
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json)
Hash identifier: kobz6EbQl98V0zIpRjwz4QYerj9Ckq/OiqfR5iWZ5ls=
Subject key identifier: 86:A8:8D:01:29:4F:98:E6:34:BF:83:31:DA:CC:95:74:5B:8B:FA:22
Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794
Certificate serial: 54CCA9ED5E182CF66189104CE73226A5451F9F62
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
Manifest number: 01CB
Signing time: Wed 29 Jan 2025 23:11:12 +0000
Manifest this update: Wed 29 Jan 2025 23:06:12 +0000
Manifest next update: Sun 02 Feb 2025 01:15:12 +0000
Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: lnVLahm22t2+22cqpvvopfHJ4OhZnG1DZvAP7XYnWKU=)
2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:cc:a9:ed:5e:18:2c:f6:61:89:10:4c:e7:32:26:a5:45:1f:9f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794
Validity
Not Before: Jan 29 23:06:12 2025 GMT
Not After : Feb 2 01:15:12 2025 GMT
Subject: CN=86A88D01294F98E634BF8331DACC95745B8BFA22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:27:c5:20:1f:0a:d9:48:ea:58:80:40:93:
d1:dd:46:c9:4e:2e:e8:7f:57:b4:07:b9:bb:fb:8b:
7c:8e:05:a0:34:10:b2:de:90:10:0f:4f:49:3b:a5:
55:e1:9c:7a:7d:23:5c:93:5f:5d:cb:ca:df:28:35:
bf:fe:88:c2:d3:39:a5:64:d2:23:2f:4d:7b:ef:7c:
c7:ff:f7:7d:17:fd:d0:e0:49:50:d8:88:bc:8c:f3:
a6:ca:35:70:f0:85:f8:11:0e:f0:73:9f:30:e8:40:
fa:6f:97:48:28:b8:c2:49:3e:9f:bc:54:ab:c0:61:
8b:28:65:2e:a1:44:b8:c7:f6:62:b4:cb:bf:1e:4a:
25:5a:0c:cb:f5:20:78:af:1c:97:48:14:c0:4e:f3:
9c:ab:36:18:7f:72:06:ae:32:a1:12:d1:f1:c5:1c:
3d:7e:49:0f:ea:bb:3c:92:fd:b5:80:57:da:74:3a:
c9:48:4a:1f:c0:09:0c:87:4d:21:6f:68:a4:52:d7:
a9:7e:5d:bd:a9:dd:2e:f9:8b:ad:a5:1a:bf:01:0f:
79:4a:04:26:08:1b:5f:3e:c1:d0:52:82:02:11:22:
cf:b2:c6:ad:e2:b6:3e:92:0e:f5:b2:82:f3:e1:01:
bd:81:92:99:53:3f:22:61:f3:80:e0:2b:0a:e3:21:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:8D:01:29:4F:98:E6:34:BF:83:31:DA:CC:95:74:5B:8B:FA:22
X509v3 Authority Key Identifier:
keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:62:dd:ea:68:4f:33:e5:c8:ff:a6:fc:2f:79:d2:81:78:40:
7a:63:27:a1:c2:1f:ba:5c:28:2c:88:25:48:4c:db:f9:5b:39:
4f:e5:1b:10:66:ea:12:ef:fa:f7:74:23:a2:89:91:87:08:57:
3f:80:a1:22:78:e2:dc:ef:2a:42:ea:0e:7b:ef:b0:2e:6f:78:
df:c6:e8:d8:55:c3:5c:94:b7:fb:54:96:43:6f:fc:a9:15:6a:
65:4d:bd:b1:66:7d:b3:d5:fb:a3:f4:59:ce:d5:62:03:53:8f:
84:93:80:d8:95:c3:68:1d:b7:12:d5:ee:6e:89:de:65:a6:d6:
a2:76:19:69:ff:fa:84:d5:e2:af:a5:5f:22:9b:b1:0c:d0:f2:
26:04:17:f8:3b:bf:b9:50:bf:3b:c4:47:4c:b3:be:bf:cd:9d:
dd:99:00:53:78:f8:25:9d:18:b0:03:0d:5c:6b:9c:c4:a9:28:
4a:b2:96:f0:4e:b3:67:ee:7e:15:3f:23:62:67:d5:86:77:ed:
38:87:8e:9c:d0:53:70:4d:79:5d:bc:0b:41:f3:d0:55:38:5c:
37:84:0e:b4:6a:fa:77:81:d4:c5:db:5a:4c:8a:67:83:5d:8c:
31:ba:b9:7e:c0:08:89:a6:4c:d2:94:6f:e4:bb:d6:4b:cf:75:
30:0c:f3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:44 2025 by rpki-client