
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json)
Hash identifier: 66Q+XqNkd/zfXmR90RRP8NjYk2AAGLQ3mWFJqzsz9qo=
Subject key identifier: 77:86:B1:C5:77:64:30:79:BD:20:DD:25:CA:ED:00:DD:60:52:5F:12
Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D
Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
Certificate serial: 5939880199EEB1CE92888883C7FB4C808DEB5A57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
Manifest number: D1
Signing time: Thu 30 Jan 2025 01:41:01 +0000
Manifest this update: Thu 30 Jan 2025 01:36:01 +0000
Manifest next update: Sun 02 Feb 2025 13:28:01 +0000
Files and hashes: 1: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: KlwKO/osO1Lagm1PhUVOaYjVPJdYbnqNb/S340we03g=)
2: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: yyvOSuJ6EquLIxsFIaOuF4FfX3PA8e054pdmMj30y8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:39:88:01:99:ee:b1:ce:92:88:88:83:c7:fb:4c:80:8d:eb:5a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
Validity
Not Before: Jan 30 01:36:01 2025 GMT
Not After : Feb 2 13:28:01 2025 GMT
Subject: CN=7786B1C577643079BD20DD25CAED00DD60525F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a8:18:39:43:f8:cb:3a:04:8d:ce:41:66:64:
3c:ac:9d:33:e3:b0:21:92:62:9d:42:8d:31:5c:93:
88:87:99:90:8e:40:49:27:d8:1d:d5:fd:a6:d8:f7:
50:49:84:67:52:d9:5f:aa:f1:6a:d2:b8:90:ab:1b:
36:d2:9e:cc:0f:5f:93:d9:3b:43:89:2f:9b:b4:0a:
eb:a5:69:81:80:36:4e:3c:83:bd:b3:6c:e6:ad:d6:
e0:49:a4:5f:f4:b2:65:de:17:a3:68:13:24:04:76:
39:ef:07:99:cb:33:cb:66:0a:37:be:60:57:43:f3:
1e:4c:76:60:a7:91:96:c3:59:e8:c7:a9:e3:bc:48:
5a:6d:5e:80:bd:16:17:2b:f8:8d:22:92:d0:c9:59:
a1:07:c5:c1:c1:40:33:55:fd:8a:35:91:8e:67:3f:
88:ad:c9:b3:87:1c:e8:e4:6f:c6:a0:a1:46:df:21:
ca:b3:d7:db:85:a9:1f:6e:07:55:06:bf:6a:25:1f:
d3:17:da:6f:47:e7:da:14:5b:14:3c:4e:17:51:3e:
74:c3:34:52:32:c4:6a:f0:76:6b:a3:81:9b:ed:cb:
28:62:52:ee:e8:7d:d6:05:23:7f:00:fa:93:db:fd:
66:c3:36:85:59:1f:48:9f:44:0a:94:14:cc:c9:c3:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:B1:C5:77:64:30:79:BD:20:DD:25:CA:ED:00:DD:60:52:5F:12
X509v3 Authority Key Identifier:
keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9c:44:3e:8c:f9:c4:95:2a:94:5d:5a:19:0d:62:db:14:c5:
72:93:86:89:8e:d9:55:56:2d:0d:57:d7:d2:51:bf:c5:a3:dd:
95:51:9f:9b:e5:37:38:bb:1b:ce:e9:6b:dc:d1:62:d8:16:59:
b8:83:f2:d6:32:ee:43:44:01:8a:f6:ad:c2:0d:3b:c5:f2:bc:
cd:b3:4a:60:48:c4:f0:f1:28:83:72:ab:18:ae:5c:a3:b9:b4:
20:f6:f9:2f:77:66:b8:3a:d3:7d:98:66:ab:8e:07:9f:8b:32:
d9:a7:28:da:72:67:7d:58:04:8b:92:85:1a:a9:d7:3b:42:e2:
25:c1:16:43:6f:60:17:b7:7c:9b:58:91:92:59:bd:e3:3a:46:
2d:d1:e9:7e:dc:f8:82:0b:63:66:4d:82:1a:93:71:2c:69:e2:
8e:14:4b:8d:96:ef:2b:e9:3a:f5:2f:19:b7:fb:b0:39:97:cc:
1c:49:3b:4a:ae:ff:b5:2e:20:d1:55:b5:c4:21:36:2e:48:b9:
aa:89:8d:86:43:b2:c4:32:6c:40:fa:08:ed:31:e5:31:bc:73:
f0:b4:e1:8a:f3:9e:b9:46:0e:5a:a0:17:43:8e:11:85:c4:77:
97:40:d8:85:94:41:e6:0c:0f:bd:e8:60:27:ab:7f:33:e3:9f:
d2:a8:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:42 2025 by rpki-client