Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json)
Hash identifier: ErVFR5/m0dL5DMHuNPZNSxFwKVZ4F5FwZEVYIbfCjuw=
Subject key identifier: 0D:9C:FD:77:D2:72:30:44:2E:06:D9:F8:E2:C3:9F:4D:D5:43:D3:CB
Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD
Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD
Certificate serial: 4DE33F01F44C05C28F3960B47BEA350D8BD5D629
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
Manifest number: 0145
Signing time: Thu 30 Jan 2025 09:21:17 +0000
Manifest this update: Thu 30 Jan 2025 09:16:17 +0000
Manifest next update: Sun 02 Feb 2025 15:33:17 +0000
Files and hashes: 1: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: jsQ3cGwTb93KQ3+TKRABx0l0miUMW9JXJpLX/A8kMmk=)
2: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=)
3: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: S0nR+YUlJUrzrkQh1JtohX1sx+P8YfSsTUPRDG9m1Fo=)
4: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: msDDpIlttirzrCwl737ixXgByLjhqyNcxb8DUAIHxP0=)
5: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e3:3f:01:f4:4c:05:c2:8f:39:60:b4:7b:ea:35:0d:8b:d5:d6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD
Validity
Not Before: Jan 30 09:16:17 2025 GMT
Not After : Feb 2 15:33:17 2025 GMT
Subject: CN=0D9CFD77D27230442E06D9F8E2C39F4DD543D3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:ed:ca:56:38:65:41:e2:27:2b:a4:aa:47:
cf:4d:49:0e:c8:ba:5d:46:7a:bb:b3:f7:7e:74:13:
72:a6:33:0e:d8:4e:dc:39:d3:64:20:48:89:24:40:
dc:52:17:22:23:c3:3c:5e:9c:bd:e0:d6:34:23:3d:
06:fe:9e:5c:e8:6e:6b:e3:2e:42:9b:51:11:61:95:
51:5e:bf:ab:58:8c:0f:f6:bf:75:04:92:ab:23:f3:
c5:81:c0:f5:d1:5d:09:75:60:4b:e3:3f:0a:6c:f0:
ce:24:43:23:38:e8:08:5b:75:19:d4:42:70:69:66:
98:da:83:80:d0:b5:43:20:35:fd:13:a9:be:f6:1e:
23:50:32:63:70:1c:e0:af:c4:78:92:8b:10:34:03:
8e:3a:e5:19:43:10:fd:6b:33:aa:fa:5d:f3:a3:61:
18:e9:6f:b1:d1:c8:9c:73:1f:b4:a3:7d:3c:02:bc:
6c:1f:0d:7e:79:51:b1:94:d8:a2:9f:d5:f9:cb:62:
49:b6:22:92:18:b6:c8:fa:85:53:fd:77:e4:38:6b:
42:34:14:bd:09:00:ea:c1:ef:82:20:f0:29:fe:da:
71:6b:5b:b8:c5:75:51:e3:2b:72:94:d2:a8:10:93:
b4:da:89:51:4d:d1:0b:2b:fb:e8:e4:43:cf:c2:d2:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:FD:77:D2:72:30:44:2E:06:D9:F8:E2:C3:9F:4D:D5:43:D3:CB
X509v3 Authority Key Identifier:
keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:8e:55:f9:45:e8:49:1d:f0:98:59:79:db:ec:df:08:38:56:
56:88:90:8c:bd:f9:ec:c6:30:9f:77:fb:57:77:2a:57:a7:34:
ad:51:f5:05:0d:ad:e8:41:df:00:9a:19:98:3c:7e:8c:3a:73:
62:61:32:10:59:c2:d6:51:f0:f0:10:e8:e3:a6:07:af:cd:eb:
3b:ed:fe:25:28:7b:47:5e:d7:9a:16:f7:0c:9d:a9:1e:a8:f5:
91:23:68:bc:31:df:98:0e:4e:f2:8e:1a:26:64:57:d6:3e:d4:
77:54:59:32:9e:63:60:e3:11:97:f4:1c:b5:e9:e5:00:b6:be:
e3:01:e4:c6:fa:49:44:a6:9d:c7:c0:b1:57:6f:9f:15:9f:d1:
0d:b4:87:1f:14:36:ed:bf:05:52:91:a9:57:34:4e:32:a9:15:
fb:03:4c:57:91:b1:4f:a8:cc:0a:b7:f9:af:ae:72:4e:3d:50:
7f:36:14:f7:b4:52:11:6a:bb:df:ac:7d:a8:e6:4b:82:e8:4a:
f1:ea:b7:dd:3e:4d:f6:75:99:f5:58:41:0e:34:88:ef:dc:22:
47:17:4e:39:72:fc:b1:2b:13:98:05:87:07:5c:1f:5e:7b:78:
8d:0d:07:63:39:2c:34:bf:eb:c6:91:9b:e7:fa:59:a0:59:be:
46:dd:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:41 2025 by rpki-client