Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft
File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json)
Hash identifier: plD+0tulV6RE5OiaUXRPMHOMxXpK9zWB9Y42MpB0sAs=
Subject key identifier: B0:8E:59:D1:E6:4B:1A:DC:20:F1:EA:1C:AC:71:86:62:C4:A1:61:6D
Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8
Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8
Certificate serial: 3A14593A7E7BD05917544CDEB7BDB7757411052D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft
Manifest number: C0
Signing time: Fri 31 Jan 2025 17:01:31 +0000
Manifest this update: Fri 31 Jan 2025 16:56:31 +0000
Manifest next update: Mon 03 Feb 2025 18:26:31 +0000
Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: g8G8Lzk52yHfFmWvkStbEEBTaOjR4TLxOAp84iNfAiA=)
2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:14:59:3a:7e:7b:d0:59:17:54:4c:de:b7:bd:b7:75:74:11:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8
Validity
Not Before: Jan 31 16:56:31 2025 GMT
Not After : Feb 3 18:26:31 2025 GMT
Subject: CN=B08E59D1E64B1ADC20F1EA1CAC718662C4A1616D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:30:c1:f1:6a:30:d3:77:4e:57:6f:82:3b:
82:dc:5a:7a:78:18:2f:37:94:7a:d6:00:59:fa:15:
b5:f5:70:3e:54:bd:91:9c:59:3c:a4:56:53:1a:ed:
fd:14:bf:21:9e:e1:07:72:62:0f:12:17:39:c9:39:
3a:d1:df:08:9a:fd:49:bf:a0:cd:de:32:5d:4d:80:
a8:fd:7d:64:cd:b1:31:f9:a9:61:f3:f7:7b:94:99:
96:db:b9:d1:ad:fe:da:2e:95:72:dd:db:24:07:16:
32:48:37:e3:f3:ca:fd:b1:19:ca:6b:d4:74:4c:b1:
73:5a:a5:96:e8:84:65:e9:e6:94:72:75:a8:c8:c2:
b4:71:73:5b:55:a3:a2:16:9e:0c:f2:3d:6c:7f:c9:
13:9d:d3:3b:9e:f0:c9:27:b6:58:cf:fc:33:bd:8b:
ac:f4:17:4d:57:90:bb:b0:50:26:d6:0d:26:8b:f3:
f6:c3:36:90:1c:79:7f:31:5a:97:69:7e:71:e2:fb:
66:79:13:98:7e:ce:44:ed:60:2b:e1:d2:92:44:53:
c8:60:1f:58:be:e8:fc:cf:75:2e:4e:23:c5:d9:bb:
4f:f3:14:b7:11:8c:96:00:fb:ea:21:e5:4b:c3:a2:
4a:28:3a:1f:d1:eb:34:fb:f7:f5:25:42:3e:2d:fe:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:59:D1:E6:4B:1A:DC:20:F1:EA:1C:AC:71:86:62:C4:A1:61:6D
X509v3 Authority Key Identifier:
keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:b0:8e:4a:f4:d5:05:75:b1:c0:4f:59:5a:3c:dc:75:5d:
eb:17:d4:a4:25:e3:af:8e:68:47:71:8c:b9:76:a6:f3:fb:8e:
de:76:65:34:a0:2a:57:dc:c4:da:39:97:bb:75:90:28:d5:75:
fe:5c:33:d9:7c:63:bd:1a:b5:0c:85:a2:10:ca:2a:bc:c6:ca:
a9:9c:fd:87:40:9f:d9:2e:a8:00:3b:92:56:ea:fa:87:d5:78:
e9:10:0a:1f:15:1e:68:ce:43:67:4c:d8:34:ce:c1:07:21:36:
a9:17:27:75:16:f4:af:ed:d2:3c:d7:cf:a2:fd:e3:3e:e2:41:
60:07:47:a2:ad:c9:c2:b1:8c:8b:66:c8:c6:b9:dc:6e:a8:5d:
1e:a8:6e:94:1f:76:1d:55:b2:5b:1b:9e:34:2d:8a:ba:df:d1:
1f:ec:d1:b3:62:08:7f:12:c4:c4:03:13:d5:39:f7:e1:08:21:
e4:fc:03:73:59:b5:08:08:1d:20:97:03:91:51:fd:61:5d:da:
97:f6:d1:91:af:a4:4e:24:78:17:a9:14:34:60:f7:99:9f:4b:
8b:33:89:b3:53:c0:8e:04:50:e8:41:20:4e:3b:67:83:f6:6d:
37:37:b1:ab:af:bf:18:1a:ad:e6:9e:ac:fd:b3:f7:8e:db:7b:
fa:8b:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:56 2025 by rpki-client