Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json)
Hash identifier: Q6w92SQMCyQ/s8znW+At4hFiS2A/dgySxvOx2FxDi2s=
Subject key identifier: D9:28:4C:61:06:F3:5F:B8:1F:03:FB:F8:97:3E:16:8B:67:F0:83:08
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial: 4B901EAA122D9324850352A88B89F82BD41C3047
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
Manifest number: 0335
Signing time: Wed 29 Jan 2025 19:32:16 +0000
Manifest this update: Wed 29 Jan 2025 19:27:16 +0000
Manifest next update: Sun 02 Feb 2025 04:09:16 +0000
Files and hashes: 1: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=)
2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 8VCbSt8sf1ira304Yivk2um0uX8Ou0NBiN+oeimWTgo=)
3: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: QmQD4bjrJdt/lyM122623V8JMgAufQDBPLABEg+RqIc=)
4: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: uw1IMEfhECnCQ5x+C3EkhFtsv7FNGp+Ew9Y1n8aiN7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:90:1e:aa:12:2d:93:24:85:03:52:a8:8b:89:f8:2b:d4:1c:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Validity
Not Before: Jan 29 19:27:16 2025 GMT
Not After : Feb 2 04:09:16 2025 GMT
Subject: CN=D9284C6106F35FB81F03FBF8973E168B67F08308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:96:02:89:40:7a:fb:6d:2c:73:30:81:fa:
40:55:da:b8:a6:2b:71:d2:28:0d:a5:38:a6:df:ad:
86:aa:ca:4e:60:30:43:66:92:a4:9d:b9:48:5a:c7:
24:8b:ac:0e:4e:b6:a2:f9:f2:b2:cc:cb:ac:0b:ee:
3c:df:62:3a:7f:b3:da:8b:f0:26:df:8d:73:b9:ff:
09:58:57:47:68:40:bb:bd:d4:00:5a:85:41:35:bb:
de:e8:71:8c:99:4e:50:b8:dc:80:e9:7b:bd:82:f3:
a6:39:85:0d:26:df:d9:22:b2:54:06:0c:e2:cb:27:
a4:06:48:79:40:19:b6:89:90:cb:4c:79:bb:de:ad:
2e:65:45:4a:af:13:2a:f1:c1:18:76:e9:a9:c2:24:
9c:38:74:79:9a:65:4c:f5:31:13:13:0c:6c:50:36:
c4:bc:75:d5:72:62:74:68:62:4d:bb:9f:31:47:72:
b0:8f:db:db:e2:cb:0f:d7:f6:0e:ff:72:14:68:3e:
33:e5:d8:63:30:4a:dd:50:df:e8:c5:1e:d9:32:79:
f5:fb:27:a5:01:c7:25:4d:d2:6f:90:90:e2:23:7f:
00:c0:4b:6c:71:db:a1:24:74:81:32:ac:33:87:54:
08:91:1a:40:4c:a8:8f:2b:f5:79:b5:6a:80:61:eb:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:28:4C:61:06:F3:5F:B8:1F:03:FB:F8:97:3E:16:8B:67:F0:83:08
X509v3 Authority Key Identifier:
keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4a:f1:74:ef:a7:89:af:39:bd:6a:fc:45:9f:0b:a6:0a:a9:
8a:ab:d9:fe:3c:3d:c9:c7:f1:4f:22:45:6e:8d:4a:5e:9e:12:
36:55:3a:05:98:58:e3:11:0e:a0:19:21:f3:0b:4e:1a:d3:65:
44:b5:1f:8b:5c:52:c5:be:b6:7d:8b:81:83:9c:3e:8d:3c:4a:
22:46:ff:39:1d:75:3d:12:b7:c3:ea:a9:96:78:97:67:5d:1c:
b7:f7:78:f8:dd:63:f5:14:26:65:aa:aa:12:c9:f2:d2:3e:d4:
85:3c:f1:14:d4:44:03:b3:ce:c9:6b:cf:e2:bb:58:27:2f:f9:
6e:4d:7e:ae:e5:fa:86:bc:89:29:4b:ea:65:ad:2d:c4:fd:af:
ad:7c:b8:d9:c3:68:23:5e:ef:db:04:cc:9f:ff:79:1a:b7:b2:
e6:de:29:80:c0:59:bc:2e:95:a6:89:2c:53:fc:b6:1a:7d:ec:
3e:11:01:4a:43:39:f0:4e:91:a3:cb:9b:01:2d:47:e5:4f:18:
46:9e:3b:8a:dd:d3:b5:38:7e:54:9b:a0:b1:6c:1e:eb:e2:ee:
bd:d5:9b:b3:89:d7:58:08:f2:82:6c:19:db:33:30:0e:9f:c1:
f2:58:fc:87:00:70:34:22:3b:8a:86:8e:19:fd:22:b8:ef:50:
79:f0:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:06 2025 by rpki-client