Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json)
Hash identifier: RrmZUnJW1ifFDVWS8h2KtY9/A+2sPWwG5SRaCdTydFo=
Subject key identifier: 20:41:71:E9:7F:A3:9B:E8:D2:99:E3:99:15:F0:73:03:C1:51:52:1B
Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A
Certificate serial: 7777BC8B24CB1EC3850904186DFDBD7B74A81149
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
Manifest number: B3
Signing time: Fri 31 Jan 2025 00:11:11 +0000
Manifest this update: Fri 31 Jan 2025 00:06:11 +0000
Manifest next update: Mon 03 Feb 2025 03:50:11 +0000
Files and hashes: 1: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=)
2: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: fL2W7JYLfPQB4iMhqohc/MnfY2bt+KLLh8WlYUhR3Nk=)
3: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=)
4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:77:bc:8b:24:cb:1e:c3:85:09:04:18:6d:fd:bd:7b:74:a8:11:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A
Validity
Not Before: Jan 31 00:06:11 2025 GMT
Not After : Feb 3 03:50:11 2025 GMT
Subject: CN=204171E97FA39BE8D299E39915F07303C151521B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:8f:f1:67:10:93:e3:c5:2b:6c:8f:c2:73:
eb:21:d9:9c:30:92:f4:01:8f:06:db:e9:8d:b9:f1:
1b:81:33:4e:a7:a8:4e:17:56:c2:9a:4d:a8:47:fc:
5e:f7:c7:a4:d0:7f:37:64:09:1f:0b:19:ba:93:4b:
48:c5:9a:84:14:4f:7f:c1:b8:84:c1:2d:7f:3b:24:
91:0e:a5:f9:e5:cc:7a:6f:f6:1d:aa:9d:13:6c:eb:
44:55:2d:a1:d6:c0:5c:dc:28:81:9b:14:0c:25:47:
bf:e1:51:b7:50:7a:6c:82:3d:2b:c9:0c:36:32:7f:
1e:c1:bc:88:e7:94:70:ee:87:45:9b:c3:9d:17:1e:
94:17:cd:04:cc:74:a1:38:fd:4e:f0:2a:28:cb:d7:
c9:ab:89:f8:34:36:49:00:50:dc:47:d5:45:d8:b0:
73:36:10:1d:6a:65:db:20:b8:1c:05:97:b2:3a:94:
1f:b8:30:78:8b:87:6d:b6:ad:b3:8f:d8:b3:2c:04:
55:39:d7:c5:2d:a3:0e:6b:53:63:f9:80:80:ed:f8:
7e:32:b4:07:6c:c7:ba:96:3c:a1:99:4f:aa:85:5e:
fa:e8:39:1d:85:3e:5c:42:c8:c7:b5:86:e3:17:a5:
21:04:4b:0b:da:40:66:ac:c2:4b:9e:ec:19:04:40:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:41:71:E9:7F:A3:9B:E8:D2:99:E3:99:15:F0:73:03:C1:51:52:1B
X509v3 Authority Key Identifier:
keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7b:a9:a6:45:34:9c:e9:4a:23:68:06:33:50:7c:12:f7:d0:
e5:6d:47:62:9a:73:7b:2c:8f:c5:cc:2b:20:1a:83:f3:7d:47:
13:de:a3:74:d0:e5:17:c1:5e:cd:02:63:27:c6:d0:af:39:cc:
ad:e0:07:7c:bc:60:f7:c1:ab:e8:28:88:0d:c1:82:f5:e1:52:
f5:ac:2f:dc:9c:63:6f:ae:b1:81:86:b4:01:78:3d:1f:a2:39:
79:24:40:30:38:07:e0:ca:a3:bd:6a:f3:8b:8d:29:f4:df:61:
ab:f5:5c:74:5f:ae:44:4e:4c:82:72:3c:1e:46:7f:b3:6f:e0:
13:a7:82:42:75:ce:37:1a:bf:84:1c:a4:2c:b2:b4:a0:65:25:
4c:c6:53:8b:ef:0c:eb:ec:16:0a:21:e1:7d:38:22:1f:31:fd:
c3:b5:24:f7:ba:c9:98:cf:ae:c6:68:5b:49:65:57:92:19:ac:
7a:f5:7e:81:6e:fa:86:1f:d9:62:ab:68:9d:ef:55:4d:76:32:
37:73:d3:94:ae:d9:c5:81:d6:c6:a4:46:db:85:e2:a0:b2:d3:
09:7a:51:fd:0b:c3:6e:7b:b1:cf:b0:6c:9c:5f:d4:6f:53:fe:
ee:de:73:6e:42:8e:d3:9c:1d:89:6d:35:01:c0:cf:6c:8e:8d:
8c:00:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:11 2025 by rpki-client