Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json)
Hash identifier: Jxng5cix7tAtKNML2j8qnfgceSkIYaEaCmsJIfMRFqo=
Subject key identifier: 27:AE:34:B0:36:19:F2:E2:44:2E:A3:CB:A1:93:49:7E:FB:29:52:E8
Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB
Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
Certificate serial: 417EADD4FB719A01649D60FF24297F5779315316
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
Manifest number: 04A1
Signing time: Thu 30 Jan 2025 04:11:23 +0000
Manifest this update: Thu 30 Jan 2025 04:06:23 +0000
Manifest next update: Sun 02 Feb 2025 10:00:23 +0000
Files and hashes: 1: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: PHUFI70Yd8/eQH1IB5Bqra7jl3oU7toK/ScFCZQ9jng=)
2: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: bRsvBb/kWkIFPQ4J5MA4yDtcg+N2qbYcB8HbxqiCK2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7e:ad:d4:fb:71:9a:01:64:9d:60:ff:24:29:7f:57:79:31:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
Validity
Not Before: Jan 30 04:06:23 2025 GMT
Not After : Feb 2 10:00:23 2025 GMT
Subject: CN=27AE34B03619F2E2442EA3CBA193497EFB2952E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:ca:ce:92:c0:10:83:ee:62:d4:83:2a:80:
64:1e:1b:73:19:2a:07:cd:72:4f:d1:f4:02:6b:03:
a7:90:da:b3:08:34:aa:d5:67:d5:5e:ba:3c:4e:93:
f4:d0:da:0b:92:f1:b0:be:2d:79:6e:85:b8:69:c0:
7d:ed:b8:f9:18:e0:93:1d:05:ce:e1:ed:bf:8d:ce:
40:3a:79:0f:83:57:92:50:63:98:51:6d:30:20:af:
6f:a1:c8:89:3c:96:43:18:1b:42:5c:16:1e:f2:82:
16:33:b0:a9:38:10:f8:72:c7:2b:3c:35:68:bf:43:
81:5e:be:90:a2:12:e2:d0:e2:c8:bf:61:ac:33:db:
42:ce:14:5a:39:3b:7b:6c:ab:cb:1b:ca:9e:da:4d:
04:2b:ba:e9:06:58:56:0b:77:a3:7f:cd:c5:61:45:
98:36:c7:cd:5f:c2:89:b2:a7:a2:6e:02:82:c0:17:
82:36:e4:51:0e:37:4d:20:98:12:2b:85:67:bc:ad:
ef:9b:af:5e:0b:83:42:87:be:31:16:5b:cf:1b:4d:
a7:3f:82:15:1f:79:3e:41:2b:bf:0e:b3:36:3b:00:
f1:a2:da:fe:66:45:f8:55:e1:2a:5f:41:db:2b:ad:
a6:c0:38:a9:f6:97:ae:ab:ef:66:83:2c:77:6c:7f:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:34:B0:36:19:F2:E2:44:2E:A3:CB:A1:93:49:7E:FB:29:52:E8
X509v3 Authority Key Identifier:
keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:b2:d5:32:66:f6:cd:73:63:4d:d3:cd:a8:f9:88:bb:d7:
b0:f4:cd:c5:93:81:75:33:3e:56:71:59:88:03:61:15:31:e3:
ac:a2:e5:87:39:20:53:05:03:6d:58:7d:1f:f8:07:df:a0:cc:
e0:dc:93:20:03:49:7a:a3:88:af:bb:77:f2:6f:31:0d:28:e9:
6d:bd:28:1c:72:4e:d9:d8:db:e5:e6:0c:7a:08:29:7b:a9:a2:
8e:cd:ac:71:63:08:95:2d:d1:8b:e0:75:01:f9:40:5c:96:0e:
58:96:35:6c:b7:30:63:8c:28:a1:3d:8b:c2:0f:94:d0:82:31:
01:06:87:67:3a:76:ba:2f:8c:6f:27:ea:9c:ba:3d:a2:93:77:
4a:bc:0c:3b:d9:8d:ae:78:4b:ed:63:e7:98:48:2b:6e:44:84:
ce:41:f6:54:e2:04:07:f9:9a:f3:f1:47:8f:33:b3:0b:fe:c2:
bd:33:fc:e8:1b:b4:f2:15:d9:87:07:f0:4d:78:f9:1e:4d:0f:
e8:aa:29:17:a8:92:eb:d3:11:b9:9a:be:59:1a:de:3a:fd:85:
6a:7b:01:30:38:c5:8f:07:18:d3:68:88:6d:f4:02:9f:da:d6:
40:2c:35:21:7f:0f:ec:bf:84:28:bb:08:f9:a0:92:3e:87:82:
f3:93:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:17 2025 by rpki-client