Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json)
Hash identifier: 1nSVk6DLrrk3wLjJGg/AceJlIMtg+V8iLpwwVbbF17M=
Subject key identifier: 73:B3:03:E7:F9:81:C4:AA:D1:E8:B4:BE:42:B9:C5:36:BE:00:23:43
Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55
Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255
Certificate serial: 5B61A3247B5F50A82F7259007BDEBCB6528FE875
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
Manifest number: AF
Signing time: Fri 31 Jan 2025 04:03:53 +0000
Manifest this update: Fri 31 Jan 2025 03:58:53 +0000
Manifest next update: Mon 03 Feb 2025 14:31:53 +0000
Files and hashes: 1: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: duuHcqlPx3yTIV2ZTDJ7fNjQPo65ZhYgBHXallnpqhg=)
2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=)
3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=)
4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:61:a3:24:7b:5f:50:a8:2f:72:59:00:7b:de:bc:b6:52:8f:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255
Validity
Not Before: Jan 31 03:58:53 2025 GMT
Not After : Feb 3 14:31:53 2025 GMT
Subject: CN=73B303E7F981C4AAD1E8B4BE42B9C536BE002343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:de:37:b1:c5:ef:7c:17:d0:4b:3a:26:97:
5d:f6:dd:16:38:64:7c:bc:e5:dc:84:f4:cd:48:8d:
5c:63:98:17:fd:ee:9c:4d:b1:6a:03:41:59:28:59:
4e:75:f9:59:cb:ad:88:14:64:d6:09:01:c7:58:dc:
5a:b7:7d:5b:9e:7b:f6:1a:ae:f5:a7:a7:70:70:ff:
37:71:2e:7d:bb:ae:8c:d0:3c:e5:2a:bb:f2:f7:39:
99:51:d9:69:4d:5c:c4:74:33:33:86:85:a1:70:f8:
70:4d:a9:54:84:9f:99:46:df:36:8b:61:01:bf:12:
c3:bd:91:6a:f2:59:27:e0:72:38:f0:94:c7:fb:c5:
bf:05:42:dd:1a:39:d6:dc:8a:db:04:9f:d8:63:1c:
75:fe:14:c1:d7:e5:14:49:09:60:e4:9f:40:6f:f3:
62:cd:4d:54:3f:0f:e1:e7:72:b3:ca:74:d6:4f:5f:
59:67:50:a7:2a:71:3f:c2:0f:ba:98:2b:20:85:78:
42:f0:d1:f1:58:c9:f2:c4:35:9e:33:5b:ff:7d:54:
d9:fb:80:ef:fb:93:e7:07:f2:59:c9:81:27:48:2f:
42:65:63:ce:92:c2:26:d0:00:f0:ae:c7:46:62:81:
77:b0:2e:76:d1:80:2b:fb:82:26:54:88:87:65:1c:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:03:E7:F9:81:C4:AA:D1:E8:B4:BE:42:B9:C5:36:BE:00:23:43
X509v3 Authority Key Identifier:
keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dd:5e:0b:46:6c:60:dd:a7:a1:e6:50:1d:1b:0a:ae:fc:64:
78:43:ed:a8:7c:85:a8:8d:00:eb:52:3c:3e:40:61:f2:6a:9c:
3d:4c:2e:49:63:18:03:b5:16:97:62:46:c3:4d:db:13:3c:26:
69:ca:82:af:65:70:e0:62:02:19:cc:ea:83:aa:5b:42:50:08:
9c:a5:b5:6e:61:8e:fc:ef:8c:c0:b4:36:e3:27:fd:e5:cf:9f:
45:5b:47:d6:5a:15:b4:05:fe:1f:65:82:13:c8:e0:aa:a3:b9:
c4:a9:f6:5a:ab:c7:33:6b:19:a5:e3:e3:0c:98:90:c4:3c:b6:
94:d6:c4:1b:30:7f:06:cb:44:a0:35:48:1b:4f:46:a6:02:af:
34:c6:99:7b:26:09:d4:10:b8:47:78:35:0c:9d:c4:f1:bf:51:
ab:e9:c5:ee:45:38:b0:ee:a0:94:a2:5b:76:22:37:46:7c:1a:
d6:fc:c2:2d:a7:38:03:80:2b:6f:46:3b:72:8a:7a:05:04:49:
fa:7c:ea:d2:37:42:d9:5f:68:03:11:dd:73:62:e8:cd:c3:94:
6a:78:33:5f:ed:75:94:e5:c8:8c:6d:df:77:ca:cf:84:2c:5c:
8a:f2:2e:4c:87:90:15:18:40:ac:0b:49:f2:10:55:23:32:47:
7e:ce:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:22 2025 by rpki-client