Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft
File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json)
Hash identifier: 38mNkMuTz5sV4ly88qQ+7gvk/tZ0KitK3sIsZnyY/Mw=
Subject key identifier: 2D:85:B3:86:76:66:25:FB:55:87:7A:AC:A7:84:A7:2E:67:D5:FE:B9
Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49
Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49
Certificate serial: 3E114E20B26A95C23C2DC97D2655941D99CD7FF6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft
Manifest number: 0212
Signing time: Thu 30 Jan 2025 02:30:03 +0000
Manifest this update: Thu 30 Jan 2025 02:25:03 +0000
Manifest next update: Sun 02 Feb 2025 14:08:03 +0000
Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=)
2: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: 2lF1xPrpXvH1vsiRfn/tro9Kbs2vAT1xzciLnnnHseA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:11:4e:20:b2:6a:95:c2:3c:2d:c9:7d:26:55:94:1d:99:cd:7f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49
Validity
Not Before: Jan 30 02:25:03 2025 GMT
Not After : Feb 2 14:08:03 2025 GMT
Subject: CN=2D85B386766625FB55877AACA784A72E67D5FEB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:6a:9d:52:8b:fb:ad:37:d3:09:ea:18:f5:
dd:65:86:a2:2b:3a:c8:fc:44:da:53:66:fb:60:7b:
98:8d:5a:8e:41:b6:bd:8f:13:db:d4:57:ad:09:88:
60:bb:0f:d4:0c:34:ab:c0:94:f1:22:8e:8d:5d:d9:
4d:e8:c2:98:20:40:e8:2b:84:63:9b:9f:ab:08:10:
41:cb:02:b1:25:13:95:86:0c:cb:c6:95:85:36:77:
70:c8:57:b0:f4:4f:b1:74:7f:90:58:d3:42:95:7e:
65:b1:7b:12:df:68:20:6b:37:f4:61:18:d0:a4:01:
1b:59:05:44:5d:6f:19:68:8a:c5:30:12:8e:3b:de:
0f:9c:78:98:dc:df:64:1e:66:de:16:2a:96:60:17:
9a:41:9f:01:37:9e:cd:64:71:f6:11:59:8e:a0:1c:
6f:df:42:cc:17:a8:b6:4c:0d:1d:68:e1:74:50:b9:
0c:13:4b:2f:8e:0a:83:11:84:4d:23:42:e1:a6:aa:
e1:25:3c:68:a5:e0:1e:e4:86:f6:b4:8f:be:1e:b2:
80:25:77:6d:5f:28:07:5e:4d:72:cb:32:15:84:64:
df:6b:21:68:62:4e:a4:2c:aa:a5:6e:66:4b:06:1e:
f6:12:79:ed:de:48:ef:9d:fb:ee:7e:c8:80:1a:fa:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:B3:86:76:66:25:FB:55:87:7A:AC:A7:84:A7:2E:67:D5:FE:B9
X509v3 Authority Key Identifier:
keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ab:bb:dc:12:91:b0:f4:4c:c5:0a:a4:96:b9:77:44:2d:1a:
f1:19:14:d9:1b:01:2c:bb:d0:7b:e2:b6:38:b0:1d:08:0d:40:
4b:39:b7:1d:91:03:61:31:14:8d:86:0a:9e:38:dd:8b:61:bf:
3d:1e:87:0e:52:33:02:04:6b:9e:6c:92:7f:42:a1:14:e1:ad:
7c:ec:c0:f2:0d:50:9e:b3:89:3c:99:78:24:c0:a8:13:7c:01:
69:5f:38:39:18:39:37:a5:af:c8:b6:83:aa:01:26:f2:60:4f:
8e:4b:21:ff:97:89:3f:32:08:df:43:2d:34:b4:1c:26:82:84:
78:12:50:30:98:3a:60:9f:1e:f7:70:b8:c5:04:b0:f0:51:0a:
7a:5d:bb:76:c1:4f:e9:ac:78:30:c4:74:b6:de:a9:bc:0b:c3:
3d:b3:fc:8c:5d:66:52:6f:9e:e2:d6:ff:da:f4:53:fb:98:29:
85:1e:03:78:cb:26:5e:e3:0a:77:e1:4b:5d:38:55:f9:b7:3a:
2d:fc:11:81:90:2f:bd:45:80:1a:93:86:dd:8f:4b:ce:02:9b:
48:8f:d9:6b:23:15:fc:9b:83:88:6a:87:2c:82:f4:92:39:08:
b1:6b:b7:77:1f:fa:6c:f0:54:df:d3:90:08:b0:47:06:06:2c:
c1:03:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:57 2025 by rpki-client