Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json)
Hash identifier: qM9NCEdVVlGC4ziuOkxVQukZ/OTJJCF4geEuIqwKADY=
Subject key identifier: D3:24:EA:8E:59:34:1E:BF:12:88:FB:A2:71:16:C1:5E:38:57:7C:1F
Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5
Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
Certificate serial: 306B2DCC4A2CC6FB0C2CFE5F8D404D7C59BABACE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
Manifest number: 04A3
Signing time: Fri 31 Jan 2025 10:42:06 +0000
Manifest this update: Fri 31 Jan 2025 10:37:06 +0000
Manifest next update: Mon 03 Feb 2025 17:07:06 +0000
Files and hashes: 1: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: F+PPkcGu7dt3v5/ygEutR5kwCJMPDoB2mAth7Wc1KQQ=)
2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: c/6M07w25lMPdFZsQEiGsbFHOgyjdKi77jGVx678XmE=)
3: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: luq5OPFDzNlWPAxm81jpcGgXzGSjR9L7KcTGQVpe0Ok=)
4: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 8qEqjUoI8JCcLal/9MN7LwmrWh3RHDKtA/EYlOAqErE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6b:2d:cc:4a:2c:c6:fb:0c:2c:fe:5f:8d:40:4d:7c:59:ba:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
Validity
Not Before: Jan 31 10:37:06 2025 GMT
Not After : Feb 3 17:07:06 2025 GMT
Subject: CN=D324EA8E59341EBF1288FBA27116C15E38577C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:cb:44:07:20:43:46:8d:5e:11:b7:c3:7f:
53:02:7b:14:6d:83:c0:6d:26:74:2c:bd:38:59:5c:
f9:8e:1a:84:9e:e5:19:4a:94:74:69:30:11:d6:32:
d9:5d:df:65:20:11:55:fa:8d:d4:d4:27:17:34:76:
08:3d:df:e2:57:9c:8e:36:fd:34:77:fe:a7:9b:ac:
e9:40:31:e1:09:27:59:39:8c:d3:08:08:97:c5:f6:
19:2f:2f:76:a0:b7:29:c3:40:75:bc:d5:ce:00:fb:
f4:06:03:33:b6:02:eb:c7:bd:f7:54:ad:c7:50:cf:
8b:ec:22:1c:89:61:59:6e:f4:94:21:6b:ab:f6:f0:
99:b5:ab:8a:20:93:ef:0e:59:fe:9b:6a:56:fe:4d:
ea:bf:63:b4:d6:ad:75:31:38:13:20:65:ec:41:12:
f3:61:f4:0f:95:e8:6a:d4:0e:4e:bb:21:27:70:b6:
02:03:0f:d6:d6:43:ca:1b:f0:db:9d:4c:6a:8e:83:
aa:f2:e0:ff:68:f3:e2:fc:71:e9:b6:3f:8a:de:1a:
8a:bb:c9:e7:ae:0b:d3:7e:e6:1b:5e:56:92:7e:6e:
1a:68:f1:44:26:93:06:76:fb:b2:7b:e1:c2:fa:27:
6f:cc:36:46:fc:74:e1:02:7e:3d:f8:68:00:bb:bb:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:EA:8E:59:34:1E:BF:12:88:FB:A2:71:16:C1:5E:38:57:7C:1F
X509v3 Authority Key Identifier:
keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:d4:51:25:f9:ea:fc:02:36:11:b9:30:8d:6c:ab:30:5f:
09:14:e9:19:fe:7d:6f:02:e2:44:a6:e0:bf:19:0b:1f:5c:8b:
a3:e0:63:a7:b3:82:69:a1:58:6f:9b:6d:a3:23:03:51:81:ba:
b8:c9:90:26:47:fd:cc:a7:e1:aa:d5:72:e3:b8:90:03:f0:5b:
79:63:93:61:a5:be:e4:72:df:1f:7a:47:3f:55:d9:f1:35:36:
c9:89:52:09:90:43:0a:33:ec:7c:4d:ba:1b:49:b8:d9:ba:18:
c3:f6:c4:82:16:0a:09:08:6e:d7:89:fe:93:80:31:2a:5e:24:
96:18:2c:1a:bc:4a:34:69:8c:60:41:9a:4c:0e:41:54:aa:f9:
03:f3:23:fd:04:dc:90:92:2e:b1:2f:21:06:34:74:fb:86:d4:
de:52:4a:ca:19:ea:28:22:b5:c4:2f:47:d6:db:77:9e:6d:fb:
de:8e:17:ce:3a:54:c2:5c:05:57:7b:b5:d1:09:0d:9a:a4:72:
19:a8:fd:66:eb:f4:b3:13:5d:1d:ad:bd:37:bc:ab:52:af:f8:
c2:d8:2b:92:41:a9:5d:4c:63:ca:69:cd:16:fe:50:66:35:d4:
13:cb:7e:6c:5b:fd:04:1d:c2:5a:1e:4f:3d:e4:63:c5:00:12:
d7:60:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:12 2025 by rpki-client