Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft
File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json)
Hash identifier: hAhbqkYSIEVvd1fucEgsV8fEbxpsSCHvNc4uUxoejzs=
Subject key identifier: AC:B2:BA:BC:9B:4F:63:80:B2:6D:C7:38:59:0D:34:54:0A:12:D7:20
Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7
Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
Certificate serial: 240F2AD847DAA24526A3F24D00624DB294F48C14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft
Manifest number: 0212
Signing time: Wed 29 Jan 2025 15:00:01 +0000
Manifest this update: Wed 29 Jan 2025 14:55:01 +0000
Manifest next update: Sun 02 Feb 2025 00:22:01 +0000
Files and hashes: 1: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: qsAy9+8K3YocUUVABAHpwtAAQ9W+nqV1JTT37/pzGo4=)
2: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: D+zqgakWFBdHD5/mV/z3ocZSo/C1/ZxuuNBMHS2Lcrc=)
3: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: JDnyPmfXdrXEuXctfCbabIiTHNbbb2vTrgieuQ8Sq9g=)
4: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: kInQZ6+a0szsE+89xOKFo2QCmfmxhWma36K3DO0bgYU=)
5: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: 5nvoiGj4OjH2+HTzWQu4bmTNWJXJYHQTVDrsbt8AseA=)
6: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: 8rveHwJAjbzT7JrCP+j85CvzS9UmV2iXwgKY+Z+QZfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0f:2a:d8:47:da:a2:45:26:a3:f2:4d:00:62:4d:b2:94:f4:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
Validity
Not Before: Jan 29 14:55:01 2025 GMT
Not After : Feb 2 00:22:01 2025 GMT
Subject: CN=ACB2BABC9B4F6380B26DC738590D34540A12D720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:8c:7c:d6:4a:c6:d3:20:54:0a:08:76:60:
ea:a5:7e:37:62:12:cc:23:f4:d4:50:da:48:78:7b:
34:83:1e:f5:36:00:fd:32:e6:7a:fb:3d:c9:b6:04:
77:0a:bd:64:e1:45:ec:80:e8:53:b1:50:4d:f7:f6:
06:e9:cf:2d:49:12:fb:b3:19:bd:63:e5:31:6b:a9:
c8:d3:47:18:21:64:f5:1c:2f:a8:fa:6d:3f:ad:7a:
f9:8d:e7:21:da:4d:07:9b:43:99:99:68:67:2c:d4:
58:56:73:f6:98:2c:8b:66:2c:4d:f6:e1:92:48:e7:
9f:14:0c:be:0c:02:ce:0b:0b:c7:82:25:f4:1d:2e:
83:bf:2a:7e:d8:ac:19:8c:82:75:85:4e:96:0a:4e:
c0:22:7b:1e:c7:57:ae:0b:6a:9b:20:c5:cf:ba:5a:
8a:74:bc:1f:82:f2:92:5b:19:79:e3:47:fe:4e:5e:
10:ce:f8:05:41:0e:18:48:63:98:13:dc:84:57:d6:
56:02:47:c3:12:b1:e4:13:c5:ee:e3:99:a1:18:67:
6b:ee:83:a3:4a:b8:2a:84:5d:55:4f:90:0e:20:7f:
02:84:02:f3:6a:0b:20:13:dc:90:a2:be:f4:79:1e:
0f:51:8f:70:1d:f7:1b:96:a7:96:ab:c8:47:77:ea:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:BA:BC:9B:4F:63:80:B2:6D:C7:38:59:0D:34:54:0A:12:D7:20
X509v3 Authority Key Identifier:
keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:14:5f:e9:ae:20:5e:a0:56:7e:3d:3f:d4:b0:62:e6:12:97:
c6:55:3d:0c:34:b4:d3:2f:87:e4:e8:02:ac:5e:a9:1c:2d:05:
9a:da:86:3b:24:74:9c:af:50:0a:2b:ac:e2:7d:47:00:55:2d:
a4:80:a9:46:8f:c3:bb:2b:01:7b:c3:b3:02:65:c9:5c:2e:a1:
3e:9a:01:2f:4d:b8:48:2c:ae:67:80:4d:4c:e4:58:d4:f3:cf:
51:af:9c:93:43:6a:dd:a5:33:8d:cc:db:ec:34:97:8c:c2:03:
a0:fa:e6:21:ef:7b:67:60:18:a3:d1:57:4d:14:13:8c:29:a7:
1a:4a:c6:b9:91:94:e4:f1:70:09:12:e5:05:0c:0d:2e:1c:60:
4c:83:eb:42:38:28:9b:e3:e6:71:3c:5e:b7:40:72:c8:38:d6:
81:c7:43:ae:42:86:d0:86:04:9a:ea:1a:41:42:14:36:47:8e:
2a:58:fd:c8:c1:b1:a4:e4:34:4e:7d:d8:29:be:ff:7d:e4:21:
d7:20:d1:ae:89:9d:e1:ef:70:de:9d:26:1f:c9:0b:4e:4e:1f:
af:7e:88:c4:00:34:2e:1a:2e:a5:64:69:2f:f6:6f:8f:ad:c8:
de:35:b6:dd:55:b1:90:ac:9a:a2:b8:ad:35:1b:4d:f5:be:f9:
8b:7a:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:49:23 2025 by rpki-client