Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json)
Hash identifier: IPJwTjposQ2GMvpaDaSK3z7CLpploqYrXSRdA9oaPe8=
Subject key identifier: D1:0A:6A:89:92:98:FF:DD:33:E2:32:5B:19:B1:DC:AC:FA:43:84:C6
Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Certificate serial: 0363966C76A59A7C1003842DE7D941D456320B48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
Manifest number: 0141
Signing time: Wed 29 Jan 2025 14:40:57 +0000
Manifest this update: Wed 29 Jan 2025 14:35:57 +0000
Manifest next update: Sat 01 Feb 2025 22:00:57 +0000
Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=)
2: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: UGECAEwHqOQ8DUeadgk/iVHtw5l+o8KyvvEeqJG7hj0=)
3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: kjQ8hcW53xDDF2TSl/oKmMOppcQp+2CjRJ4hz4Fg5v4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:63:96:6c:76:a5:9a:7c:10:03:84:2d:e7:d9:41:d4:56:32:0b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Validity
Not Before: Jan 29 14:35:57 2025 GMT
Not After : Feb 1 22:00:57 2025 GMT
Subject: CN=D10A6A899298FFDD33E2325B19B1DCACFA4384C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:d3:39:27:e0:dc:55:27:e0:d7:35:39:86:
8b:4c:85:8a:19:b6:c0:b8:a4:13:86:a7:b6:2b:1e:
92:72:a4:fc:6a:c8:ef:31:fd:9c:b7:46:14:f9:4b:
84:d2:68:15:e4:38:55:92:37:b2:2a:d5:db:12:34:
8a:72:0d:b6:59:c0:e3:bd:ff:91:df:1b:3a:0c:63:
c6:50:4b:80:2f:28:98:4f:4f:d4:15:61:8d:44:10:
9d:5f:a8:f9:5b:aa:0e:58:a6:e2:c2:09:95:b1:1a:
fe:82:0a:94:00:36:99:d6:e4:63:c6:ca:c9:79:f6:
57:da:29:5c:6b:84:86:ed:d4:0b:74:98:c0:f4:d7:
28:02:18:ff:ab:bb:36:1f:49:b7:e4:4a:11:62:87:
8e:3d:b6:f3:93:2a:83:98:40:48:b0:ab:51:c7:96:
2c:8a:8a:a5:d8:22:63:78:cb:6e:83:58:30:67:7f:
3e:ba:fd:a4:da:7d:32:18:ae:ea:b6:ef:1a:8c:99:
19:f8:3f:a6:cc:60:61:1a:24:41:7f:7c:47:50:49:
52:5c:19:e7:7f:b6:25:5a:24:b7:af:5c:2b:3c:5c:
4f:63:9f:f8:23:5b:48:ea:80:db:87:60:ed:91:9e:
16:6e:cb:7f:fd:b1:cc:ab:e8:4f:f0:32:80:55:7e:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:6A:89:92:98:FF:DD:33:E2:32:5B:19:B1:DC:AC:FA:43:84:C6
X509v3 Authority Key Identifier:
keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1b:2d:63:d6:c5:fe:4f:a6:f2:2b:1b:be:fa:39:c8:e1:71:
c9:cc:65:6c:eb:c7:d2:3a:57:08:79:8d:5f:af:3c:20:eb:38:
83:5d:40:da:33:46:19:7d:0a:a5:da:72:c6:7d:83:1e:01:e8:
13:48:53:05:07:a6:f4:3a:4c:d1:15:be:eb:3f:b3:0b:f1:6c:
e2:ba:ae:fa:b5:6f:aa:46:82:f9:40:a4:85:10:d6:9b:30:28:
b9:be:43:bf:0f:89:13:68:f5:4e:6c:c9:c7:d1:8e:62:3d:12:
ac:4d:74:a0:ed:ba:ac:a1:d1:05:1b:ae:6c:c6:a7:e0:b1:ad:
8a:57:ff:d2:38:ba:fa:25:82:1d:2a:a4:bc:59:55:d4:1f:be:
c4:eb:c5:61:48:6b:cf:ac:3b:8d:f2:c6:4e:32:10:fb:f5:53:
d8:6d:81:bf:78:7c:0c:5b:48:67:78:20:dd:25:87:bc:29:14:
fe:a9:af:b0:5b:81:22:71:ee:90:92:8a:de:60:a0:0e:aa:21:
bf:e9:9c:36:6f:19:31:29:f2:77:d6:80:f9:0b:8d:44:28:21:
df:02:17:db:15:21:53:87:b5:aa:47:46:c0:37:0d:2b:f3:a0:
a5:dd:22:35:98:38:b7:64:e0:c3:32:43:3d:04:5a:dd:77:31:
50:ad:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:20 2025 by rpki-client