Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json)
Hash identifier: r0H36Rdw38ksq/fYNZWD6jOIkaWAjUVVzxjpxSehgEY=
Subject key identifier: 32:95:8C:7F:32:19:AF:28:A0:BB:71:FC:3E:6B:82:8D:14:5A:EA:0A
Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20
Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620
Certificate serial: 4BCA2DA82615677B658EFF6260F17DC1510304AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
Manifest number: 04A3
Signing time: Wed 29 Jan 2025 16:12:14 +0000
Manifest this update: Wed 29 Jan 2025 16:07:14 +0000
Manifest next update: Sat 01 Feb 2025 23:45:14 +0000
Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: 1SLINW20DeCEk8EGTQE69/cdiOdDcBQp2LLOgZfFuAk=)
2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: e363Qmmr7aShBd/1Dt6hRaygfxaujoi+LkakMl8KvrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ca:2d:a8:26:15:67:7b:65:8e:ff:62:60:f1:7d:c1:51:03:04:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620
Validity
Not Before: Jan 29 16:07:14 2025 GMT
Not After : Feb 1 23:45:14 2025 GMT
Subject: CN=32958C7F3219AF28A0BB71FC3E6B828D145AEA0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:87:64:33:71:f2:1b:a4:0e:20:57:3f:11:
b1:81:af:5f:58:08:97:83:34:67:64:53:fb:c7:de:
92:08:be:23:dd:bc:2e:ff:71:2f:ab:1d:04:fe:cf:
48:05:1c:68:70:81:96:f4:6b:d0:7b:c7:1e:33:26:
85:6c:ca:c8:d0:2a:52:3b:2c:2a:87:62:b5:0e:c5:
72:47:2c:be:4f:ef:ce:a6:19:f4:29:23:ed:f0:88:
29:e6:34:a5:1e:80:0d:95:53:33:41:01:ce:ff:e7:
a5:db:fe:34:0b:cc:86:75:70:53:08:c3:8c:58:79:
42:d4:59:20:83:a4:3a:bc:96:cf:23:6f:d0:e9:b5:
65:4e:2d:64:c5:1a:5c:00:3f:7a:51:11:e3:00:12:
46:85:f6:e3:ba:35:4b:07:66:11:b9:d1:3c:26:c7:
34:56:2c:da:c7:e7:6b:67:1f:55:f4:3a:ea:e4:51:
5b:70:5a:ca:9f:f0:9b:5b:a9:e2:20:b5:13:6f:5b:
59:8a:a3:d7:42:57:63:7f:4f:3a:61:e0:d9:11:42:
bd:fb:03:e3:d0:49:1f:d0:5e:a2:87:db:57:d9:f6:
3c:ec:df:17:aa:56:1a:ed:c7:b3:5b:fd:1c:2c:78:
62:2c:96:89:fc:e6:4a:88:af:0a:b4:4d:40:60:d4:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:8C:7F:32:19:AF:28:A0:BB:71:FC:3E:6B:82:8D:14:5A:EA:0A
X509v3 Authority Key Identifier:
keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:77:20:f2:f3:fb:d6:74:7e:47:6e:1c:9c:ad:08:df:c3:c4:
b2:81:93:6d:78:be:93:58:f7:fe:70:72:78:d5:f1:d3:97:d9:
ab:69:08:e3:56:66:d8:a0:e4:9a:a2:12:a9:98:65:f3:a6:c7:
7b:b5:74:d1:30:d9:ae:16:df:84:9f:db:78:bb:38:5b:65:18:
29:41:59:ec:ea:37:53:9f:48:1c:f9:e7:4d:60:d2:02:17:fa:
91:b9:ba:de:ae:60:1a:b6:3e:83:6a:39:63:69:4c:d4:19:6f:
6d:d2:1a:d3:24:e0:e2:16:03:da:62:c4:e3:78:81:2d:5e:6b:
e7:1f:ed:92:76:44:4c:88:4e:8d:8e:4e:75:db:44:b6:79:84:
19:db:a9:0a:66:27:47:34:a9:6d:77:cf:27:64:0b:93:97:7c:
99:f3:98:0e:1f:87:3d:ac:32:45:64:4d:cf:f3:20:28:b9:ac:
1f:c5:2e:09:6f:7a:72:dd:6e:e9:40:b7:8d:a1:22:fc:b8:36:
4a:21:87:51:4e:43:48:f0:89:aa:45:f5:f5:09:a2:a7:28:71:
92:10:91:62:c4:06:f4:ad:3a:e0:ee:a8:a6:9e:f4:1f:aa:19:
f4:1b:10:bc:e1:b7:c1:c3:49:4b:fe:e4:3e:91:fe:1d:d5:01:
a7:6a:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:42 2025 by rpki-client