Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft
File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json)
Hash identifier: nMiqNcGel8UnDPMWzw1/1TxBy+C1Pjx47/kQ26BzIHc=
Subject key identifier: 07:47:41:D4:66:56:23:F8:9C:FF:88:2D:86:2D:DE:3E:70:97:32:C8
Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36
Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536
Certificate serial: 36F568A9A9DB7B7F35D13F136E2B4329AE4A5242
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft
Manifest number: 67
Signing time: Wed 29 Jan 2025 23:22:02 +0000
Manifest this update: Wed 29 Jan 2025 23:17:02 +0000
Manifest next update: Sun 02 Feb 2025 10:00:02 +0000
Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: GmOFMzAjvKi/R6Ihcjui8Ly/R+qTvmjieLr7Vq9tAb8=)
2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: iGo4oIHJ3dWgVm6kkXgp8zp9ogYX4M6Ne6G5VUEJA5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f5:68:a9:a9:db:7b:7f:35:d1:3f:13:6e:2b:43:29:ae:4a:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536
Validity
Not Before: Jan 29 23:17:02 2025 GMT
Not After : Feb 2 10:00:02 2025 GMT
Subject: CN=074741D4665623F89CFF882D862DDE3E709732C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:fe:56:83:d5:0b:87:45:e7:9f:e9:39:f0:
e1:85:3a:ad:62:35:48:26:0f:f9:2e:41:14:85:88:
d2:df:5a:54:33:f0:91:a5:66:77:8d:0d:ea:96:50:
f1:4a:1c:5b:f8:39:ee:8b:af:13:78:b0:bc:e2:b5:
39:fe:de:ff:bb:fc:51:4e:70:d8:50:f3:39:a7:f2:
75:cf:5a:2e:6a:08:0a:e9:1e:13:ba:29:39:a9:b5:
01:1d:c0:1f:93:89:f9:86:b3:f7:b6:1d:c2:c1:04:
ed:7d:b1:78:54:77:d3:81:43:29:90:d9:b2:79:45:
ca:51:22:ae:50:55:0d:49:a9:9c:e4:b9:fd:58:4f:
b6:27:db:47:7a:db:5d:36:67:24:14:12:9c:47:3b:
29:1c:b6:f4:6f:2f:ea:85:57:53:e5:e5:af:50:8c:
cc:33:ab:72:6c:ca:88:14:b6:22:cd:17:5a:79:49:
7e:39:92:23:f1:40:5b:fb:76:0c:1c:81:48:04:a9:
09:3b:7c:b3:6a:ba:08:04:5a:26:ae:86:86:35:b3:
85:4b:32:d4:31:d4:71:c0:15:65:c1:71:74:d0:b1:
9a:ba:b4:28:92:2f:d1:00:aa:4d:3b:57:d9:e2:ee:
80:a1:5b:c0:56:75:c3:d9:a7:e1:f1:e9:06:68:16:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:41:D4:66:56:23:F8:9C:FF:88:2D:86:2D:DE:3E:70:97:32:C8
X509v3 Authority Key Identifier:
keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:90:05:14:9f:b0:bf:d1:f0:a0:73:df:ba:a8:3c:29:eb:
c5:3a:77:05:d8:d5:00:7f:b1:ec:80:2c:78:ac:e8:ed:6b:e9:
a4:16:f5:47:18:9c:58:35:10:75:83:f0:e6:c3:76:32:82:75:
e6:01:e3:3b:2e:fb:79:e8:c9:4f:d5:3f:d0:3b:93:f0:73:d4:
88:d1:20:7b:f1:b2:9e:84:56:a5:b4:b7:6d:60:fe:ce:d6:d4:
da:1a:a4:03:3e:36:73:a3:ef:e8:bb:d0:d5:a7:56:f7:67:f0:
14:50:e5:bf:b6:01:09:3d:79:45:64:d4:24:4d:55:64:ba:c3:
aa:a0:53:00:5c:7a:56:d2:93:bf:82:15:74:ad:18:17:06:d0:
5f:b7:45:92:11:1e:48:69:b7:f0:ba:b0:56:b4:e8:21:48:1f:
fb:72:24:0d:c7:49:ad:c6:60:c9:ad:1e:db:2d:d4:1e:d0:16:
4d:9b:2a:82:54:b8:83:0c:cd:8b:d1:b3:1d:c1:56:6d:cd:29:
81:ef:8e:f8:00:cf:fa:d4:79:18:98:a9:32:06:59:c7:bd:20:
9a:61:93:6e:88:e6:16:1e:86:9a:52:4e:9e:5d:3a:0e:91:8a:
81:94:9f:d4:21:a3:81:9e:21:44:b3:16:96:29:27:91:b5:f3:
7a:15:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:10 2025 by rpki-client