Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft
File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json)
Hash identifier: zkhdwprWzbZJJQJWtB7Jm9IgZJmws9DAgC7q3Omlvv4=
Subject key identifier: 21:78:56:B0:32:63:3B:1F:5C:F2:22:1F:75:FD:5B:90:5D:5C:60:5F
Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12
Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
Certificate serial: 599BB277EE52A992C4B7D94FAADE9E4CAC7FBE24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft
Manifest number: 014A
Signing time: Thu 30 Jan 2025 03:50:02 +0000
Manifest this update: Thu 30 Jan 2025 03:45:02 +0000
Manifest next update: Sun 02 Feb 2025 10:52:02 +0000
Files and hashes: 1: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=)
2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=)
3: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: SvFY4b0qQhVLaZMxYqcIf1Fsc9Q5keFaseuGzl58F68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9b:b2:77:ee:52:a9:92:c4:b7:d9:4f:aa:de:9e:4c:ac:7f:be:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
Validity
Not Before: Jan 30 03:45:02 2025 GMT
Not After : Feb 2 10:52:02 2025 GMT
Subject: CN=217856B032633B1F5CF2221F75FD5B905D5C605F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4c:54:2c:3d:80:51:83:c0:d4:e1:70:43:5b:
ae:c8:90:47:4a:2f:4d:9e:2e:85:ee:40:ca:bb:48:
3d:c1:1d:29:0e:cf:91:30:5e:f8:1a:2a:00:6c:0c:
ac:dc:85:e2:a0:1e:c3:e5:75:65:ab:77:73:9c:86:
24:2d:11:32:fd:db:82:16:b5:32:1f:15:0d:fc:6f:
79:d3:9e:ec:f7:c6:8a:a8:d4:44:a6:38:0d:8f:e9:
2f:95:9e:aa:0c:44:24:e3:63:1d:42:22:2b:e7:bf:
98:04:91:b4:42:bd:64:6d:5e:f8:44:c0:12:be:51:
72:6d:a4:3f:fe:f8:08:1d:ed:b9:0b:db:74:41:ed:
7d:bc:fc:72:f1:08:e0:0d:d7:f4:3e:0c:18:6a:19:
db:75:39:00:cb:cd:c8:e8:df:7f:0c:a7:3f:6c:b9:
3a:0f:fc:89:8b:7f:a4:43:d6:a2:bc:18:d4:17:78:
fd:9e:e5:35:42:ab:70:ef:19:f7:71:ce:e4:e5:83:
fc:43:1f:5f:06:70:d4:f8:01:37:43:a9:27:43:67:
99:72:76:9d:e0:46:ff:64:6a:ef:c4:fd:78:c4:71:
9a:46:17:ed:4f:72:57:60:be:45:31:ea:97:87:b7:
31:a8:2b:31:90:ab:42:bf:d1:ad:ae:56:81:55:a4:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:56:B0:32:63:3B:1F:5C:F2:22:1F:75:FD:5B:90:5D:5C:60:5F
X509v3 Authority Key Identifier:
keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:15:f7:1a:fc:0d:34:80:e0:b9:d5:63:9a:3a:26:46:35:9d:
ed:95:92:1b:df:0d:d4:5c:78:4d:59:03:77:37:95:a1:e7:ea:
90:7b:44:e8:56:1a:1d:65:d5:09:ed:8e:e6:fb:eb:7f:54:9e:
bb:a7:47:28:17:bd:11:e6:13:ff:c1:76:07:72:16:d0:8d:47:
4a:6f:97:54:61:bb:ed:1a:68:06:51:47:22:ec:8e:bc:10:7a:
c5:d8:d3:8b:27:bc:9c:0d:73:31:7f:9f:8f:69:6c:0f:28:74:
46:5c:ba:e6:5d:a7:f8:d1:68:f6:d8:c3:8f:ff:12:6a:c9:52:
f1:be:4f:d6:8e:af:b6:95:64:7e:8b:89:99:ce:e8:5d:03:64:
e5:cb:5b:ac:26:0e:cb:52:c6:c8:22:6c:e3:6a:18:cb:7a:a3:
84:41:dd:4d:d0:2c:a1:c6:db:ef:6b:a3:b4:a7:a2:53:50:eb:
f4:ab:51:54:34:43:98:98:90:32:c5:77:09:d7:59:d1:0a:4c:
bb:2b:b0:36:85:c4:45:83:cf:28:8b:89:6d:33:ff:bd:ab:63:
46:35:31:a7:0f:91:12:8d:39:29:22:2a:f9:3e:68:6e:ca:14:
25:37:c9:c1:39:27:31:73:7d:fa:46:b2:0c:a0:0a:a3:46:59:
e1:e8:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:48 2025 by rpki-client