Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json)
Hash identifier: GXVXNd7hAbFvY01d41JAw07OUkFll3w98EV9/f8ZDaI=
Subject key identifier: 5B:3C:1D:D9:5B:5C:30:4C:58:5C:28:07:30:7E:99:78:B2:C0:C5:8E
Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Certificate serial: 3FA3E42849DB21A010279E561B589DAC4EB18096
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
Manifest number: 8A
Signing time: Thu 30 Jan 2025 08:12:07 +0000
Manifest this update: Thu 30 Jan 2025 08:07:07 +0000
Manifest next update: Sun 02 Feb 2025 09:43:07 +0000
Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: +KpY7gdGhjGsBNmsMzsiKhbE//IKf7fuzrvdDXWYquU=)
2: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: m+1J5Lu6V+Ai3dnLwSQ+mw0MCMIUPRIXBqf06qLuHP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a3:e4:28:49:db:21:a0:10:27:9e:56:1b:58:9d:ac:4e:b1:80:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Validity
Not Before: Jan 30 08:07:07 2025 GMT
Not After : Feb 2 09:43:07 2025 GMT
Subject: CN=5B3C1DD95B5C304C585C2807307E9978B2C0C58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:4f:b8:c4:4f:f0:75:1e:ce:5e:6f:cd:73:
3b:1c:f9:15:7a:c4:cd:a6:16:bd:98:6b:67:b6:cb:
1f:93:ca:9d:20:b1:73:2e:87:01:80:e6:48:bb:f5:
d5:99:b4:dc:62:32:01:e2:39:65:1d:f3:40:2c:e8:
8d:bd:f3:14:56:9e:55:db:97:91:d4:44:95:40:56:
30:de:45:30:74:5a:ab:ea:44:be:ed:2a:4b:c9:91:
91:33:f9:23:71:67:63:24:3b:85:ad:6a:ba:49:8a:
9a:b9:31:c0:fa:29:25:69:63:fd:c5:53:f1:a9:ab:
14:32:5f:55:a3:3c:40:ae:34:ce:7f:a7:00:3b:20:
75:d0:1c:9b:4f:b9:32:dc:a6:56:fd:e7:13:ee:f3:
2e:e7:68:fc:5a:79:da:c5:5a:0c:42:61:4c:f6:c3:
83:69:d8:a9:d4:2c:ef:7c:32:55:fe:1f:3a:ae:4a:
40:de:ef:27:19:24:4c:1d:04:25:db:43:62:bd:27:
2c:22:3d:6d:a1:82:91:cb:e2:e0:bf:a5:4f:3e:87:
27:d6:85:28:36:be:26:5d:19:22:2e:5c:58:76:42:
e0:d5:5f:d7:92:14:b1:2e:92:d7:7d:95:a0:53:f3:
55:8d:0d:b3:1d:d8:5a:6a:10:56:ee:74:67:17:02:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3C:1D:D9:5B:5C:30:4C:58:5C:28:07:30:7E:99:78:B2:C0:C5:8E
X509v3 Authority Key Identifier:
keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:a2:51:f9:dc:bd:d1:2b:19:69:e3:2a:96:5c:af:90:24:
f6:68:90:55:c4:03:01:97:fb:b6:4b:19:cf:57:d8:3a:b7:82:
df:c9:9f:d1:4f:27:f1:da:9c:2d:c0:de:1e:06:95:d7:bb:20:
f9:04:5a:34:f7:51:b5:3a:c0:bc:ca:66:dd:08:8a:f4:7e:ae:
7d:c6:d0:40:83:7c:cc:7b:ed:68:ae:dc:3d:5b:75:9b:27:66:
08:6d:7c:17:f5:b0:1d:69:fe:bc:0f:ff:91:36:18:7f:e7:8c:
69:63:cb:bc:0a:e1:d9:0d:aa:d8:cd:74:b3:14:03:19:04:df:
8c:67:cf:2d:ea:21:c2:6e:6f:b2:56:f2:b9:5a:55:2a:29:ab:
91:28:2e:cc:31:21:0b:38:36:fe:66:ac:36:11:0f:93:5e:79:
a0:0c:4a:8e:7a:24:15:dc:fe:8f:52:d5:a5:cf:51:52:52:a1:
0e:ad:0d:f3:e3:9d:04:ed:39:27:7b:98:45:64:ac:fe:23:05:
bc:5e:27:1e:06:18:53:a4:cb:02:f5:d6:fb:e4:52:bc:ac:bb:
f3:b2:0c:77:3f:91:61:2b:0f:dc:5f:a8:c1:43:48:5e:c3:2a:
37:ab:34:0d:90:53:01:5c:1d:be:91:0d:69:28:fa:bf:dd:d4:
06:0a:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:56 2025 by rpki-client