Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json)
Hash identifier: V6UUulWSWdOqXIGtbGjs83D7CKJocCHcKjfQlKuo9oo=
Subject key identifier: 05:39:2C:2A:EF:99:13:85:F6:33:DF:2A:E5:C1:62:BA:D7:15:2D:F3
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial: 7F5E718E934DCF124F465749B278882D60EF0C4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
Manifest number: 01B4
Signing time: Fri 31 Jan 2025 17:10:02 +0000
Manifest this update: Fri 31 Jan 2025 17:05:02 +0000
Manifest next update: Tue 04 Feb 2025 02:50:02 +0000
Files and hashes: 1: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: lJH7Gw7GH1VXtUyFr/985P0lmVk8EfI/dJP3CK6rihI=)
2: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: jiRuydxgLg1OP/02jmqu+Ot6iTkSHXNNv7t3+8sDOac=)
3: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: bE0OqfPC0e2BnxBvjtagIsHifeSUFT7v1mgFpbHhlfk=)
4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: sqkWuQi4vYHYK7jSZTuAtS42TPGe/4n2xu5TaFgr6gc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5e:71:8e:93:4d:cf:12:4f:46:57:49:b2:78:88:2d:60:ef:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Validity
Not Before: Jan 31 17:05:02 2025 GMT
Not After : Feb 4 02:50:02 2025 GMT
Subject: CN=05392C2AEF991385F633DF2AE5C162BAD7152DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:a7:f7:3a:2d:2d:bf:c0:5c:c1:1e:b9:cb:
7a:aa:70:83:5f:47:21:ef:44:b5:bc:17:fe:db:d8:
39:e8:cc:69:28:66:3b:3b:18:45:80:ad:71:85:d7:
c1:50:40:e4:3d:10:15:20:67:1b:65:ed:e1:5e:20:
76:c0:61:80:fa:86:d9:a2:bb:60:70:12:50:72:de:
36:e2:b2:4d:00:e2:2a:63:c9:59:ef:ac:cc:3b:b5:
9c:66:04:f9:be:31:96:1a:c6:91:d7:9e:34:dd:89:
e5:40:c4:77:b4:eb:c8:53:37:4d:4d:42:ed:21:d6:
ab:32:30:be:b4:c7:d8:d6:fd:92:c5:6d:94:bc:e2:
0d:0d:36:4e:db:9d:1a:6c:77:66:6f:3c:dc:21:c2:
12:16:2b:6d:3e:fc:fa:79:d2:8a:37:b0:20:3e:03:
d7:e7:df:59:cf:25:f8:b7:7f:47:f1:76:67:a7:32:
46:37:15:fa:1f:3c:5a:3d:98:8b:2e:db:d4:21:36:
7e:12:a6:1a:b0:46:60:09:fc:e8:60:0f:e7:01:ae:
9d:6a:c7:d8:be:c6:67:87:a5:eb:4b:1b:b5:f7:64:
e1:b0:ef:f5:36:9c:5a:ba:cd:b5:33:b3:f4:ee:c0:
0d:d6:c9:04:db:93:ef:2e:73:81:95:64:fb:20:24:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:2C:2A:EF:99:13:85:F6:33:DF:2A:E5:C1:62:BA:D7:15:2D:F3
X509v3 Authority Key Identifier:
keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c1:e7:50:56:14:a2:5b:15:f1:b4:e5:8c:ee:66:c9:19:92:
d5:60:46:e6:9d:8e:62:61:27:72:63:01:bc:7c:5d:d7:d5:aa:
5d:6e:b4:bc:ae:d8:22:db:b0:ab:88:b5:6d:c9:bc:47:d6:d6:
6a:78:55:ce:29:b9:6d:32:a2:fb:39:85:ee:ad:f9:06:ad:88:
3e:19:77:02:4f:ee:03:8e:4b:dc:80:5c:1f:da:81:a2:27:fb:
81:b8:60:4c:74:f3:bb:96:fa:5b:3f:11:33:50:7c:be:08:39:
e2:53:8e:32:72:74:62:4d:31:69:c6:b1:25:72:18:aa:c3:b3:
d9:58:49:f9:88:bd:8b:ee:65:39:f7:74:ec:df:ab:87:36:36:
e6:af:d3:01:b3:aa:22:a1:42:dc:e3:89:5e:11:25:fa:4f:c9:
a6:87:e9:53:9e:50:3e:76:a5:6f:10:0e:02:8f:25:0b:50:be:
d6:77:41:c1:e0:fb:70:02:35:a9:53:67:f2:3e:7a:30:62:fe:
83:fe:f6:90:16:cb:c4:53:2d:26:9f:42:36:fe:8b:84:57:ad:
c2:a6:05:ed:91:af:df:6d:25:da:1c:d6:bc:a4:88:50:f7:d0:
6b:ab:1b:c4:b8:ac:9a:e0:fe:85:9e:d5:8f:57:ee:65:03:02:
d4:74:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:14 2025 by rpki-client