Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
File: 0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft (raw, json)
Hash identifier: G4PrjgTQfKu5uH320YHngJMAYox5081AtxGDYe6sm8I=
Subject key identifier: A2:62:E6:89:B6:D1:C7:70:89:DD:E8:27:CC:57:13:6B:14:FD:87:87
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Certificate issuer: /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial: 73E641F7FD7840867032D58857669D243EAE764A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
Manifest number: 04A7
Signing time: Wed 29 Jan 2025 08:50:37 +0000
Manifest this update: Wed 29 Jan 2025 08:45:37 +0000
Manifest next update: Sat 01 Feb 2025 19:33:37 +0000
Files and hashes: 1: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (hash: 6ejxm/D7fWLYd/jA5kGnDm4Adf1D2VKSxCwudEm22iA=)
2: 3130332e39302e32342e302f32342d3234203d3e20313332363733.roa (hash: NoI2hxLozc+zAYu2UCPaDjAcF21N5OCkedkngEdg1Jc=)
3: 0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl (hash: gUcbLB2LKr/9YCXmUIQjEwRTlJcpfXqxmIZMPYuqvbE=)
4: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (hash: 8Pihm82g70d0YD39AiI0nfOrZFr+2CjjXY243qvfoMg=)
5: 3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (hash: CKZqBz5RzUJDxeDRQjwvwDjhTydwwJ4qsh8D2GYetBs=)
6: 3130332e39302e32352e302f32342d3234203d3e203633343937.roa (hash: 4cr+QZXigIFKCl/E01HmbmzHPYbUe8iFmoKY3eWNtV8=)
7: 3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (hash: zzTNZ4xzQEOmQw8ycNtJFjGo6ll3tDYLpBJW9o97EtU=)
8: 3130332e39302e32362e302f32342d3234203d3e203633343937.roa (hash: gM3z/op2YFXyT7g7JtYZFudpoLz5+Bi5Ub/M9drayg4=)
9: 3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (hash: q57omgnlmY1l+aM3r310Job8V2O7MzTRAzkBt8MNU6A=)
10: 3130332e3233322e3234322e302f32332d3233203d3e203633343937.roa (hash: AGLiUoWAlNJIAtchHSJ4lguvgiblVxmk8bMAMIntFqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e6:41:f7:fd:78:40:86:70:32:d5:88:57:66:9d:24:3e:ae:76:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Validity
Not Before: Jan 29 08:45:37 2025 GMT
Not After : Feb 1 19:33:37 2025 GMT
Subject: CN=A262E689B6D1C77089DDE827CC57136B14FD8787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:8c:59:fc:da:7d:a4:1e:2f:4d:0d:0d:d1:
48:6c:ed:16:36:c6:33:f4:60:0f:7e:6b:bd:d0:1d:
a4:de:b7:27:50:a9:d9:1c:b2:a8:e0:5c:6c:51:12:
74:80:a8:a5:40:c0:b9:7a:de:6f:cb:0a:09:e8:f3:
b2:31:b9:4e:d3:fb:65:57:a2:8a:db:52:80:e7:0b:
1f:c4:14:62:71:7b:b3:91:b2:b1:e7:53:58:b8:f6:
db:4d:f4:55:db:4e:8d:26:b2:fd:e4:02:d1:99:f5:
60:50:b9:a2:37:39:4e:70:5d:2c:97:3d:1c:24:47:
5c:d7:63:0a:09:dd:66:90:7a:88:5e:75:8e:e9:ef:
a4:d4:7c:37:32:42:40:8f:b8:ad:a2:6a:77:49:bc:
c2:1d:8b:bb:1d:f4:a2:6d:b0:39:4f:3f:c8:8a:e8:
68:8e:61:f6:72:62:72:78:c1:b5:1b:a2:c3:53:e8:
36:34:b7:f5:f0:48:51:a2:49:a6:78:e3:04:7d:f1:
20:53:5a:53:42:b4:4d:a6:61:33:05:9f:91:1e:a3:
a9:37:f6:e5:91:bf:ea:75:f1:cd:ac:1c:d2:80:26:
21:88:c1:18:25:d6:5f:b4:64:90:4d:88:c7:df:11:
8c:98:56:ed:76:6b:cf:98:2f:fa:ca:97:5a:f8:64:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:E6:89:B6:D1:C7:70:89:DD:E8:27:CC:57:13:6B:14:FD:87:87
X509v3 Authority Key Identifier:
keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1e:cb:2d:72:f8:68:42:fc:e9:23:2a:08:4d:6f:6c:26:f7:
12:fc:12:b5:35:6f:95:0d:0a:2c:24:78:68:9d:d4:32:96:b0:
34:fc:1c:af:f9:c5:76:17:73:64:2b:63:94:51:7d:eb:b0:bb:
bb:a3:89:6a:b9:9c:e9:83:50:ad:16:30:ac:af:06:29:89:8d:
6d:14:e2:c7:7b:a0:e4:7d:96:b1:9b:76:ab:21:7e:49:13:06:
12:da:0e:e8:a3:8e:26:21:92:a6:26:01:83:06:15:ba:03:46:
0d:bb:62:de:51:6b:cd:5f:84:93:69:82:ef:5e:0d:52:e9:3c:
8f:ec:05:81:45:a1:e2:4a:35:4d:f1:1a:00:e2:ae:2a:27:c3:
bc:ce:7f:d8:1c:c5:7c:14:2a:59:bd:ec:98:2a:4e:21:ed:3e:
24:01:79:d9:ad:7a:0a:6a:4e:ee:dc:99:11:6e:01:e6:dd:70:
44:32:87:3d:09:fd:4e:c1:c7:7e:65:2e:84:0e:4c:2c:30:bc:
a8:bd:5c:90:b2:89:cf:62:c5:5c:c1:e4:37:d4:40:d2:87:58:
26:61:1a:05:85:e0:f2:b6:fe:2e:de:1a:4d:92:da:12:13:5e:
17:c3:46:09:6b:b5:68:c5:92:86:2e:71:fb:4d:ed:7e:32:4a:
d4:e8:69:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc+ZB9/14QIZwMtWIV2adJD6udkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjEx
NTFDNUVEQjAeFw0yNTAxMjkwODQ1MzdaFw0yNTAyMDExOTMzMzdaMDMxMTAvBgNV
BAMTKEEyNjJFNjg5QjZEMUM3NzA4OURERTgyN0NDNTcxMzZCMTRGRDg3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXoxZ/Np9pB4vTQ0N0Uhs7RY2
xjP0YA9+a73QHaTetydQqdkcsqjgXGxREnSAqKVAwLl63m/LCgno87IxuU7T+2VX
oorbUoDnCx/EFGJxe7ORsrHnU1i49ttN9FXbTo0msv3kAtGZ9WBQuaI3OU5wXSyX
PRwkR1zXYwoJ3WaQeohedY7p76TUfDcyQkCPuK2iandJvMIdi7sd9KJtsDlPP8iK
6GiOYfZyYnJ4wbUbosNT6DY0t/XwSFGiSaZ44wR98SBTWlNCtE2mYTMFn5Eeo6k3
9uWRv+p18c2sHNKAJiGIwRgl1l+0ZJBNiMffEYyYVu12a8+YL/rKl1r4ZNArAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUomLmibbRx3CJ3egnzFcTaxT9h4cwHwYDVR0j
BBgwFoAUAyGYT5gjCk+UZn6CwKPesRUcXtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMC8wMzIxOTg0Rjk4
MjMwQTRGOTQ2NjdFODJDMEEzREVCMTE1MUM1RURCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjExNTFD
NUVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE2MzNiOGUtMGRmOS00NGFjLTlj
YWUtZDZmNjc2NWE1MmM5LzAvMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RF
QjExNTFDNUVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK0eyy1y+GhC/OkjKghNb2wm9xL8ErU1b5UN
CiwkeGid1DKWsDT8HK/5xXYXc2QrY5RRfeuwu7ujiWq5nOmDUK0WMKyvBimJjW0U
4sd7oOR9lrGbdqshfkkTBhLaDuijjiYhkqYmAYMGFboDRg27Yt5Ra81fhJNpgu9e
DVLpPI/sBYFFoeJKNU3xGgDirionw7zOf9gcxXwUKlm97JgqTiHtPiQBedmtegpq
Tu7cmRFuAebdcEQyhz0J/U7Bx35lLoQOTCwwvKi9XJCyic9ixVzB5DfUQNKHWCZh
GgWF4PK2/i7eGk2S2hITXhfDRglrtWjFkoYucftN7X4yStToaeg=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:37 2025 by rpki-client