Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json)
Hash identifier: 3fpl+Vh/a/VS7NsDVoiddG0qCuJMjVMh7kOkWXorms0=
Subject key identifier: D9:F3:B4:49:A0:A8:78:B4:A3:62:CC:B5:AC:0B:CC:51:31:EC:A2:99
Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96
Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
Certificate serial: 0603724EAA48672E648A95726E54C46F4BE4CB00
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
Manifest number: B1
Signing time: Wed 29 Jan 2025 20:51:18 +0000
Manifest this update: Wed 29 Jan 2025 20:46:18 +0000
Manifest next update: Sun 02 Feb 2025 05:53:18 +0000
Files and hashes: 1: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: RpWiNQy8/wOeeIrDaor+sMkx5EaGWAlKmLI/at2NgT4=)
2: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: oNJQitmH0bOCcOLIdbqNnt0XzkKxHBkqhe2vw6CB7c8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:03:72:4e:aa:48:67:2e:64:8a:95:72:6e:54:c4:6f:4b:e4:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
Validity
Not Before: Jan 29 20:46:18 2025 GMT
Not After : Feb 2 05:53:18 2025 GMT
Subject: CN=D9F3B449A0A878B4A362CCB5AC0BCC5131ECA299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:d2:c7:e0:11:56:03:af:cb:e4:d6:42:85:
d2:de:29:5c:ce:a0:29:93:01:4a:82:bc:81:fe:af:
ae:aa:94:10:d3:f5:96:8f:21:3d:88:72:a5:20:78:
11:6f:44:84:9e:30:c8:6e:d2:23:25:d8:42:5c:05:
8c:b3:15:aa:bb:d6:82:96:55:d8:b3:4e:2d:86:f7:
ce:e2:45:44:d1:e3:ae:b2:dd:7a:cf:de:c1:12:02:
d4:b0:13:47:c2:a5:f7:f3:f7:e2:74:0a:bb:45:c7:
52:8b:ad:8e:ef:c6:84:90:8e:9d:06:b4:d6:e0:dc:
63:47:00:fd:67:ee:bb:42:26:03:82:ed:69:a8:94:
ee:3a:a2:38:c2:a1:18:cd:07:66:f9:e5:ae:78:24:
16:df:da:0a:11:21:b0:bb:2a:26:c8:59:2f:83:5b:
16:ff:56:e2:93:06:dc:fc:36:3c:5a:4e:50:76:c1:
3f:6a:c4:bf:cf:94:f8:57:96:74:b1:11:b6:bd:b9:
d7:71:55:a1:f4:01:de:43:ff:aa:eb:6a:93:96:b0:
91:e4:48:c5:17:c3:bb:3f:ee:33:23:2c:e8:90:f2:
91:3e:32:82:6e:43:2d:0d:f4:55:b1:dc:3e:ff:54:
06:8e:5a:f2:7f:3a:0f:67:8d:e1:ee:c3:4f:9c:96:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:B4:49:A0:A8:78:B4:A3:62:CC:B5:AC:0B:CC:51:31:EC:A2:99
X509v3 Authority Key Identifier:
keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9c:1d:b5:95:af:ee:9e:97:44:06:f8:a8:47:ba:89:45:67:
55:ad:82:35:3f:95:f9:f7:ad:04:1b:bc:2d:24:a6:6e:57:c6:
34:b0:4f:17:4c:8f:0d:e7:cb:fd:f1:e1:97:05:44:46:f6:cd:
ae:e4:89:44:98:63:24:69:04:3b:00:24:fb:90:7e:fd:68:54:
13:c0:e9:9b:10:f8:4e:f1:80:bd:f7:2a:cd:43:d9:33:01:de:
db:3e:fa:86:32:c4:91:b4:0f:ef:fc:78:ff:76:48:64:04:92:
66:d7:07:91:45:3b:22:06:72:d0:22:e0:b0:81:fa:bf:76:71:
88:41:85:97:fe:ee:a2:6c:ff:e8:58:f4:1e:90:cd:af:86:e1:
67:17:b6:4b:18:51:7d:26:69:59:90:9a:4c:87:fd:86:7f:10:
3d:d5:d5:93:a8:ac:8f:67:62:00:91:a9:ea:44:05:55:52:c8:
0b:f3:a5:39:51:44:b7:01:c9:08:c5:41:ad:97:cb:d5:84:ec:
15:b9:62:f4:ea:b9:88:b6:07:80:c8:8f:ee:6a:f5:e8:15:5b:
bb:c7:9b:85:76:33:59:6e:8f:48:2d:10:43:07:aa:21:eb:9c:
92:99:93:ff:ea:15:5e:76:55:39:de:9d:04:62:e2:e1:ca:75:
5d:38:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:26 2025 by rpki-client