Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json)
Hash identifier: SGgolHQpdnz1K8YibrfAPUqUlCZ90y9BiIe2lQnbnM8=
Subject key identifier: F2:36:D3:20:74:EF:80:93:83:FB:69:2A:A8:DF:C6:FE:EB:39:6D:C2
Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Certificate serial: 05A143543FF4901F0049E825E9D036E28868C6F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
Manifest number: 01C2
Signing time: Thu 30 Jan 2025 10:11:01 +0000
Manifest this update: Thu 30 Jan 2025 10:06:01 +0000
Manifest next update: Sun 02 Feb 2025 20:33:01 +0000
Files and hashes: 1: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: oD9dbtJwzaJ/DPI24fAhri19NqYGrZlB6XcmYQOzM1Y=)
2: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: XT2GCe7zAsbdsT4MauXgyeCqDidOZi9vo7yHxfyCzWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a1:43:54:3f:f4:90:1f:00:49:e8:25:e9:d0:36:e2:88:68:c6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Validity
Not Before: Jan 30 10:06:01 2025 GMT
Not After : Feb 2 20:33:01 2025 GMT
Subject: CN=F236D32074EF809383FB692AA8DFC6FEEB396DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:9f:ac:4a:cf:c1:79:14:f0:f2:a5:99:07:
61:d7:80:26:d1:01:65:d4:db:85:9b:61:22:68:88:
e8:7d:6b:cf:39:28:2c:1a:46:d0:bf:1b:50:b8:0d:
22:4d:5c:bb:f7:1a:d2:ed:1b:2a:bf:2f:d0:1c:0e:
a0:e8:4b:9b:d4:32:25:ad:88:d7:53:79:32:ce:3d:
20:f8:da:cd:ed:f5:f2:c0:9f:38:55:83:67:81:26:
66:43:18:84:c2:4a:c1:ea:db:a5:b0:09:e0:4e:e8:
a5:de:91:6e:ec:f0:e5:9c:d8:8e:cd:fd:b9:42:8b:
d6:b1:c5:ff:24:d0:52:38:a1:c2:ac:ef:30:7a:90:
1e:52:32:21:44:29:57:06:18:7e:bc:c5:b5:88:88:
1b:d6:bc:b7:9d:d3:82:3b:87:95:bc:a0:45:d2:32:
24:2b:e7:56:6a:b6:8c:13:1c:41:8e:37:e7:3a:e7:
eb:8b:2c:f4:7f:45:0f:2d:60:5c:ab:18:04:64:e1:
2d:cf:bf:0c:78:6a:8e:f0:98:56:86:92:91:47:00:
5e:d4:36:a9:95:50:fc:5d:fa:69:0b:2d:52:f1:a4:
8f:c0:97:c0:41:c4:70:8b:c9:23:f4:15:96:09:77:
8e:ee:06:a2:60:e4:0d:22:6c:7c:52:72:d8:10:8c:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:36:D3:20:74:EF:80:93:83:FB:69:2A:A8:DF:C6:FE:EB:39:6D:C2
X509v3 Authority Key Identifier:
keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e5:7d:24:4f:04:cf:fe:55:5b:2b:4f:5a:e7:96:5d:40:63:
19:f6:44:ae:7c:0d:62:54:79:2e:64:30:7a:95:74:44:e7:61:
ae:09:5a:e3:e6:03:bd:7c:b5:6b:1f:e1:87:fe:37:e1:6e:01:
aa:69:c1:8e:f6:7d:3a:cc:bd:71:b4:9c:6a:d9:70:08:56:a3:
69:b8:98:2d:bd:e0:04:6c:8b:ff:75:ed:04:da:9a:54:14:27:
0c:2e:d4:c2:f5:83:d2:f8:f0:31:8c:87:04:94:37:71:12:e8:
29:8d:f9:e7:d7:1f:0f:4c:6f:ef:3e:d4:96:14:44:e0:4a:85:
53:48:36:a1:23:13:74:26:6e:4f:9d:f6:94:30:ff:6e:ec:e0:
17:8e:13:b5:08:b4:05:b5:62:6c:0d:30:c8:71:ca:61:d6:3a:
eb:3f:c3:d8:89:06:c9:83:d7:6b:f9:22:37:48:af:74:ce:4d:
c9:1c:8d:ba:e8:31:be:83:1c:58:44:bb:43:ac:83:3a:4e:55:
37:37:53:61:57:fd:ec:32:5a:3b:31:2c:e4:7f:90:40:d7:04:
21:85:01:53:96:1a:5c:51:ac:c4:a5:b5:9e:1d:9c:93:39:de:
1f:e2:23:bf:e0:f9:99:82:8e:f9:c5:e2:c0:f0:89:11:59:49:
32:73:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:34:31 2025 by rpki-client