Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json)
Hash identifier: IH3BJ2bXwV0VzOHOVEHmAno3kqo/wgr04odpYgul62Q=
Subject key identifier: 1C:A8:2F:92:56:6B:13:39:4A:CD:C8:D3:D1:80:C5:61:27:BC:82:3D
Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Certificate serial: 6D54D620FD6B5DC3A97A94609268EC5C582E4782
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
Manifest number: 4E
Signing time: Thu 30 Jan 2025 19:00:01 +0000
Manifest this update: Thu 30 Jan 2025 18:55:01 +0000
Manifest next update: Mon 03 Feb 2025 04:07:01 +0000
Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: Bsi5ut9FK5xe5YKphYGKOzzU0YP9kocMIYsDZZJspNE=)
2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: Ga+yghCCzynYQRLXxC8Ud9CUE2ETMSKZ2vuWiIruJEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:54:d6:20:fd:6b:5d:c3:a9:7a:94:60:92:68:ec:5c:58:2e:47:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Validity
Not Before: Jan 30 18:55:01 2025 GMT
Not After : Feb 3 04:07:01 2025 GMT
Subject: CN=1CA82F92566B13394ACDC8D3D180C56127BC823D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:e6:25:ff:db:29:dd:4c:1f:10:be:1a:a0:
9d:7f:60:df:0a:a0:26:1d:04:7b:7c:bb:9c:ad:ef:
15:49:e6:74:fb:ff:56:c1:b0:e5:f4:89:3c:8f:38:
a5:1e:31:57:53:87:a7:df:8b:22:14:62:da:1f:4b:
a6:ac:a6:70:80:ab:d1:0d:70:85:a2:67:cb:d0:4b:
cd:ca:7a:a9:65:d8:98:35:83:b1:65:1c:ac:50:72:
f2:30:e6:ba:d1:c3:9b:ef:85:57:ab:76:9f:52:e3:
b4:bb:f3:ee:25:ce:4c:42:7e:fa:d4:fc:18:28:f8:
83:5c:00:10:27:ba:be:31:7a:ee:77:41:cf:0a:81:
51:89:94:cf:6b:4e:4e:0a:10:5a:db:4a:96:0a:7b:
93:5d:b5:54:16:a9:52:c2:f0:ec:89:82:96:46:d6:
46:09:fc:fe:3c:b8:57:1c:31:d9:5e:5a:32:29:ef:
fb:ed:59:d6:fc:18:05:29:4d:55:db:d4:59:ce:ff:
7c:91:4a:86:94:11:02:b4:77:bb:72:63:92:df:3a:
3c:4d:c2:57:b2:e0:20:73:3d:7b:ba:73:36:59:74:
50:92:99:86:a7:b0:42:78:c2:6f:50:a9:00:b4:7d:
57:31:28:49:90:2c:8a:5d:88:2e:fa:ac:0d:d1:f0:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:2F:92:56:6B:13:39:4A:CD:C8:D3:D1:80:C5:61:27:BC:82:3D
X509v3 Authority Key Identifier:
keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:37:d1:23:a9:40:d8:17:52:45:55:84:16:3a:7b:8d:15:82:
17:bb:6c:f1:f9:46:a4:18:33:f6:41:c9:f3:d0:1a:f5:27:0a:
41:04:de:5c:51:df:1f:ea:15:6e:1c:62:4c:70:21:ad:ad:e4:
9f:fd:21:fe:27:09:d0:11:71:d7:02:c9:87:8d:52:25:e5:d0:
49:4f:a7:fd:a8:62:64:d9:4f:bb:24:15:f8:bc:7d:ff:3c:6c:
aa:fe:8d:8b:76:b0:af:8e:cc:f8:e8:c1:4e:9c:ec:09:0d:3d:
44:a4:de:94:24:5a:12:b6:75:bc:b6:eb:45:a7:8a:1c:41:0b:
3c:a6:25:26:a0:63:6b:2a:38:ed:bd:69:13:98:63:eb:f6:68:
4a:b6:d6:7b:31:76:3d:65:fc:4c:2a:1b:6f:76:3c:43:7a:b9:
b6:44:d5:69:c7:40:21:ef:f8:d2:40:e7:f0:d2:fc:1e:da:a2:
08:8c:32:f8:2c:46:8c:63:32:e4:fc:fc:c4:c5:6f:17:08:bd:
ba:c7:21:fc:03:5a:26:7f:30:0d:c3:78:fb:54:1c:95:34:35:
64:59:38:2f:f8:b7:56:94:c8:47:7d:64:c5:cb:f2:e1:2b:22:
0f:e3:cd:f8:b7:21:5b:93:6e:d1:d8:6c:cc:7e:79:0d:1a:b6:
75:ef:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:58 2025 by rpki-client