Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft
File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json)
Hash identifier: qi1B4eY7cuUogruNs3jC6TKPpZOPxhxnQHfoMuHIf+s=
Subject key identifier: 20:A1:B1:05:62:7E:8E:9C:2E:66:77:E2:E1:0F:B7:27:80:1A:67:EC
Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54
Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454
Certificate serial: 4B46178D4D9B5A12FC27156880BF9CF2B0B0709B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft
Manifest number: 0159
Signing time: Thu 30 Jan 2025 01:01:24 +0000
Manifest this update: Thu 30 Jan 2025 00:56:24 +0000
Manifest next update: Sun 02 Feb 2025 03:59:24 +0000
Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=)
2: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: wu7FVF1if/ySmoAK8OrQ7cQcdtVGRdwxUIywxFXWTtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:46:17:8d:4d:9b:5a:12:fc:27:15:68:80:bf:9c:f2:b0:b0:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454
Validity
Not Before: Jan 30 00:56:24 2025 GMT
Not After : Feb 2 03:59:24 2025 GMT
Subject: CN=20A1B105627E8E9C2E6677E2E10FB727801A67EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:c7:2e:4f:98:fa:04:aa:de:58:af:6f:bc:
4a:5e:73:89:da:18:74:62:c9:40:40:cf:72:17:7f:
96:07:8c:9e:46:af:90:da:53:39:1d:b7:65:8a:55:
52:82:80:43:e0:38:20:1b:aa:a3:60:b7:be:ad:01:
c8:3c:fd:65:fd:3b:61:e3:53:90:01:62:78:39:3c:
c0:ef:08:d0:e0:48:b4:62:d0:bb:5b:84:12:26:db:
0f:1e:24:d7:7c:80:65:b7:15:d4:1e:a8:5e:54:e9:
a8:21:71:c6:8a:d6:a5:ec:a8:1f:be:bf:68:8c:00:
1a:d5:76:91:61:f6:07:cf:81:d8:4b:c1:3a:12:3b:
8f:17:26:cb:96:f9:5e:a0:c3:b3:06:a5:e3:c0:8d:
e7:0d:e8:ae:d9:d8:ea:e1:d9:f2:a2:05:e5:ab:8c:
12:48:6c:8f:5a:bd:dc:15:f2:48:f5:7e:0d:bd:47:
e8:e3:1c:cd:35:1e:c9:8e:ed:3e:e5:50:c0:70:85:
a8:71:bc:6b:30:7e:7e:29:9b:16:0d:c0:13:9c:fa:
86:d6:4f:f9:15:1f:08:57:a1:e1:b5:3d:be:a8:3d:
ab:18:58:a0:e4:00:d2:32:b8:eb:15:53:06:6a:bd:
e0:2f:73:01:30:86:09:2b:56:d4:35:f5:02:a2:57:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:B1:05:62:7E:8E:9C:2E:66:77:E2:E1:0F:B7:27:80:1A:67:EC
X509v3 Authority Key Identifier:
keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:c3:e7:0e:93:aa:39:c2:aa:9f:dd:ee:9d:23:b6:65:e9:
a1:3b:1d:64:03:d5:d0:f3:6a:77:e5:2d:7f:01:89:ed:91:17:
5c:72:b0:40:56:bd:b5:b4:c3:df:45:ed:b0:0a:26:f7:20:61:
57:ca:dc:ed:a7:46:44:93:5f:21:70:39:1c:4b:86:03:46:77:
25:5e:5f:50:c4:ab:b6:e6:4c:76:86:cd:6a:78:fb:0f:04:96:
0b:ba:a7:08:b1:c1:71:1c:fd:a6:71:d2:5d:02:b1:61:dc:66:
ee:3f:34:5b:94:f0:c2:dc:1a:9d:ef:7b:26:8d:38:93:fe:57:
94:af:e0:00:2d:d4:79:d7:66:cd:0c:71:c2:92:5f:6a:c8:46:
72:dc:b8:a0:f1:53:bf:e3:07:bb:41:60:0a:16:b5:0c:6d:c9:
cc:d5:64:c4:1c:53:5e:85:ca:bb:2c:88:99:1b:80:06:67:a4:
62:97:94:33:24:9c:87:48:d9:e7:87:b6:0c:03:26:d6:4e:15:
fa:92:e8:d6:bb:af:cd:bb:dd:9d:ce:0a:94:3c:60:cd:e5:3b:
d6:78:1d:f6:69:21:e1:24:a2:dd:ff:56:7c:4c:a6:05:45:06:
8b:8b:e6:58:4f:11:38:c3:06:70:75:71:bf:bd:7b:20:a2:28:
d0:08:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:40 2025 by rpki-client