Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json)
Hash identifier: XVKLBqh/lQgF5tBIASVC7XQydj4gcn4gJ9OEOR7NfeI=
Subject key identifier: E1:D3:43:02:5F:85:65:D0:1A:2B:5A:DC:39:5D:E0:27:32:37:4F:43
Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Certificate serial: 4F4121A7DC75BDB56B1BA1EC0D870C3CA90AD73E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
Manifest number: 0131
Signing time: Wed 29 Jan 2025 14:20:34 +0000
Manifest this update: Wed 29 Jan 2025 14:15:34 +0000
Manifest next update: Sat 01 Feb 2025 22:35:34 +0000
Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=)
2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=)
3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: aX++wXQwfHIKrg0NmuT0m3Y8yn3DmkaXT9yE2g29e50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:41:21:a7:dc:75:bd:b5:6b:1b:a1:ec:0d:87:0c:3c:a9:0a:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Validity
Not Before: Jan 29 14:15:34 2025 GMT
Not After : Feb 1 22:35:34 2025 GMT
Subject: CN=E1D343025F8565D01A2B5ADC395DE02732374F43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:86:13:68:3c:69:8d:22:f1:97:b2:07:bf:
2a:28:0a:01:8b:b5:f9:62:2d:82:dd:11:70:29:36:
ab:24:e4:db:ef:13:9f:22:9e:91:82:76:93:3b:54:
8d:3c:d1:a9:5a:55:d6:46:54:b6:8a:87:52:64:f4:
2e:79:eb:44:d9:f7:53:3e:76:22:5b:4d:14:52:b7:
3d:0c:5f:1b:c5:fc:6b:84:c5:a5:25:35:26:56:84:
91:a2:dc:9d:18:05:d2:4b:4d:83:02:75:68:70:3c:
22:0b:a4:b7:29:8e:75:b1:34:5a:24:d7:87:20:46:
4e:f8:68:cc:d3:c8:41:9c:3a:8f:23:3c:fa:4c:7d:
5c:8f:b0:01:06:01:70:88:e8:8b:85:53:fd:a3:96:
80:10:e8:7e:67:8f:68:92:90:61:fc:95:6f:e4:43:
5d:5b:b0:d2:ca:f8:3d:fc:7b:d2:fb:17:2d:d7:a0:
ea:f8:d8:8c:21:03:5a:26:c8:e6:b9:7b:80:46:ef:
25:07:86:04:80:4d:b2:7d:2d:21:24:47:42:15:c2:
eb:53:fc:c9:51:0e:5a:24:95:d3:5e:5f:d0:66:14:
72:cc:45:0c:8d:56:26:77:c7:fe:7a:50:90:fb:c0:
2c:44:ca:a6:ae:b3:ac:ad:72:19:6a:2b:88:a5:57:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D3:43:02:5F:85:65:D0:1A:2B:5A:DC:39:5D:E0:27:32:37:4F:43
X509v3 Authority Key Identifier:
keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ed:d9:9a:bb:d9:7f:13:f4:b6:ca:0c:49:9c:67:69:70:09:
ae:04:c1:47:31:14:12:dc:e6:8f:d4:22:54:c5:2b:5f:7e:4e:
d3:87:50:78:0a:0d:2d:af:52:56:a7:4f:e4:3c:c3:e8:53:93:
86:2a:4c:ce:c6:28:df:47:07:9f:17:29:f2:a5:f0:43:de:b4:
fc:bc:56:e1:6a:c8:ab:72:d7:a3:89:77:b3:13:67:b2:e5:61:
e9:ff:c8:44:02:4b:16:38:c4:85:a1:16:b5:de:3d:bc:ec:07:
fb:b9:4d:63:91:69:61:a4:d3:be:87:9a:d1:98:4a:3e:0f:e5:
bd:9c:ec:b1:b6:aa:09:af:b4:20:54:4c:24:a4:f0:20:02:15:
d0:2d:7a:2b:2f:a9:68:7e:5a:6c:ac:99:cc:4a:46:f5:53:5d:
fa:48:e6:55:58:35:2b:bc:fb:d4:16:64:77:db:13:08:cf:2a:
e5:b6:1a:2a:d8:9a:e9:2e:46:6d:07:cf:8b:1c:5a:ec:e0:45:
bd:d6:1b:50:7d:aa:de:47:86:7a:8e:dd:b9:87:ab:92:43:bd:
f4:42:c9:96:18:e8:44:2b:a9:c4:86:35:ea:cd:88:5d:9d:10:
48:c0:b2:7f:93:b8:c7:32:45:5b:92:5a:4e:fa:dc:95:0e:40:
a4:f0:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:27 2025 by rpki-client