Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json)
Hash identifier: TUrnZN3ERemH+gHNJLQwMBNarvb0h3Z+14lEzhRWhSQ=
Subject key identifier: 1A:6B:FE:55:B3:CD:99:DD:6F:9A:EF:0F:71:38:49:95:78:E0:47:60
Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86
Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
Certificate serial: 245EC0F304B7F741FE0C2B2A4154DA41D5F08DDF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
Manifest number: 019A
Signing time: Thu 30 Jan 2025 11:02:08 +0000
Manifest this update: Thu 30 Jan 2025 10:57:08 +0000
Manifest next update: Sun 02 Feb 2025 12:37:08 +0000
Files and hashes: 1: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: gz7KY/V7px/9FfpoiFWqqG0sNga5DFU6wbEQxAdd4e4=)
2: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: q2Yb4yMAQtfwd6naBrfG63XhT4cy5Z0/X6q/WuK9T+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5e:c0:f3:04:b7:f7:41:fe:0c:2b:2a:41:54:da:41:d5:f0:8d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
Validity
Not Before: Jan 30 10:57:08 2025 GMT
Not After : Feb 2 12:37:08 2025 GMT
Subject: CN=1A6BFE55B3CD99DD6F9AEF0F7138499578E04760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:ed:14:36:e5:ce:fc:96:16:64:35:c0:94:
5a:d0:c5:70:67:71:8e:9a:0d:1e:cf:7d:3b:3a:8b:
95:68:47:b0:b3:f5:6c:f6:f5:36:a9:95:fe:1b:c4:
98:20:2d:bc:5a:7e:24:52:6a:4c:95:65:a2:64:be:
5e:85:9f:66:8b:9b:5e:6e:b0:08:6f:13:84:d6:81:
ab:74:80:71:22:ac:2c:9f:41:4d:4c:b4:99:fd:ff:
a6:52:a8:67:57:f6:19:1c:d4:2c:30:d1:6e:0e:e3:
60:5b:e9:b1:5e:fd:fb:77:c6:2b:06:49:d9:55:40:
f1:1b:43:3f:39:b8:3b:4c:1c:9c:61:ed:88:7c:1e:
89:3f:6d:f7:cd:a9:ce:fc:c3:7d:11:e7:69:54:a7:
5c:63:3e:87:5d:21:a6:4e:51:45:28:f7:0a:52:2c:
8a:97:a1:6f:da:4f:c7:ca:63:c7:af:b4:f0:3a:03:
9b:44:9b:36:0f:8c:98:13:ca:98:49:29:0f:e5:4a:
b1:99:41:a4:df:59:fb:64:3c:32:a8:9c:e0:23:3b:
1a:9a:f9:6a:b2:1b:96:42:3f:09:cc:0c:82:d2:e0:
96:b0:22:76:e4:74:e6:5d:02:70:df:a0:50:2c:cd:
eb:24:d3:39:77:7f:d7:64:a1:fc:a4:e6:cd:cb:f6:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6B:FE:55:B3:CD:99:DD:6F:9A:EF:0F:71:38:49:95:78:E0:47:60
X509v3 Authority Key Identifier:
keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:34:b1:20:62:de:7a:86:da:de:5b:2b:b1:0b:aa:a6:bc:7f:
b2:65:4e:06:60:0e:e4:48:29:51:d4:5b:9e:71:0d:06:3e:dd:
cb:96:a5:90:f7:b5:83:18:7b:f4:d3:10:02:e1:00:87:f1:6d:
c5:13:c4:a9:77:c9:61:c3:0b:f5:7a:a2:93:09:45:72:46:57:
68:54:0e:76:8d:41:33:10:d0:35:ee:a0:27:b5:dc:a6:16:44:
2c:85:2a:79:47:99:3e:af:3b:1e:4f:9f:79:38:dc:34:c2:ae:
d5:8a:26:b2:08:bb:34:94:4c:51:46:5c:df:31:1d:10:8e:97:
92:d2:e5:20:a7:a1:4a:d9:50:aa:59:83:f1:30:31:84:38:0b:
91:37:b5:79:51:a5:69:33:ea:d1:6f:9c:19:08:c1:17:8f:7d:
04:4d:95:5d:40:da:fb:68:03:3e:ba:9d:f6:6b:85:d6:6d:1d:
e6:b7:f0:e2:a3:4b:ed:1e:f1:52:cd:ec:b3:69:24:97:a7:c0:
14:56:cd:5d:0c:9c:bf:b7:fd:17:10:71:d1:13:8b:8e:c6:5b:
44:8c:2b:7a:fa:84:06:36:96:ea:1e:04:ef:1b:39:bd:67:80:
5c:79:91:db:09:1a:a3:cc:87:73:18:1f:43:60:6b:82:c7:17:
b5:44:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:44 2025 by rpki-client