Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft
File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json)
Hash identifier: 3a2O97Qb+PobLpQopxkAVtB/x/4coKf7heFkcCLqfPs=
Subject key identifier: D2:04:E3:93:3F:2A:51:A9:B2:BE:38:58:4E:69:5B:C3:4E:B3:41:56
Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76
Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076
Certificate serial: 1D7BA39E8A90E72A39587D6C6DB2E4F5D4512EE7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft
Manifest number: 34
Signing time: Wed 29 Jan 2025 19:10:51 +0000
Manifest this update: Wed 29 Jan 2025 19:05:51 +0000
Manifest next update: Sat 01 Feb 2025 23:48:51 +0000
Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=)
2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: q2IiNmL4KRBobCJbhUY/wbZ5Lt3r2wfEZ4AACzbCIgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7b:a3:9e:8a:90:e7:2a:39:58:7d:6c:6d:b2:e4:f5:d4:51:2e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076
Validity
Not Before: Jan 29 19:05:51 2025 GMT
Not After : Feb 1 23:48:51 2025 GMT
Subject: CN=D204E3933F2A51A9B2BE38584E695BC34EB34156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:62:a7:d3:c0:e2:83:0e:d5:63:19:b5:6d:
b4:98:4f:db:ff:3e:f4:fd:35:b4:0d:64:fe:70:f4:
53:46:08:c8:1d:79:f2:21:c3:45:f3:8b:2a:2c:59:
0e:b6:cc:aa:90:ee:c6:0b:49:26:30:19:d5:e7:1e:
db:c9:7d:70:4f:9b:ff:2e:ac:8f:8b:13:b9:30:e4:
0c:43:45:ff:8d:42:99:53:be:16:33:e3:4f:c3:2b:
d9:50:20:51:d5:20:92:96:72:a1:3e:e2:09:f2:80:
ff:b1:4d:e9:4f:03:17:08:91:54:96:94:ed:71:b5:
68:7d:25:02:90:f5:1f:23:33:d8:31:7b:47:19:8a:
55:ed:bd:47:8e:1d:88:a6:04:03:c6:76:02:0c:a8:
59:e0:a1:28:b7:93:ce:f1:b2:42:a8:87:7b:7b:84:
89:97:27:09:09:a8:47:b4:e6:3f:7d:da:0d:33:e0:
34:1c:cb:4c:7e:c6:8e:c4:eb:70:3c:38:33:ef:4f:
58:3b:3b:13:27:58:bf:4f:fb:35:eb:71:33:cb:fc:
5c:24:8d:b3:ec:09:d3:e2:18:7d:1d:59:69:8c:df:
de:7a:51:82:a5:32:21:85:18:1b:77:f9:78:dd:ba:
6c:a6:9e:66:82:74:aa:b4:89:7d:af:a0:01:76:95:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:E3:93:3F:2A:51:A9:B2:BE:38:58:4E:69:5B:C3:4E:B3:41:56
X509v3 Authority Key Identifier:
keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:d4:9f:0a:be:d6:13:9f:b0:a3:e6:eb:92:ba:cc:22:2a:
b0:f0:75:f0:34:e5:74:7a:82:35:07:b8:c6:fa:dd:45:02:93:
5d:9d:41:6e:af:06:b8:8e:8c:fc:84:44:1c:dc:ac:56:72:ce:
fe:fd:b8:cc:cc:bd:65:67:2d:9b:d4:df:f0:fe:62:a9:3e:f3:
11:29:4f:4c:23:bd:3e:69:e5:f3:06:36:b2:ec:6c:81:6a:32:
b6:40:de:11:c8:ff:5e:89:59:a3:ea:88:a1:c3:3b:32:00:8b:
57:46:4b:f7:08:5d:9b:ef:70:3e:d3:5b:4d:a2:4d:16:18:41:
ff:c4:3a:5e:d2:e5:4d:33:b7:55:50:a1:df:0c:84:cd:cf:d1:
af:42:00:fe:c6:97:46:d8:b8:c9:7e:38:61:f9:0e:4a:4f:25:
c0:5e:04:97:9e:66:e5:f8:bb:f9:88:d5:61:b1:bb:55:09:c0:
d5:18:b7:da:a1:89:ac:10:d6:07:a0:39:3c:5f:a1:7d:12:f9:
9a:b2:f3:3a:19:ab:1c:9a:9b:90:88:64:8e:34:79:92:12:ad:
66:b1:d2:be:48:34:e7:13:50:43:63:32:21:f2:1c:bf:78:82:
8a:ac:9b:f5:7a:ce:26:f5:20:ed:9e:91:d8:2c:28:07:46:66:
98:4a:fc:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHXujnoqQ5yo5WH1sbbLk9dRRLucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE
RDE2MTA3NjAeFw0yNTAxMjkxOTA1NTFaFw0yNTAyMDEyMzQ4NTFaMDMxMTAvBgNV
BAMTKEQyMDRFMzkzM0YyQTUxQTlCMkJFMzg1ODRFNjk1QkMzNEVCMzQxNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hGKn08Digw7VYxm1bbSYT9v/
PvT9NbQNZP5w9FNGCMgdefIhw0XziyosWQ62zKqQ7sYLSSYwGdXnHtvJfXBPm/8u
rI+LE7kw5AxDRf+NQplTvhYz40/DK9lQIFHVIJKWcqE+4gnygP+xTelPAxcIkVSW
lO1xtWh9JQKQ9R8jM9gxe0cZilXtvUeOHYimBAPGdgIMqFngoSi3k87xskKoh3t7
hImXJwkJqEe05j992g0z4DQcy0x+xo7E63A8ODPvT1g7OxMnWL9P+zXrcTPL/Fwk
jbPsCdPiGH0dWWmM3956UYKlMiGFGBt3+XjdumymnmaCdKq0iX2voAF2lbsDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0gTjkz8qUamyvjhYTmlbw06zQVYwHwYDVR0j
BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz
MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2
MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk
ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD
N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFGr1J8KvtYTn7Cj5uuSuswiKrDwdfA05XR6
gjUHuMb63UUCk12dQW6vBriOjPyERBzcrFZyzv79uMzMvWVnLZvU3/D+Yqk+8xEp
T0wjvT5p5fMGNrLsbIFqMrZA3hHI/16JWaPqiKHDOzIAi1dGS/cIXZvvcD7TW02i
TRYYQf/EOl7S5U0zt1VQod8MhM3P0a9CAP7Gl0bYuMl+OGH5DkpPJcBeBJeeZuX4
u/mI1WGxu1UJwNUYt9qhiawQ1gegOTxfoX0S+Zqy8zoZqxyam5CIZI40eZISrWax
0r5INOcTUENjMiHyHL94goqsm/V6zib1IO2ekdgsKAdGZphK/Cs=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:38 2025 by rpki-client