03:ca:28:ae:9f:43:
78:02:7c:0b:6b:1e:83:92:42:6c:2c:62:53:c4:10:8b:58:f5:
96:62:64:2d:1e:e3:63:98:95:94:24:df:3f:18:a8:05:ea:81:
60:f6:2d:fc:71:84:a2:ed:02:4d:c6:f9:bf:d5:cb:e0:e7:70:
f5:ae:2f:41:57:35:26:9e:01:bb:35:8b:eb:b4:2e:20:df:38:
9c:41:7c:2e:6b:c8:ab:0c:d9:96:cb:7b:88:48:c8:1c:c6:e0:
5a:e0:4d:99:74:0e:72:84:71:45:cd:91:a9:97:a3:c0:e8:ba:
f6:40:50:e4:a9:e0:b6:05:8d:91:94:07:ce:d2:0d:3f:9d:9a:
38:1e:2b:00:5c:83:43:a5:0f:80:1f:47:bb:e7:2c:f2:6f:a9:
9d:6d:1c:11:c8:88:d3:40:44:21:a3:b4:2e:1d:af:89:83:eb:
43:d3:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:55 2025 by rpki-client