Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json)
Hash identifier: cCrdEmsXNnxEZgZDk/BqmndwcT2YV+TSnVwCZd8IYUg=
Subject key identifier: 27:C8:B9:5E:28:E9:B4:F7:4B:09:8E:CB:40:2A:5C:25:86:4E:81:A7
Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Certificate serial: 646000210E5C0ED0D60B0ED970D8DA56C67E9645
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
Manifest number: D9
Signing time: Thu 30 Jan 2025 23:01:11 +0000
Manifest this update: Thu 30 Jan 2025 22:56:11 +0000
Manifest next update: Mon 03 Feb 2025 00:54:11 +0000
Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: N4ebBkCHgqQmywUUz7p/PQrOZUx2Ip1Qe6zwTCJ9Qrk=)
2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: fdKLklGtOpTaZiKknSWtQhokJ8SyF+EacKH1Get3Tjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:60:00:21:0e:5c:0e:d0:d6:0b:0e:d9:70:d8:da:56:c6:7e:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Validity
Not Before: Jan 30 22:56:11 2025 GMT
Not After : Feb 3 00:54:11 2025 GMT
Subject: CN=27C8B95E28E9B4F74B098ECB402A5C25864E81A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:97:e0:97:b8:ba:54:de:f6:15:08:fc:91:
e2:cd:98:a5:14:f2:fe:49:6d:8c:a8:f6:04:3d:20:
c2:71:f6:50:a8:e9:98:69:05:f2:2e:e2:53:61:17:
28:0a:ad:60:83:a0:71:9b:39:22:f8:8a:9f:41:49:
0c:9f:0f:2b:8f:be:ce:1a:85:e5:96:2f:4b:c2:e3:
0f:32:65:f6:a4:21:c1:59:10:9e:68:58:30:96:20:
63:b2:03:92:17:f1:3b:ae:7e:7d:5d:a7:f8:49:40:
df:fb:a0:a2:7c:59:3b:c0:65:a9:51:ff:4f:fc:be:
b7:0e:96:f0:17:6b:bb:bb:c8:14:a4:2e:b6:c1:7b:
34:2a:91:7b:42:bd:92:30:43:30:1e:47:90:54:00:
8d:7e:95:84:e0:8c:bf:4a:ea:6b:7c:df:6d:5e:36:
eb:65:4b:9a:16:c3:9a:96:73:1b:e8:51:af:34:b6:
78:9a:d7:c0:66:b7:c6:99:3c:74:34:f3:20:d1:9a:
4c:39:1c:af:ab:98:e4:36:9a:3d:de:d3:3b:67:b4:
04:0b:95:36:52:2f:78:4c:e2:58:1b:57:96:07:a9:
da:54:65:a3:9d:0a:e4:2f:fd:22:a9:83:04:8a:92:
92:a8:28:e9:77:84:5e:f8:1d:f9:b8:e1:b5:dc:2b:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:B9:5E:28:E9:B4:F7:4B:09:8E:CB:40:2A:5C:25:86:4E:81:A7
X509v3 Authority Key Identifier:
keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:c7:ae:2f:2d:65:03:fa:e3:db:4b:69:64:2e:a2:3a:a2:
6a:95:9f:e0:b1:1c:47:04:78:dc:e2:ab:4b:44:ed:bd:6d:38:
26:32:e6:01:c4:8e:eb:af:6e:17:7e:1b:79:33:6e:fe:a5:df:
2b:79:7f:c8:67:0b:cd:61:47:a7:ba:03:22:e8:dd:ce:fe:1a:
98:5d:f3:c3:bb:5b:52:e4:3d:07:55:82:41:e5:c8:09:75:eb:
39:f7:da:ba:91:5e:07:8d:55:4e:cc:ad:35:7d:8a:d7:2e:a8:
83:62:b9:b7:07:1d:56:59:b9:2c:0e:36:f3:f2:b4:f1:3d:37:
f6:95:bf:aa:70:e1:3f:a3:4f:5f:d4:cd:d4:6d:3d:4e:7f:60:
e4:5b:48:c1:3a:21:20:af:f0:ea:72:96:ec:aa:a8:fa:94:1a:
cd:48:cc:11:15:16:a9:30:81:0c:76:68:25:2a:44:ff:d1:d6:
af:57:d8:ca:19:31:b1:72:a8:dd:44:e7:1e:2a:1f:8a:31:5e:
29:b8:27:71:69:da:7e:cc:a4:54:fa:a3:9a:ba:38:0a:f7:3f:
fe:da:61:7b:e4:db:db:53:e3:b3:8c:e2:bf:56:77:4b:b2:be:
8f:2b:fd:0d:61:73:58:21:bf:f7:51:28:91:e0:9c:3d:b2:32:
c5:5c:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:47 2025 by rpki-client