Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft
File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json)
Hash identifier: P6VuoBtz9O686wUG+VyamS3m3jj0aB5PSWeqY+3z80Q=
Subject key identifier: 8F:BA:C3:A7:71:73:BB:DE:75:0C:3F:05:51:00:03:B3:D7:9D:85:0B
Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58
Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58
Certificate serial: 1DACE80B83B7597B5B40600BDB1AE4A795A4143D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft
Manifest number: 02F3
Signing time: Thu 30 Jan 2025 12:21:44 +0000
Manifest this update: Thu 30 Jan 2025 12:16:44 +0000
Manifest next update: Sun 02 Feb 2025 22:50:44 +0000
Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: OnyGnG61OekUS5W1LMFfJNpIagrVQ/TYuj58l1LA0ms=)
2: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: hpO38Bn8JgGhaewLIbhKGDqLBAfACcBbZmAt2d8R+WU=)
3: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: ysEZdcv27WCiPQQdkVZ6U4g9GXkNzWNtQiDE3fYu8Ps=)
4: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iLJOpbKVDPUcgPyjz0oDASfiDS5awyYCI5Qvynr0sXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ac:e8:0b:83:b7:59:7b:5b:40:60:0b:db:1a:e4:a7:95:a4:14:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58
Validity
Not Before: Jan 30 12:16:44 2025 GMT
Not After : Feb 2 22:50:44 2025 GMT
Subject: CN=8FBAC3A77173BBDE750C3F05510003B3D79D850B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:28:31:6d:b2:91:fa:c8:74:d6:9d:f2:07:
d7:df:8c:44:9e:33:d5:eb:35:de:a5:b0:d3:6f:29:
b1:e3:96:bd:69:e4:4b:7d:21:3e:e9:18:19:98:7f:
3e:4e:74:ed:65:ff:ba:87:02:ba:fe:6e:12:2d:e3:
8a:bf:29:5c:a8:e0:79:2f:80:c5:ee:19:ef:4c:15:
42:41:58:50:e2:13:7f:34:02:16:91:b0:5b:0a:f6:
f9:c0:bf:3a:74:50:61:39:7c:b6:d6:74:06:60:39:
96:2c:9b:76:27:34:4b:82:f3:6e:be:1f:bf:e8:5d:
44:6c:13:ea:d3:54:e7:18:ee:4b:d6:a9:5e:18:e4:
f8:a4:66:14:7c:12:2e:18:d7:c6:2c:58:41:f2:8b:
a8:e7:04:2d:5f:a0:0b:c7:f0:f3:ad:08:8e:55:40:
c1:53:84:46:2e:f7:15:24:2d:11:22:e3:49:bb:83:
c0:44:32:62:1d:f2:1b:7c:5f:d8:45:93:25:35:56:
a6:82:35:db:9e:2f:51:4c:a6:51:46:3a:d0:8b:e0:
1c:f0:c8:5a:66:0f:1f:04:3d:cf:1c:68:1f:72:29:
a6:36:85:f3:6f:37:2a:7b:b8:be:2c:e6:e3:af:57:
94:62:0d:28:09:dc:55:32:6b:72:35:19:76:f0:fb:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:C3:A7:71:73:BB:DE:75:0C:3F:05:51:00:03:B3:D7:9D:85:0B
X509v3 Authority Key Identifier:
keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b6:3a:79:49:71:c8:f6:36:18:ac:8a:9a:ff:9a:68:f6:10:
2b:25:ec:37:b3:cd:79:c0:42:a3:57:3e:b7:8a:e7:50:a3:07:
18:b8:20:78:5d:7d:e2:d5:74:07:85:56:d7:ae:77:43:a3:67:
02:00:02:c4:64:c4:50:40:76:52:02:db:ec:eb:24:62:39:cc:
80:80:1c:c7:6b:33:90:71:3b:64:d0:36:7a:e1:15:75:c3:c5:
3a:cd:ed:61:a5:14:f2:f7:24:6e:f1:21:ba:43:d7:07:85:e2:
50:5a:97:d0:4a:c7:11:d8:72:72:61:ef:a8:9a:7b:bf:20:ce:
f4:67:e1:57:a4:c4:af:47:42:ea:ea:b5:c4:d7:8b:01:d3:e2:
24:c5:3c:e1:f2:9c:1c:59:02:6e:47:66:14:d8:39:5c:e9:49:
38:29:cb:f9:db:53:cb:68:34:e5:46:36:f5:af:37:25:d7:23:
6e:b2:ca:57:60:d6:67:5d:7b:aa:52:44:81:9e:a4:8a:63:a4:
bf:75:86:82:ed:d0:b4:53:e9:2c:4d:c0:28:49:76:ee:a7:a3:
fc:f9:4e:b6:fa:f8:5a:6c:ab:2f:13:b0:38:0f:a8:47:ba:85:
fa:cd:e3:a2:4c:df:96:7b:6f:71:e7:0d:ec:4b:8c:2d:a2:1a:
7f:af:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:00 2025 by rpki-client