
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft
File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json)
Hash identifier: KnLhOr9wXZ2Cj9CImbzI4JvXsoAQurccKM6SXaMX2qQ=
Subject key identifier: 4B:52:EB:06:BA:F6:52:C7:95:DE:FB:48:79:35:25:DE:6D:BD:18:F1
Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Certificate serial: 53FB4940F161ECA89CA2DFCE56B42414605AF64C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft
Manifest number: 01A8
Signing time: Thu 30 Jan 2025 14:10:51 +0000
Manifest this update: Thu 30 Jan 2025 14:05:51 +0000
Manifest next update: Sun 02 Feb 2025 19:29:51 +0000
Files and hashes: 1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: hpmksd9eMNwc5kNsNmYaL/Pd8BPAaDkCFnInyCLaFn8=)
2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=)
3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: eiRbNyy+2Cfq6J3LhynMxy6A7hN5h3MYyc0wfj6gskU=)
4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: T9xbeJ35Lm7RzIFwdUSgD9eYzn+NsCleRQjtKlR/aew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:fb:49:40:f1:61:ec:a8:9c:a2:df:ce:56:b4:24:14:60:5a:f6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Validity
Not Before: Jan 30 14:05:51 2025 GMT
Not After : Feb 2 19:29:51 2025 GMT
Subject: CN=4B52EB06BAF652C795DEFB48793525DE6DBD18F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:ea:ba:78:b1:f3:46:0e:90:ce:6f:b3:cf:
cc:a1:10:b4:f0:48:a2:2d:46:65:54:fb:29:b6:0e:
10:69:2a:65:bb:82:54:1e:19:54:a3:a8:57:4c:48:
0c:c7:04:f2:c2:60:1c:bc:fa:15:90:e5:d4:57:99:
9e:0c:e1:9f:27:16:65:e1:f5:9c:d8:e1:21:43:96:
21:9d:eb:96:14:28:89:cc:b2:8d:18:43:d5:7d:08:
17:c4:dc:95:d1:64:d3:b9:d3:d3:ad:08:25:15:83:
38:4c:b8:5c:84:7d:6f:b8:4e:dd:a5:4b:75:ce:f1:
9d:c1:ae:54:b6:d9:03:30:67:74:11:89:bf:d4:f0:
4b:fa:e4:c2:32:7c:12:e5:1a:be:7b:a3:ac:43:8c:
54:1d:c9:b6:20:10:8a:5b:72:2a:94:2f:bd:5c:81:
98:4a:b0:69:22:91:c1:ad:86:8c:05:27:e0:b4:c0:
26:3d:0f:9b:65:8d:0e:bd:4f:77:26:63:40:52:b3:
de:30:94:c5:ec:fe:05:61:7c:b0:3e:2a:04:76:03:
b1:a1:f5:28:05:95:a5:e5:a0:1a:d7:eb:b0:e8:fe:
e2:f3:57:d2:e5:46:b0:0f:27:a6:61:a3:ec:2f:a9:
87:6e:09:2e:4f:27:29:61:7d:0e:8f:4a:a1:46:a7:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:EB:06:BA:F6:52:C7:95:DE:FB:48:79:35:25:DE:6D:BD:18:F1
X509v3 Authority Key Identifier:
keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e9:b0:65:69:b7:72:58:21:44:e4:70:15:b7:f5:8c:1b:d4:
1c:c0:f8:b8:0c:19:8e:0f:94:34:6f:42:68:62:70:24:44:a7:
49:ac:71:5d:d5:18:d1:bc:00:32:37:cb:2f:93:b1:70:68:2f:
a3:51:19:52:32:81:1a:b7:92:60:24:77:ac:2a:22:63:08:44:
4a:7a:de:42:ef:cb:32:b0:d9:1c:eb:13:7d:69:13:e5:b0:83:
86:39:56:8e:8d:b3:6f:9c:a4:5d:54:45:90:1f:8f:b6:47:db:
b6:0d:ab:fb:84:e7:ce:a9:4c:58:ab:7d:14:35:1a:a3:47:b1:
d8:05:61:57:03:8b:cc:50:c3:36:d8:40:01:91:15:90:b0:31:
73:31:92:f6:6e:25:43:3a:d1:73:cd:b3:c9:6b:74:e2:84:ea:
97:99:ef:5c:85:07:b4:6d:9c:f3:b3:18:11:40:f2:77:44:ea:
68:d8:ee:e3:a7:42:a1:fb:ce:ac:e8:f7:51:22:27:f7:6b:15:
ac:bf:6b:27:36:2b:b7:05:a1:7b:43:4b:64:24:4e:94:65:fb:
74:1d:bf:70:03:87:f3:c4:a4:02:0a:68:49:04:4f:79:81:5c:
04:fa:bf:15:7f:2a:56:ae:77:aa:9a:18:0b:f9:94:80:53:da:
0b:db:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:43 2025 by rpki-client