
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json)
Hash identifier: 1t49ty6M0YqWzyC1V6C8bsttagtBpRtRaNZpvc4b+js=
Subject key identifier: 39:88:52:14:E3:4E:2A:78:DE:81:A0:31:DB:A9:49:BC:93:C7:D6:A3
Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77
Certificate serial: 735468E0CD6F79CED8080803DC4AB8C9C387DB51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
Manifest number: D8
Signing time: Thu 30 Jan 2025 11:51:38 +0000
Manifest this update: Thu 30 Jan 2025 11:46:38 +0000
Manifest next update: Sun 02 Feb 2025 17:16:38 +0000
Files and hashes: 1: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: iMyGVkaQyZpZkNK49MuZGQm1toOVoUayhF4XKwQsebY=)
2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: UhTnOZ0eR4pV0pc2TNTMXOcqZMm3I9KiGgwKvyJXQRE=)
3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: YVXU9bZeYflVSgxxKGLIQ5msIEKdutfulcIw6pY80+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:54:68:e0:cd:6f:79:ce:d8:08:08:03:dc:4a:b8:c9:c3:87:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42467B1885830A9908EAE67935311639B090AA77
Validity
Not Before: Jan 30 11:46:38 2025 GMT
Not After : Feb 2 17:16:38 2025 GMT
Subject: CN=39885214E34E2A78DE81A031DBA949BC93C7D6A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:68:0b:85:43:13:ac:10:65:df:3a:a7:eb:
ea:d0:2d:c8:14:59:0e:48:06:30:e9:bf:7b:29:37:
9e:f3:84:5f:08:19:54:97:42:4f:5e:80:72:07:df:
e4:a9:0c:e7:de:1b:8a:4b:d7:dc:2d:b9:6a:49:a4:
ff:ea:f8:b5:24:c7:49:5e:c5:11:34:d3:d7:e0:a8:
d7:db:ff:d7:f1:48:92:6b:ac:92:48:ce:78:8d:f6:
50:b4:d3:81:23:56:04:c8:94:2f:f7:21:36:e9:14:
44:fc:42:25:e6:1b:57:a0:62:94:92:a7:ce:15:6a:
4a:7d:53:09:75:05:bc:54:96:12:03:5b:2b:5a:13:
27:72:74:fb:f1:7e:fd:d0:85:04:2b:cc:a8:e7:ff:
77:7e:74:26:be:c6:81:9e:ef:51:e2:12:33:13:5b:
83:19:e2:a2:ba:d2:6a:d0:83:e9:2b:04:5c:10:a3:
d7:ab:b3:28:d1:f6:df:eb:3c:cd:94:4e:76:93:99:
e1:9d:7d:78:54:d9:9e:4c:93:e6:9b:f8:68:fe:05:
db:f1:59:a3:83:bd:4a:f4:e7:06:32:07:d4:69:9a:
72:88:c7:ea:64:4a:fd:d9:26:dc:7f:ef:68:f2:9c:
70:40:01:f1:0f:36:1f:01:f1:f0:75:8d:40:b9:8c:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:88:52:14:E3:4E:2A:78:DE:81:A0:31:DB:A9:49:BC:93:C7:D6:A3
X509v3 Authority Key Identifier:
keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d8:b7:85:b2:00:21:36:e3:7a:0e:5e:bb:e3:2d:cc:e4:48:
cf:3e:4d:c6:a0:c7:3b:6c:a8:b1:cc:da:1c:c3:d4:7f:d9:62:
8c:8c:81:1e:cc:3a:f1:5c:08:88:04:28:4e:5e:20:92:37:62:
a3:dc:ce:d1:ac:58:d9:bd:92:7c:dc:f8:0e:6d:7c:42:21:87:
b6:f9:b7:ae:b5:09:4d:db:64:9c:fc:cd:49:d8:a6:40:c0:d9:
6c:d3:be:9f:c0:93:6c:0f:c8:c9:3b:61:6f:0b:25:3c:db:03:
aa:ba:14:c9:11:79:06:22:c1:4b:ea:c4:8e:78:eb:32:9c:1d:
d2:cf:c1:c2:17:df:bb:7f:54:19:2f:86:0b:71:ec:0b:f6:29:
04:e2:ef:db:7b:73:86:8d:44:39:e3:bd:ea:36:16:30:93:e2:
41:43:90:b0:de:1d:28:ef:87:ef:95:8e:0e:67:b2:eb:93:8b:
dd:d2:ea:15:85:8a:5d:49:ca:dc:48:79:f1:3d:4d:81:c8:01:
1d:e7:3f:56:a7:dd:70:0e:8b:ab:c2:6a:80:d6:9e:a1:d9:6e:
38:9d:33:48:5d:56:c5:e0:0b:7e:e9:0a:5b:b1:5c:c8:13:d4:
76:b7:5f:0d:03:03:5f:39:72:4c:51:9f:55:da:26:17:c1:62:
36:cb:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:22 2025 by rpki-client