
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json)
Hash identifier: hH3nB328ItjdQ1rsHKx3wIwc3hiU99Kodi9Y0hEUR4M=
Subject key identifier: DE:E0:0A:B5:25:5C:9E:57:AF:57:1B:AE:29:0A:D3:82:04:FD:51:5A
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial: 5E96778902A88EA9156168DD4CB8D8E9F8A16765
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
Manifest number: 0317
Signing time: Wed 29 Jan 2025 22:10:50 +0000
Manifest this update: Wed 29 Jan 2025 22:05:50 +0000
Manifest next update: Sat 01 Feb 2025 22:37:50 +0000
Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 9/cl6A5sV+JF/ML+mNQ+5eQtQPiH4xG802RzlIwIQvg=)
2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: 4pWWs1M9OY38Q4cV/SvDBCdaNmF4etQjZDiDLQyWZlM=)
3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: mdcoyjfXTj5zKlqt2+BARpB8Ne7nSF/K9FFaPhv5anY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:96:77:89:02:a8:8e:a9:15:61:68:dd:4c:b8:d8:e9:f8:a1:67:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Validity
Not Before: Jan 29 22:05:50 2025 GMT
Not After : Feb 1 22:37:50 2025 GMT
Subject: CN=DEE00AB5255C9E57AF571BAE290AD38204FD515A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:93:ca:c8:ee:b6:5b:4c:74:6b:58:98:63:
4f:94:58:41:eb:4e:77:ce:04:d6:25:e8:2c:8d:d1:
24:24:67:2b:25:1a:2b:b6:e6:5f:f1:e1:f6:ff:3c:
45:ff:ef:a7:16:af:42:55:92:bc:c3:19:f3:00:fe:
34:ae:22:0f:48:88:52:11:68:39:a6:91:ce:d2:ed:
fe:f7:4d:b9:9a:47:9c:7c:5f:4f:fe:df:4c:7b:36:
f0:fc:52:a3:0c:54:cf:6f:53:a7:3f:ab:bc:94:ad:
d2:44:9a:7c:8b:6d:f3:e6:df:b6:d0:b5:61:05:6b:
4f:c2:97:ea:0d:aa:dc:59:f3:36:cb:9d:1b:a8:01:
a2:e2:e7:d6:fa:68:b0:bf:f5:ed:1c:86:8f:07:e2:
ff:94:3d:cf:67:5a:83:40:67:90:f2:5a:b5:d5:9e:
0f:8f:ff:ad:c5:37:63:57:e6:9f:d0:49:25:b4:09:
c3:d1:ca:b9:f4:2b:41:c5:d6:58:63:03:0b:08:a1:
90:e6:c0:36:c3:51:09:05:86:20:b3:1a:f7:21:90:
fc:ba:65:c0:a8:83:9b:4c:99:a8:51:a2:ef:be:9e:
7c:b0:97:09:c2:56:13:92:af:f7:ca:eb:e1:59:08:
12:07:81:36:bb:31:46:4b:4b:f9:24:ab:ea:69:17:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E0:0A:B5:25:5C:9E:57:AF:57:1B:AE:29:0A:D3:82:04:FD:51:5A
X509v3 Authority Key Identifier:
keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:0d:3c:4b:83:63:da:5a:3d:48:6a:5d:d7:88:08:7f:f9:
32:7f:15:27:12:cf:9a:d6:87:69:d7:ab:43:80:99:99:5b:eb:
e3:4d:53:34:12:f5:ec:a6:00:21:49:75:4d:79:7a:4a:1b:40:
f0:00:b7:de:e8:94:ef:bb:01:5f:a9:9c:f2:f3:79:21:60:d2:
ab:75:75:a4:5d:f6:b1:bc:14:aa:27:7b:f0:6e:8b:e2:97:39:
b7:ec:88:05:36:b0:7c:fb:cf:a7:46:99:c5:42:03:f9:67:aa:
a4:f9:80:11:a6:a0:b8:09:ca:4e:81:34:56:34:24:43:dc:41:
b3:57:a2:2e:d5:4b:6d:ef:81:f7:8f:60:f8:c3:74:18:5b:d7:
1c:74:cf:e5:db:22:07:84:f0:b3:88:33:af:00:fd:fe:a1:ed:
bf:da:5d:8f:00:2c:af:34:76:01:b0:75:16:93:46:5b:38:8e:
a5:bd:80:9a:fb:2e:aa:fc:f4:92:bb:d9:d6:29:61:c5:3e:f3:
3a:f9:1d:8e:d7:20:a4:0e:0d:03:6a:cd:cd:49:6b:71:99:ce:
8e:53:d1:12:77:38:50:9d:44:1a:9a:24:31:30:c9:8e:9d:de:
f7:24:78:11:cd:9f:fe:46:1d:40:b1:d4:20:79:d0:10:ca:af:
bb:42:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:59 2025 by rpki-client