
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json)
Hash identifier: z5KzEnUVwNCvBoZG8SKQO1VDWZT+VXLcD3/D+c5wm/s=
Subject key identifier: 4A:7C:3B:F9:C6:C3:B2:49:A7:8B:7A:70:E5:15:45:1E:EE:1C:F8:9A
Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Certificate serial: 20949E2B989DC8A6B71941018BFE5A255500C88B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
Manifest number: 4E
Signing time: Wed 29 Jan 2025 17:40:00 +0000
Manifest this update: Wed 29 Jan 2025 17:35:00 +0000
Manifest next update: Sat 01 Feb 2025 20:37:00 +0000
Files and hashes: 1: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: hnJlQn1vvX67dyAaEhwxHT5nJh4PVZiPjKUecPSlrPc=)
2: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: V98kYcU8v569igqvltJ62ENZBRSZDERQept9pSJvYEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:94:9e:2b:98:9d:c8:a6:b7:19:41:01:8b:fe:5a:25:55:00:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Validity
Not Before: Jan 29 17:35:00 2025 GMT
Not After : Feb 1 20:37:00 2025 GMT
Subject: CN=4A7C3BF9C6C3B249A78B7A70E515451EEE1CF89A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:72:3e:d0:ac:af:47:6a:7e:0e:6b:d4:f2:90:
75:0c:55:11:94:e7:a9:62:99:18:38:af:ed:1e:da:
2a:2d:d9:1d:f4:d1:fc:b6:29:fd:c3:a9:d2:cc:ed:
fb:e1:3a:3b:9b:c5:2d:24:c9:e5:26:62:f4:c0:3f:
76:c3:03:0d:8b:aa:73:d0:e6:ae:62:ed:c6:04:35:
ec:b7:9a:ff:0e:ee:1e:93:0c:73:c3:ab:e9:05:c3:
92:73:33:11:be:cb:a7:3d:9f:c5:b5:e4:56:ec:e1:
00:ba:95:49:1e:8f:ca:f7:e6:5d:af:07:b8:23:00:
9c:8c:ec:5d:64:99:c2:cd:87:82:61:a1:7b:4e:e8:
7f:60:4a:7c:22:e1:c6:ff:93:74:ff:a6:d1:81:f1:
14:54:bd:99:09:52:4c:b0:b4:e4:bd:aa:65:a7:2e:
26:bf:84:0f:5b:00:8c:fa:06:94:2f:41:08:01:6d:
4c:7c:22:1b:ad:2b:04:da:60:e5:a3:9c:13:16:1a:
4a:15:a7:ab:52:56:10:64:ae:c5:da:87:ac:23:27:
d3:4e:6e:5e:30:60:57:9f:ff:09:ee:21:d1:75:1c:
57:9a:58:fa:36:b3:5a:6f:e4:6c:5f:ff:37:e2:f4:
96:43:ec:c0:4b:6b:c4:9a:b3:79:c5:e4:47:01:e8:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:3B:F9:C6:C3:B2:49:A7:8B:7A:70:E5:15:45:1E:EE:1C:F8:9A
X509v3 Authority Key Identifier:
keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:48:f0:6e:27:82:5c:21:b6:ed:2f:2f:5b:b7:4d:1d:ae:2c:
a2:3c:dc:02:79:f6:1b:22:cc:a4:5d:6a:13:2e:f4:fb:40:1d:
76:69:c9:fc:cf:48:41:c1:43:8e:81:a4:73:22:03:6b:63:4b:
ac:cc:a6:67:de:c5:4a:21:57:a9:2e:40:5a:80:10:f6:f0:f1:
12:5e:07:df:ea:cc:4f:ab:3a:a4:77:ba:5d:07:35:f3:33:ed:
32:12:96:59:e4:85:a1:c1:6b:55:a9:00:a3:41:ca:2e:93:f0:
fa:c3:ab:54:d6:b6:4c:70:ff:2f:c9:58:03:af:41:b7:45:8f:
0d:b7:5a:80:e5:d0:a2:78:51:11:86:25:49:3e:0c:17:81:5c:
7d:a6:7e:86:f7:50:04:a8:84:08:72:9b:32:9e:24:51:a8:9b:
05:b0:cf:12:37:fa:64:68:77:48:4b:a5:e4:a8:dd:81:98:88:
d8:e4:91:09:74:ec:83:0f:20:47:1e:91:09:3b:6b:f7:13:fd:
f3:77:d1:57:db:f4:ba:83:27:ca:a7:1f:9c:cc:22:b3:12:e0:
9f:15:c1:96:22:40:ba:df:53:88:b7:5b:9c:9b:a1:5d:b2:93:
27:40:b7:8f:7c:64:43:a1:02:b9:83:c0:30:c9:f3:31:84:be:
8b:32:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:40 2025 by rpki-client