Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft
File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json)
Hash identifier: w2i4JhQmWU8n68upsfIJzijFj+eJRyFj/CK5XioXtww=
Subject key identifier: 4A:61:9A:FE:86:64:75:7B:41:4A:DD:F5:F4:30:FD:8C:C8:67:D5:B0
Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2
Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
Certificate serial: 20F50313B56AB7ED24B5070F949EBE6F699BBA67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft
Manifest number: 01A3
Signing time: Fri 31 Jan 2025 03:01:29 +0000
Manifest this update: Fri 31 Jan 2025 02:56:29 +0000
Manifest next update: Mon 03 Feb 2025 14:22:29 +0000
Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: gcloQo4SrPrVFzZpR5COdx7AiUQFi9W/KNU+pW+Xjdw=)
2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: 2OJ/wtKeIZAaX++aUeHXj+pN9DRnOhjC4MRVlbyCCIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f5:03:13:b5:6a:b7:ed:24:b5:07:0f:94:9e:be:6f:69:9b:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
Validity
Not Before: Jan 31 02:56:29 2025 GMT
Not After : Feb 3 14:22:29 2025 GMT
Subject: CN=4A619AFE8664757B414ADDF5F430FD8CC867D5B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:7e:af:4c:2f:e3:94:55:76:a6:e0:a8:1d:
e4:28:6c:c1:d7:7c:2a:d3:fa:1b:e6:81:d9:5d:2a:
94:89:1a:9f:31:0a:a9:23:8b:80:93:e0:6b:b9:80:
0f:ac:a4:20:cf:3c:0f:9f:ff:29:47:4a:ae:65:5c:
a2:e1:c7:7d:cc:2b:29:74:f7:5f:7a:bd:c2:9a:b0:
a4:c8:b6:58:1a:02:f8:fd:96:d0:5b:1b:55:25:e2:
78:b4:04:08:32:26:fd:b1:bb:01:b2:ce:55:d3:51:
65:2b:ca:84:98:6b:58:b0:6e:30:ec:b3:cb:06:3d:
f5:28:36:ca:a5:51:b7:7f:aa:0b:59:72:5c:48:b9:
8b:34:e7:db:52:b7:43:78:5b:22:7d:4a:56:8e:e4:
a9:2d:3f:13:3f:71:74:fa:49:96:ad:c9:fa:12:89:
e9:44:39:00:36:30:6c:77:0b:d2:a7:c3:57:33:3e:
90:d0:17:47:60:1f:4c:9d:f8:67:7c:0f:93:35:13:
8d:69:b7:30:5d:75:25:29:bc:97:e3:06:92:ff:39:
00:48:29:d2:f2:49:7e:f5:eb:97:17:d9:a7:0d:53:
fd:85:f5:a9:68:79:5f:6c:24:90:15:d5:e9:08:00:
96:df:d1:a8:c6:56:d8:a8:e5:88:7f:7e:2d:44:8f:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:9A:FE:86:64:75:7B:41:4A:DD:F5:F4:30:FD:8C:C8:67:D5:B0
X509v3 Authority Key Identifier:
keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:53:13:9d:2c:d1:69:7f:2e:b7:1f:f0:e8:7d:be:b6:b1:cf:
0c:24:30:9c:47:40:be:fd:fd:64:d2:59:f4:f7:80:2c:de:ec:
3d:32:aa:19:d3:9e:a0:5a:75:36:38:b5:6a:6f:43:e3:47:ff:
77:5c:69:a9:38:80:ba:0c:da:00:04:83:75:c2:57:94:ab:77:
b4:aa:25:7b:f3:97:1f:dd:a0:25:e5:ff:dc:7c:b5:28:c8:ce:
8d:b2:4e:0a:7c:4c:7e:b4:2e:77:75:5f:d0:c3:48:f1:87:03:
32:e4:78:37:b8:d5:f5:22:be:66:63:0f:79:20:71:50:e4:7a:
31:61:c3:27:47:39:1f:2d:25:f9:8d:37:17:83:44:12:97:b2:
dc:7f:a4:bd:3a:29:f5:e3:ec:be:49:0b:74:4f:fe:49:3e:83:
ae:61:b2:df:12:c1:3e:cb:c2:56:90:b7:73:50:9c:9c:06:2f:
e9:ff:64:91:8e:0c:db:bc:12:6b:b6:4a:fe:71:2f:08:41:3d:
81:9d:33:1d:46:ac:2e:35:09:32:06:d5:fc:78:d9:39:58:b3:
e6:af:f7:c9:de:7d:f5:50:3e:b7:41:b9:4d:bc:29:4a:68:47:
a7:08:af:2a:5d:bf:5c:9b:5e:13:37:88:6e:37:c5:7e:df:92:
a3:d2:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:13 2025 by rpki-client