Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json)
Hash identifier: 1BYBcU20gsslYdAoukUbGCpzG33cVeRkSfCZs6oelC8=
Subject key identifier: 0B:EC:B5:9B:A6:19:18:89:EA:BE:B2:A7:3E:56:F4:2D:DC:7B:03:D1
Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2
Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2
Certificate serial: 22BD06DE4BB90921C68033A9DF9369A84D05224A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
Manifest number: 1F
Signing time: Thu 30 Jan 2025 19:21:21 +0000
Manifest this update: Thu 30 Jan 2025 19:16:21 +0000
Manifest next update: Sun 02 Feb 2025 19:51:21 +0000
Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: OUo94p/1L8eEsTpC4kjWaPDE8DAFLxalsjCxy/5jn9c=)
2: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: 9Upkmrv0HtD4/kWdaQpxHId4prH29CTg3hAZNqKF8s0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:bd:06:de:4b:b9:09:21:c6:80:33:a9:df:93:69:a8:4d:05:22:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2
Validity
Not Before: Jan 30 19:16:21 2025 GMT
Not After : Feb 2 19:51:21 2025 GMT
Subject: CN=0BECB59BA6191889EABEB2A73E56F42DDC7B03D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:5b:4f:8b:21:e9:e8:25:b9:a6:ca:d4:32:
b5:e0:5f:89:6a:f2:7e:34:5a:5e:c4:6b:ae:d4:80:
74:7c:d4:fc:46:68:ac:98:a4:5c:39:55:df:90:3e:
36:07:d8:b1:c7:82:b6:c9:18:6d:7a:30:2d:70:4e:
8a:07:62:03:9c:3b:c6:88:0f:46:6d:b9:56:35:6d:
29:96:df:6e:00:a4:b4:09:80:67:07:54:ea:6c:33:
8a:c9:b2:67:47:98:c7:7c:0e:84:25:f6:7d:59:06:
9f:8c:49:58:eb:e0:b1:7d:2f:9e:61:1c:cc:11:f6:
80:77:97:47:69:a5:27:9e:9c:32:7a:67:d1:c7:96:
e1:c0:6e:6d:03:4e:42:f0:6e:85:73:7d:db:ac:10:
83:cc:24:07:23:1f:51:6f:ff:ae:46:9b:32:e5:7c:
db:9d:4a:7b:90:3e:47:22:a9:94:b9:0f:88:21:51:
bd:54:a0:20:12:40:43:8d:f8:a8:3a:58:a3:47:59:
19:72:c3:fd:6e:53:ba:99:ad:8a:ce:ca:1e:c8:9e:
de:34:b3:5d:5a:a9:57:e3:50:64:b0:7b:67:78:e0:
fb:ec:9b:39:1f:63:5b:cc:de:38:de:ec:79:a7:28:
cf:5b:c3:a1:f3:14:5c:4e:87:6c:e3:08:5c:4e:c6:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:B5:9B:A6:19:18:89:EA:BE:B2:A7:3E:56:F4:2D:DC:7B:03:D1
X509v3 Authority Key Identifier:
keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:da:52:44:e9:04:9c:82:f8:91:04:93:98:79:66:19:4a:11:
fb:1f:2e:1a:d9:8f:ab:06:3a:d2:c7:42:38:0f:bc:5e:92:8d:
28:19:aa:a1:c8:75:01:9f:91:f6:29:26:3e:f1:29:90:e6:3a:
e0:5c:bd:b2:55:7f:1c:ba:cb:dc:13:9a:1c:22:21:b1:a2:6f:
a0:21:11:9c:38:3d:3c:ef:06:7c:98:f8:d8:37:d5:2e:ed:ee:
90:0c:fd:f0:fa:e0:87:30:ed:06:0d:d6:53:71:5a:12:29:58:
06:89:1d:37:8c:ac:01:1d:8c:41:7a:da:6d:89:3a:8e:74:44:
dd:2f:3a:25:8a:53:0d:b1:97:49:7f:61:33:ff:8d:e7:d5:66:
80:25:f8:ff:10:3a:f1:55:69:dd:11:63:9c:dc:24:05:f3:2d:
c1:0a:5e:4d:55:0b:96:bf:6e:1a:e0:28:93:ba:1e:1f:8f:89:
52:2e:c8:9b:fb:99:68:43:1b:b0:af:9b:1e:32:01:d7:d0:f4:
8b:d2:51:b7:94:d1:d1:41:7f:04:9f:aa:5b:85:55:d4:94:5a:
e4:b9:3c:ab:6b:a8:fe:b8:e8:e3:6d:41:da:7e:db:ec:f2:6f:
02:e4:7d:49:39:6d:0f:43:df:0d:48:64:d7:f6:2c:51:d2:6c:
e5:3c:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:34:37 2025 by rpki-client