Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json)
Hash identifier: GDgSzkr/AXTtKFIPFXo5kjdwo8tQ5En6XZHhQAZuGMo=
Subject key identifier: 2A:B8:A9:B7:41:66:48:91:F4:56:B0:BD:25:01:FB:A7:1F:E9:56:D0
Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A
Certificate serial: 39A00625FF1EEF3966008D9FD2EDB78F33AA2280
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
Manifest number: D5
Signing time: Fri 31 Jan 2025 10:11:36 +0000
Manifest this update: Fri 31 Jan 2025 10:06:36 +0000
Manifest next update: Mon 03 Feb 2025 21:04:36 +0000
Files and hashes: 1: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: QW0riT2ZIbJQ6bDdQHJpDVDRJpk68aw/94juFPRXEvU=)
2: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: IffzCaIFf2IOsZ375pGjlvPKsPfxrbMf5pIdiAzWm0w=)
3: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: q1try4eWeXGNMJXVZs9ilwAbNDidILu0Qdkiuiy95SY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a0:06:25:ff:1e:ef:39:66:00:8d:9f:d2:ed:b7:8f:33:aa:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A
Validity
Not Before: Jan 31 10:06:36 2025 GMT
Not After : Feb 3 21:04:36 2025 GMT
Subject: CN=2AB8A9B741664891F456B0BD2501FBA71FE956D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:75:06:51:e9:bc:0a:00:b4:a0:1d:c9:3d:
08:e2:9b:8b:8c:f6:e1:8f:13:d0:67:8c:1f:4f:9e:
ac:0a:c9:08:bd:91:ab:d4:39:49:1d:9e:01:27:25:
8a:74:5d:55:29:6f:6a:35:f6:f2:99:6e:d4:98:4d:
b9:4f:8d:99:16:e9:9f:11:b5:e1:ed:f1:c5:da:a5:
bc:15:5b:ee:2b:ec:9d:55:07:5f:19:21:ce:3a:1b:
72:4c:d1:23:a1:be:8b:85:99:97:90:f4:bf:23:68:
db:27:7f:b3:b7:6d:7d:5e:0b:cc:8f:79:95:4b:6d:
ef:d7:fb:fe:6b:cb:24:85:bd:aa:8f:72:19:81:3c:
de:db:a7:3f:4f:e8:ea:52:d2:83:9d:0a:a5:88:39:
65:a9:20:6f:72:92:92:88:7b:34:84:51:7f:0d:60:
0a:16:99:43:89:f5:56:7e:fc:53:a7:7f:e7:d2:60:
cb:76:80:b7:5f:31:d8:9d:5c:bd:88:10:a5:25:c5:
d0:15:28:6d:7b:5e:b0:36:fb:f3:c0:59:bc:a8:bc:
6e:d4:3c:c6:35:5f:6b:95:d7:b7:72:f4:82:6e:d7:
09:61:66:4e:b9:b8:05:dc:d0:d3:b8:ee:26:ee:26:
a5:87:0d:af:0e:45:c7:e1:61:82:bd:f7:14:a9:88:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:A9:B7:41:66:48:91:F4:56:B0:BD:25:01:FB:A7:1F:E9:56:D0
X509v3 Authority Key Identifier:
keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:8e:b1:e7:bb:f4:60:e8:70:a8:f3:6c:8d:11:69:62:be:
a1:1f:7e:e7:fa:3d:70:d5:0d:f7:96:6c:8e:da:dc:42:52:86:
7e:76:d0:6e:a4:ad:4f:16:f9:d4:f8:f3:34:06:ae:3b:71:df:
bb:6b:93:c7:21:ac:e0:d1:a9:81:d9:a5:86:21:6c:76:7b:da:
72:61:3c:a9:59:ae:4a:26:22:1e:58:f9:57:23:8a:15:43:f5:
5a:54:05:3f:02:0d:8d:34:7e:6d:d5:75:d5:4f:45:8d:a2:c1:
0d:f1:7d:41:18:37:9a:f1:bb:e9:20:09:a5:a2:ee:5f:f2:42:
5a:22:f4:c2:a6:15:4d:ac:36:a0:10:21:12:9d:75:ee:dc:e9:
df:db:4a:85:f9:84:be:95:01:43:40:f3:98:c0:25:c6:67:bf:
7a:76:ea:77:6c:76:77:53:c2:ab:09:3e:46:a1:aa:1d:44:48:
0c:a5:00:f2:82:89:50:b8:32:77:16:83:16:44:f8:7a:6b:44:
c8:3c:f3:86:f4:6f:a4:c7:07:d5:f9:63:6b:61:de:a7:a6:44:
50:30:cd:de:5c:bc:cf:df:9e:00:0a:2c:be:1a:0f:e7:01:c6:
35:7e:d0:eb:48:07:e1:1a:59:10:33:df:e0:e1:1c:87:e3:68:
7f:9b:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:18 2025 by rpki-client