Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json)
Hash identifier: Cly2Ae6+vPlenc8j5IRqOt/Zek2wU59UAFs0KYc6MgY=
Subject key identifier: 88:36:8F:EB:FF:43:32:B8:C8:B6:BC:A7:D4:39:DD:9F:74:D7:B0:4C
Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7
Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
Certificate serial: 5C4ED877B0A743AF0377A0884673C669619530B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
Manifest number: 5D
Signing time: Thu 30 Jan 2025 14:20:05 +0000
Manifest this update: Thu 30 Jan 2025 14:15:05 +0000
Manifest next update: Sun 02 Feb 2025 20:58:05 +0000
Files and hashes: 1: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: rCl3Wuft1WIRGE3tw3SxP242bdORGtg1GIBI8B19PUM=)
2: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=)
3: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: QHJuip7O3VcDdL7ndKGxilEe3owxbbSbcIiD01Visj4=)
4: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=)
5: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: Tn7TDSW+adNbJWWGJZH4AHcWPfC1aqL5ZrmZovxxV0I=)
6: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: j5OyqbB9ywM7AKahm6qFSkqLikmGdWaV/eKVwp3BNtY=)
7: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: odz+XvlU6wUZHmxANYcPfjvU3FxzONeuGBAElE5SFM8=)
8: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910=)
9: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: xk8tVxqn5heNhUDrnWm94cOrNBZG78jygDDr9I5XxcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4e:d8:77:b0:a7:43:af:03:77:a0:88:46:73:c6:69:61:95:30:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
Validity
Not Before: Jan 30 14:15:05 2025 GMT
Not After : Feb 2 20:58:05 2025 GMT
Subject: CN=88368FEBFF4332B8C8B6BCA7D439DD9F74D7B04C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:77:7f:92:2a:40:be:1a:ee:23:d4:a6:98:
da:35:d6:72:f7:b9:0d:54:65:9f:bc:b1:7f:16:1c:
5d:ea:e1:a5:40:fa:72:cf:1e:4e:23:f3:0d:ff:80:
2e:b4:95:e7:2f:0d:97:2a:f6:3e:64:b9:cf:f4:1e:
25:66:e2:24:59:95:c5:1d:ba:09:59:49:59:7e:d9:
17:38:cc:e2:99:1b:1f:6c:ce:72:1a:f9:95:04:e9:
ca:cc:49:7f:a5:fb:a7:a6:2c:4d:7a:a1:07:22:93:
cf:ae:7b:f6:77:ec:ac:f1:d1:a4:12:c1:52:80:f2:
8a:98:92:38:d5:62:c4:17:1e:d9:40:d2:0f:9c:90:
a0:f7:72:8c:b1:5f:23:58:96:27:cd:ec:b7:80:0b:
36:c5:98:23:63:88:f7:78:e2:b2:45:52:f9:5f:6b:
01:07:da:66:6a:3f:48:7f:cc:db:c7:16:02:02:6b:
9a:a3:21:0b:e0:08:8e:93:c0:6c:e7:26:81:c0:c9:
aa:da:ff:6a:af:37:35:ae:cb:60:00:b6:28:4c:ee:
c7:11:46:7d:5e:d3:f0:f9:fb:3a:9f:84:64:b6:19:
9d:1b:23:9a:f2:c8:e2:12:68:fe:30:14:b6:2f:19:
30:b6:cf:ed:00:4f:2f:29:ab:a2:2d:57:c0:ab:6b:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:8F:EB:FF:43:32:B8:C8:B6:BC:A7:D4:39:DD:9F:74:D7:B0:4C
X509v3 Authority Key Identifier:
keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:b3:c1:9e:e7:57:b8:fe:ad:e0:df:ac:00:21:92:2f:55:
ea:e9:db:05:b8:0e:60:64:36:aa:1e:c1:84:05:f6:70:45:63:
a4:6b:5f:23:54:2a:52:61:0d:47:17:0d:b1:49:d6:7a:ca:c8:
ec:0c:7e:1f:0c:7f:8e:7d:3e:5b:d0:cd:50:64:f2:c6:e0:b9:
c6:62:cc:b0:a5:96:64:bc:fa:5a:b9:b3:8b:33:7a:65:77:33:
af:11:c2:b8:64:a6:55:65:c9:58:e6:a8:27:03:80:9d:8f:7d:
77:3e:fa:ee:0f:f7:5f:ff:15:cd:0e:90:4a:20:cb:52:c7:36:
f1:40:ad:b6:9f:06:1b:8d:9a:8f:db:e7:b4:3f:6a:75:95:60:
1b:32:c4:b9:e3:f9:1c:83:c7:8a:7e:ca:07:51:bd:99:74:e9:
ab:2d:4a:2a:a3:d7:2b:df:01:9c:d0:88:e8:65:d2:e3:c8:05:
f9:7e:3f:90:47:f8:12:a4:dd:e1:1a:dd:5c:83:f1:57:e2:e9:
dc:c0:bd:20:72:40:8d:99:75:66:77:b5:8b:f0:05:77:54:22:
c5:9b:1b:25:4c:24:b9:8e:30:e2:9c:b1:57:1e:60:0d:49:77:
66:fc:f0:c6:1a:41:ba:29:79:a7:ee:d5:f4:4a:7a:8e:9b:5f:
0b:09:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:09 2025 by rpki-client