
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json)
Hash identifier: dwiAlmONTZTf1EDtbz8ZJBx0mYweucIYpAhG3NQQxJo=
Subject key identifier: B1:D1:A9:14:7C:41:76:79:E2:20:C0:20:FC:F2:A8:4D:D0:EC:13:8C
Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61
Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
Certificate serial: 64F3F7B5D56C3175698F6816CA7F0345191D743F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
Manifest number: 0111
Signing time: Thu 30 Jan 2025 14:51:15 +0000
Manifest this update: Thu 30 Jan 2025 14:46:15 +0000
Manifest next update: Sun 02 Feb 2025 21:28:15 +0000
Files and hashes: 1: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: z4vMeMLnGIAj8/QMxQXQsGQGHdGDvWx/e6KfxBs3RuI=)
2: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: Ra4kBxyKq0eMRR5T+q214TFxoVWgjk/J53dcHzjeFD8=)
3: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: u880hi+D7DiVMZTtM0R2zluDGsZisp33kG58HiXq4yE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f3:f7:b5:d5:6c:31:75:69:8f:68:16:ca:7f:03:45:19:1d:74:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
Validity
Not Before: Jan 30 14:46:15 2025 GMT
Not After : Feb 2 21:28:15 2025 GMT
Subject: CN=B1D1A9147C417679E220C020FCF2A84DD0EC138C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:99:2f:a0:8b:d4:2d:8e:34:34:7a:3a:9f:
c1:f5:ec:f6:d5:36:2a:28:29:34:90:31:4e:b0:a7:
cf:85:cd:bc:4a:b2:88:86:f9:71:e3:58:8b:78:2f:
ca:7a:10:42:5e:3e:50:d1:51:04:af:78:18:36:7b:
02:d3:bd:03:16:dd:7c:0d:ac:70:21:f2:ad:28:bb:
4c:82:8f:87:28:7b:af:eb:51:f3:d9:11:87:63:09:
c6:f0:b9:8f:3b:a1:f2:06:48:ad:6f:1c:37:c3:32:
5f:87:ef:98:52:fd:e6:41:8b:e0:79:7d:89:c0:38:
b2:2b:b5:21:cd:16:41:d3:f8:ac:71:c2:02:fa:47:
bb:81:10:8d:d1:f7:34:bd:41:75:c9:f3:0d:5f:d9:
a9:35:1b:cf:9d:dd:f4:0c:05:a4:3b:a2:1a:76:d8:
bc:ec:5a:27:05:b8:02:3a:62:5c:27:1b:1f:eb:05:
e0:c2:6b:92:23:17:04:18:c9:19:16:4d:98:61:45:
9c:0a:5c:38:de:ad:79:36:3a:fe:fe:d5:8c:84:7c:
9a:b8:6e:a8:ef:99:f7:97:af:be:73:6d:0c:c7:1c:
b2:29:df:4e:47:5e:f2:1c:d7:4c:11:8e:59:a9:0e:
ab:01:e6:41:15:c3:b7:3a:aa:e9:3c:e5:9f:61:9b:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:A9:14:7C:41:76:79:E2:20:C0:20:FC:F2:A8:4D:D0:EC:13:8C
X509v3 Authority Key Identifier:
keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3d:a3:78:59:be:7d:08:b8:e7:cf:9e:f1:60:79:42:5c:fa:
a8:8c:cf:ac:24:93:4d:a9:2d:45:7d:15:21:b7:31:4d:ef:d2:
2c:6f:17:b2:c6:02:d8:98:3c:59:64:75:2c:fa:3c:cd:04:45:
e6:19:7a:b7:0f:e2:dc:c8:85:2c:7c:b4:f2:24:7c:bc:8c:ab:
0d:a5:cb:a7:96:62:39:75:4c:fb:60:c2:72:49:da:9d:96:41:
22:aa:58:dd:8d:2c:87:65:ad:31:5c:87:38:d9:56:5f:2b:cc:
8b:24:34:c5:57:08:13:6a:0e:b9:d3:7d:4b:7b:92:ff:14:2b:
9a:a0:44:5d:20:10:2a:33:cd:d4:aa:8d:d8:fc:62:02:f0:39:
ef:fa:be:af:6f:1f:c3:4f:c3:60:01:86:fe:25:f5:45:87:ff:
9e:4a:56:c0:1f:8b:42:45:8c:d0:72:1b:df:bf:43:a8:9e:0c:
e5:74:47:57:d2:db:f6:e2:d2:3e:ba:92:be:d7:d6:e5:c9:a1:
09:31:60:ea:91:68:71:2a:10:0e:7d:65:3d:37:3f:65:25:8c:
63:31:cf:ec:04:1b:96:8a:64:a0:9a:21:c0:0f:08:3c:de:1b:
99:e3:ce:9f:51:1e:40:56:fb:55:be:fc:d6:bf:5f:dd:34:71:
19:81:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:56 2025 by rpki-client