Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json)
Hash identifier: CYsvoJwt7HyNokI5JB3rCqpNXmkm5zBWWl/s8JiYCTc=
Subject key identifier: 33:94:6A:AE:4A:B4:C6:AF:83:82:DA:90:59:1F:2D:C9:55:0D:79:4C
Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA
Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
Certificate serial: 3AE6A153125ED5FD004A2892FBD16F96F0C1A9F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
Manifest number: 019B
Signing time: Thu 30 Jan 2025 12:01:47 +0000
Manifest this update: Thu 30 Jan 2025 11:56:47 +0000
Manifest next update: Sun 02 Feb 2025 18:36:47 +0000
Files and hashes: 1: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: IuQUtTURhZ8/ig+XnrJZ7jVXr/LkmdXzEpOXoKgO0k8=)
2: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: ioxq/W5ymBOyVrdZyMoMPOB0yUz6GKYHI7PX8Vi02hI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e6:a1:53:12:5e:d5:fd:00:4a:28:92:fb:d1:6f:96:f0:c1:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
Validity
Not Before: Jan 30 11:56:47 2025 GMT
Not After : Feb 2 18:36:47 2025 GMT
Subject: CN=33946AAE4AB4C6AF8382DA90591F2DC9550D794C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:ef:16:80:d9:f6:c0:34:d2:16:fe:4c:65:
bc:72:e3:6c:8a:5c:bb:53:1f:86:27:03:2c:27:c2:
2e:8b:c6:f4:39:a6:02:65:0e:a5:25:3c:e3:2c:dd:
7f:0f:5d:c6:2e:a3:b3:95:3c:26:57:c0:cd:84:ac:
f7:b7:2d:ad:a4:18:de:5d:f9:09:60:ea:a6:95:17:
96:b4:ff:53:c0:1e:93:43:f1:68:e8:45:61:82:72:
02:7c:a1:40:c1:36:cc:e2:ff:bf:c6:d2:e1:df:f1:
80:68:99:06:58:c2:8e:e4:2e:8c:45:a3:3c:48:19:
50:20:ba:4c:ef:47:ce:80:96:4a:54:4a:ed:90:d9:
5c:62:2c:45:3d:bd:97:96:86:ee:59:cc:e0:18:ad:
f2:a6:5f:81:97:22:52:a2:43:c2:fe:1d:af:88:1e:
69:f6:b5:0a:e2:91:99:5e:5b:4b:41:64:4e:3e:ce:
ea:cb:03:4a:ee:1b:45:94:31:ff:eb:a8:45:95:1e:
a8:fe:27:fb:9f:4c:cf:d8:63:46:98:77:fc:5c:82:
35:6e:e2:11:4f:86:92:66:a6:fd:e8:57:29:15:03:
e2:11:32:4e:b1:78:25:6f:70:d0:46:d9:d8:d3:0a:
1d:90:b7:ce:89:20:56:9a:1a:77:01:10:07:90:ab:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:6A:AE:4A:B4:C6:AF:83:82:DA:90:59:1F:2D:C9:55:0D:79:4C
X509v3 Authority Key Identifier:
keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:03:88:b2:0f:27:c4:c0:fd:d1:da:10:9f:07:b3:90:97:67:
50:45:97:0e:d1:49:e1:60:f4:97:70:9e:e4:9a:26:af:5e:ae:
28:46:7e:e3:bb:a5:06:b1:9d:0d:6d:82:76:38:51:29:08:10:
5f:0d:56:85:77:b5:88:c1:2c:f2:15:e2:82:44:8e:87:d2:d9:
5c:81:e4:b8:81:11:8e:76:b1:02:f6:77:97:60:fb:42:fd:fd:
10:8b:96:22:90:0a:35:21:29:3f:69:4d:52:61:fd:5b:34:36:
14:8c:73:67:8f:f4:7f:9f:93:20:2b:ec:e0:8e:db:2f:7c:45:
ee:68:6f:56:be:3b:55:08:0d:05:be:4b:2a:19:c5:e7:c9:a4:
18:73:89:6e:2f:9f:87:b6:5b:6b:99:72:7b:83:65:d2:db:c0:
cf:b1:e0:58:d3:73:e5:28:86:0d:35:9b:02:59:27:90:bb:87:
3a:17:36:53:82:c0:7b:51:3c:c1:6e:26:1e:6f:bc:89:54:a4:
82:eb:83:00:d8:f7:5d:f6:6a:0b:1b:bb:9d:72:bf:cd:ff:3e:
a4:b6:9e:36:bd:cc:8c:87:3e:5b:40:d8:cb:1d:8b:a4:d1:a1:
b8:03:3d:d9:b3:4a:5e:16:17:56:2a:50:b5:be:62:03:b4:a3:
9f:04:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:49 2025 by rpki-client