Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft
File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json)
Hash identifier: epsBnPq1y3vHVyZND1yhgc2KBbIjFVd9JeXeAUYrS64=
Subject key identifier: BA:36:2A:78:2E:35:A5:B4:3E:F6:81:C1:CF:C3:8B:43:41:26:5E:D0
Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8
Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8
Certificate serial: 19B21074196105BA8A89F4896B4FB1D3CFBDA28B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft
Manifest number: BA
Signing time: Wed 29 Jan 2025 21:21:50 +0000
Manifest this update: Wed 29 Jan 2025 21:16:50 +0000
Manifest next update: Sun 02 Feb 2025 04:05:50 +0000
Files and hashes: 1: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: ujXZEqTb+Qpvl4UCdCefHpkvSPz4EXp01C/5//Rb46E=)
2: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: tTLF3vGvKjaZxQmBDD2yKcDw/Aq6yHPpLsZ506Wu+pE=)
3: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=)
4: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b2:10:74:19:61:05:ba:8a:89:f4:89:6b:4f:b1:d3:cf:bd:a2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8
Validity
Not Before: Jan 29 21:16:50 2025 GMT
Not After : Feb 2 04:05:50 2025 GMT
Subject: CN=BA362A782E35A5B43EF681C1CFC38B4341265ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:56:21:5e:d5:7e:fb:d0:3f:36:25:e5:a7:
17:bd:a7:4a:c3:9e:24:64:8b:3e:45:86:c7:09:34:
7d:23:5c:fc:88:9d:44:62:b2:8c:00:34:73:e4:75:
89:7a:e9:5f:37:80:c4:55:d5:60:30:0e:ef:16:91:
d8:e5:9e:49:22:7c:4c:d2:1e:69:1c:c0:fe:29:41:
0c:55:aa:0c:df:e4:f0:a5:f5:58:c5:b7:f7:a3:64:
01:db:c0:ef:51:ef:fb:29:d8:d1:7d:a8:47:9c:66:
87:73:b7:32:7d:42:54:bb:c5:27:d2:b8:b7:8b:6e:
8e:3b:a4:d7:f5:de:e0:ea:c6:6f:a9:be:30:40:86:
bc:7e:26:e1:ea:89:cb:0d:fc:b6:94:e2:3f:b9:15:
b3:4a:52:71:d6:c9:ac:7d:94:49:ab:fe:69:1b:5b:
66:ac:8e:08:48:12:77:22:cc:65:fe:82:02:04:43:
b2:3b:73:36:a0:a7:13:c6:a5:65:91:11:5b:d0:75:
2c:b6:7e:1e:46:a4:ea:0d:3a:63:d1:6d:04:03:dd:
57:8f:70:1f:0a:88:25:c2:b9:17:13:75:f7:ec:21:
82:2e:69:a5:cb:5f:b6:73:bf:ef:e9:7e:e3:68:32:
ba:52:e4:66:26:d3:b8:f5:7e:ca:b8:6d:a0:d7:7b:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:2A:78:2E:35:A5:B4:3E:F6:81:C1:CF:C3:8B:43:41:26:5E:D0
X509v3 Authority Key Identifier:
keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:4d:f7:db:df:a9:1f:ac:30:4b:e6:a4:2e:9f:eb:55:33:
4e:8f:55:ba:3b:9f:69:a1:83:bb:cc:a5:ac:5f:1d:9e:77:86:
69:b9:f1:4a:3b:72:b6:72:64:c0:65:b5:8e:55:0a:31:92:56:
39:66:c0:34:ed:80:0c:42:9c:d4:e9:5f:57:90:a9:6c:d1:dd:
47:a4:59:8d:16:2b:f9:f4:a6:f0:c1:3f:fe:b5:92:6f:23:3b:
b5:1c:89:2a:d6:53:b8:1b:00:7a:59:f9:d2:d0:2a:48:0d:f4:
e0:19:64:0c:d6:9d:91:75:f0:e8:e5:4c:67:04:4d:18:01:20:
e1:15:2d:50:cf:05:30:b5:5c:8f:21:f9:62:5d:99:dc:d5:b4:
6e:8d:7e:32:2c:b3:12:54:bf:54:6f:e3:a3:df:93:41:ec:6f:
74:c1:78:37:8b:c7:0d:a4:27:29:63:e5:17:6d:fb:67:d9:b2:
10:72:3a:49:54:c6:a3:73:a7:02:9b:6d:1a:0d:3c:fc:20:93:
82:0e:e7:cd:ce:27:c3:ef:84:6b:bf:bb:85:16:fc:53:52:8d:
9e:cd:51:a7:6f:73:d8:4d:9e:d4:84:f6:32:18:fd:0f:a2:59:
f4:e3:f6:20:ce:b3:bb:c9:d5:76:b6:f0:e1:be:74:ee:79:c0:
89:14:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:11 2025 by rpki-client