Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json)
Hash identifier: 0o1KMk8zy53o1x2u9qQ+Ed43p48zBEJZ6HHr4mrn8yE=
Subject key identifier: 66:CA:1F:D8:E5:21:E0:6E:9A:8C:35:28:06:74:99:31:80:4E:15:FC
Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Certificate serial: 433FB3C8A47582C4C5193A208984AA6044E2C1F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
Manifest number: 36
Signing time: Wed 29 Jan 2025 15:40:35 +0000
Manifest this update: Wed 29 Jan 2025 15:35:35 +0000
Manifest next update: Sat 01 Feb 2025 21:46:35 +0000
Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=)
2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: VHS73Dur6eVWoB7Rn5LlKGzlf83Gkb6k+1pdi/PYCE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3f:b3:c8:a4:75:82:c4:c5:19:3a:20:89:84:aa:60:44:e2:c1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Validity
Not Before: Jan 29 15:35:35 2025 GMT
Not After : Feb 1 21:46:35 2025 GMT
Subject: CN=66CA1FD8E521E06E9A8C352806749931804E15FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:1c:7c:e0:35:7e:31:b9:fe:b2:bf:38:bf:
9d:59:68:de:b6:60:ae:00:d3:9c:02:a7:0a:db:bb:
33:7c:04:dd:91:3f:62:68:a3:6e:cd:18:7d:c3:e9:
d0:19:33:2b:a3:f9:22:e7:8b:a7:5e:b8:4c:0c:a2:
01:f4:07:ac:79:bf:f7:51:b0:5a:70:24:ba:08:4a:
21:62:dc:c5:9f:02:4e:87:ac:95:ce:2f:56:1e:2a:
66:07:b9:95:4b:d9:d5:34:26:c0:07:e3:6c:64:24:
c9:b4:1f:3d:04:9b:d4:2c:ec:b3:c2:4c:58:f0:3f:
ca:5b:20:9f:f6:4e:b9:67:3e:cc:17:1d:eb:a4:60:
2a:60:28:2d:f2:40:34:dc:12:14:39:e3:b0:cb:0e:
22:6a:e4:bb:23:14:12:f0:85:94:d4:67:42:73:9b:
1d:d2:2c:6c:61:a6:3a:dd:e3:73:e0:b5:5c:c3:8b:
f6:b6:9b:63:3d:cf:b1:81:27:1c:5a:a9:fb:33:e2:
ce:d6:30:34:2c:d0:d1:37:f7:2d:b8:26:a1:72:ed:
ac:2f:0d:4f:1e:9a:b7:e4:20:4b:b7:00:ad:0f:d6:
b0:16:be:57:d5:74:aa:51:75:52:0f:ed:20:e0:28:
17:05:74:f3:e4:bc:de:7d:97:fc:50:c1:db:77:90:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:1F:D8:E5:21:E0:6E:9A:8C:35:28:06:74:99:31:80:4E:15:FC
X509v3 Authority Key Identifier:
keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d9:ef:39:eb:92:1b:90:13:9c:9d:f4:a2:44:02:81:8a:1a:
ef:86:de:5a:e9:0a:8d:c6:13:ec:b3:12:8d:7b:00:ff:af:5b:
ba:ae:ba:18:86:ce:74:0a:ff:b1:4d:7a:ea:f9:68:07:89:0a:
c1:d4:c3:a4:69:d4:29:a5:dc:84:00:d4:f5:62:58:b8:60:ff:
e3:46:63:38:69:4f:ad:14:f4:20:56:57:18:26:8a:9e:a7:24:
db:88:d7:18:69:e7:66:89:f2:74:63:0c:9d:5a:97:83:01:4f:
06:bb:5a:34:1d:2e:51:ae:05:83:e7:44:b9:1c:ba:63:8b:ca:
dc:aa:99:23:9d:d2:a9:7d:f5:a6:70:10:0d:c8:96:e1:e0:da:
22:d9:d6:c5:35:0b:e2:0c:c1:92:6a:b1:0a:cd:fb:7d:85:6b:
64:23:6d:ae:1a:74:e9:d7:85:64:fd:ca:fe:2b:8e:c7:53:6b:
f5:b8:fd:a8:d2:56:35:05:a0:23:51:e2:c2:c4:3e:7d:c5:53:
7e:70:06:95:b9:ea:fe:9b:dc:bd:58:f1:db:26:31:43:52:9e:
da:4a:51:c4:39:62:a5:8c:1b:13:50:26:e1:1f:94:f2:07:19:
db:b0:72:20:81:3a:90:eb:7e:19:bc:5a:c5:71:01:84:aa:5b:
bc:fa:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:39 2025 by rpki-client