Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json)
Hash identifier: KCjBJmK2+srMl9+mGoeWayvKLvpdMmINw2ayNDVPCBc=
Subject key identifier: 91:98:A0:97:EB:A7:37:72:57:E5:63:EF:35:EC:11:2F:6A:C4:8C:1F
Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5
Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5
Certificate serial: 75F8DAC5AD12959324966A1E1DD73816B22A7FF1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 09:41:21 +0000
Manifest this update: Fri 31 Jan 2025 09:36:21 +0000
Manifest next update: Mon 03 Feb 2025 16:21:21 +0000
Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: xIfdAclBRH83FYrfE/a4HcVdCMi9OKrVB0FwjkZPXDk=)
2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: zLA6/bRI9VboLYe5I2cJ3lQAESTlC0UxgoZrgcRdKsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f8:da:c5:ad:12:95:93:24:96:6a:1e:1d:d7:38:16:b2:2a:7f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5
Validity
Not Before: Jan 31 09:36:21 2025 GMT
Not After : Feb 3 16:21:21 2025 GMT
Subject: CN=9198A097EBA7377257E563EF35EC112F6AC48C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:25:54:2c:28:5a:10:bb:03:9f:91:5f:bb:
cb:4e:12:8d:be:ab:39:0b:d3:f7:b4:1c:88:88:9b:
89:af:aa:d0:30:f6:cf:ad:59:d6:cb:af:d6:c1:8d:
4b:b3:34:8e:45:99:67:6e:c6:15:c1:21:96:7b:28:
9b:8c:e4:93:e7:0f:b6:33:aa:27:30:cf:ee:03:d0:
aa:ab:b3:1d:c9:fd:84:52:ae:d6:c0:76:3f:bd:f4:
f2:58:1c:ca:bc:fc:1a:98:10:9f:fc:aa:37:11:3c:
57:21:b7:be:7f:18:25:93:c1:24:f4:24:a2:8e:ad:
80:cc:d8:71:83:bd:1d:89:61:a2:ba:81:d9:03:f1:
87:89:77:82:6e:5a:48:be:55:15:31:b8:c1:55:26:
23:95:7f:52:fe:19:34:d2:e3:6b:18:75:b1:40:41:
ea:4d:21:e7:e6:2c:77:83:34:3d:01:83:6c:18:f7:
d8:39:05:28:1a:16:fc:d7:d1:ab:39:47:d4:ab:58:
4e:f5:5c:8c:34:02:48:5b:c1:a3:5a:84:46:95:2e:
3c:dd:bf:40:cd:32:65:ab:f4:62:2b:35:4e:8a:1e:
c2:b9:c4:18:3e:ec:38:90:56:61:14:a8:cb:10:cb:
63:34:87:bb:06:88:7f:ba:c2:dd:69:be:ca:f5:53:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:A0:97:EB:A7:37:72:57:E5:63:EF:35:EC:11:2F:6A:C4:8C:1F
X509v3 Authority Key Identifier:
keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:1d:26:59:b9:78:61:38:4f:80:d9:31:a0:94:83:1b:07:
db:c7:f0:b2:03:dd:77:78:da:49:1c:84:20:cf:e0:d8:90:74:
ad:a1:0d:3a:71:b6:6d:58:d6:79:6b:ad:52:38:e1:37:6c:73:
e0:9e:ff:0c:1e:a3:c7:e3:ec:1b:63:9d:9d:0d:25:98:7d:d5:
d2:60:69:8f:d8:e0:5c:c3:13:d6:d2:4f:6e:ba:3d:8d:f9:3e:
cb:67:13:c9:6c:9d:ed:94:1f:8a:b8:78:23:f4:41:db:7c:ef:
c4:94:1e:b1:4f:a0:8b:ba:77:19:29:54:9c:f7:d0:cf:05:01:
59:c9:04:47:37:9b:4d:f2:21:d6:ec:3c:77:c5:0c:74:62:e4:
92:ac:ac:c7:0b:fc:0b:7d:c0:a1:8b:b2:e9:8a:db:da:72:45:
e5:3c:db:94:c3:56:48:33:62:a8:7b:0d:83:9c:8c:23:24:b8:
0f:d7:0a:ee:cd:77:38:01:a8:7b:41:7b:38:42:4f:10:9e:f2:
a5:c6:d9:a6:8f:19:82:45:31:0a:0b:3f:e5:dc:3e:e0:71:2e:
3b:53:46:ee:7e:7f:c4:de:fe:37:3b:77:b4:5a:56:49:b9:53:
55:ae:f7:55:5a:65:3a:33:60:47:76:5f:f8:01:88:18:69:35:
76:cb:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:09 2025 by rpki-client