Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json)
Hash identifier: 7S1/I3OoKbBSAxuZhfQZHKdpWCsee2iOhYB2dMTEAvM=
Subject key identifier: 72:E9:44:70:11:5A:DD:DA:CC:2A:A4:86:7E:1F:C4:C5:D5:C1:3F:A2
Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Certificate serial: 719B3B9B94D1FC0C4CBC61E1DA4314F9D6A9E444
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
Manifest number: 30
Signing time: Thu 30 Jan 2025 12:31:48 +0000
Manifest this update: Thu 30 Jan 2025 12:26:48 +0000
Manifest next update: Sun 02 Feb 2025 18:04:48 +0000
Files and hashes: 1: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: iziNbMfSG5lJ/Wc6NMmyz4JELED2OvK44piqUsCFc7c=)
2: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: +JichmiRgdBO5Ls93QqucE3C6EV+z6Am+M+Wk0rjli0=)
3: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: DGlwkwMRYPa7jjJ5Evjp1gml28gW59fTs+h/EjF9IJM=)
4: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII=)
5: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=)
6: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: 2GYoGVGasxR8uDpvI7BrmDmU9LmzA4rGOfrvv4FSPFU=)
7: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: eJ9GbsoPpuqjf9GV+xkr8k7F5h0W8otETbBjey1b6zQ=)
8: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: rou4lQQn7ojgWvv4wv09Ssy99ZSAyWazNJbw+IJaxNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9b:3b:9b:94:d1:fc:0c:4c:bc:61:e1:da:43:14:f9:d6:a9:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Validity
Not Before: Jan 30 12:26:48 2025 GMT
Not After : Feb 2 18:04:48 2025 GMT
Subject: CN=72E94470115ADDDACC2AA4867E1FC4C5D5C13FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:a9:71:61:d4:8d:f0:77:01:f2:2b:1d:63:
91:62:b9:13:07:94:26:ad:3c:12:1e:8b:59:e9:cf:
37:1c:51:9c:60:09:6b:3f:8b:15:d6:a0:08:ee:02:
75:35:21:5a:0c:38:1a:08:22:cb:b1:b9:4c:d0:00:
c9:3a:ea:0f:a0:b4:1d:a3:50:e0:b6:eb:1a:b9:86:
80:62:4e:82:c5:15:99:25:30:a1:f9:ae:d7:45:d0:
1e:c0:82:da:6f:fc:93:40:77:5b:fd:b3:20:7e:10:
8b:d7:0e:7c:3b:2b:07:f5:f4:f8:d3:a2:fa:f3:5d:
d8:19:4f:ea:84:c2:a3:60:15:3b:5b:e3:9a:22:ca:
ba:0d:eb:3b:0c:76:ba:89:96:06:b4:6b:b3:c7:4f:
62:5d:97:90:db:0e:a6:19:aa:1b:57:a7:00:89:70:
81:58:24:46:1b:f6:ee:f5:1b:0e:80:5d:2d:5c:e6:
1f:5d:56:9c:14:9c:32:6d:36:8d:39:7a:a7:da:1e:
e4:da:ad:65:f9:94:75:f4:f5:fa:bb:41:fb:b5:40:
d6:65:50:7d:75:41:10:ff:e9:97:65:b5:fe:34:a5:
f7:03:4f:ea:00:a6:aa:cb:bd:0d:45:b8:58:b5:80:
ae:6d:ae:b1:e2:c0:7f:78:c8:3a:b6:f9:3d:5b:98:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E9:44:70:11:5A:DD:DA:CC:2A:A4:86:7E:1F:C4:C5:D5:C1:3F:A2
X509v3 Authority Key Identifier:
keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a7:5f:f5:29:9c:7c:11:b1:de:ed:9d:f2:19:3b:ef:88:b2:
72:a6:6f:36:db:be:92:1e:e7:8b:69:61:e0:8a:be:80:f8:52:
ff:87:96:58:dd:4f:92:c9:b5:9f:d9:54:23:8f:ac:ef:16:90:
9e:08:c1:46:8a:a1:81:ff:e2:60:4b:95:bf:b3:33:f2:5c:d7:
25:89:37:6b:20:88:e0:bf:f7:55:4c:ee:a4:ff:7f:23:06:41:
11:d8:e5:ba:1b:f4:a7:aa:ef:41:d5:20:3e:e3:e0:70:10:a0:
c5:5b:e7:24:54:4b:4f:2c:75:f6:a1:df:b9:a3:a0:7f:31:a3:
8f:49:73:74:5b:d0:64:00:4c:ce:74:af:cd:b1:b0:42:11:e8:
94:13:6d:9a:6b:84:30:86:b5:4b:3f:12:eb:f6:d7:a3:13:81:
92:4f:e3:11:b6:d2:b6:6f:44:c7:23:c2:05:b7:9b:83:1c:6d:
9c:21:87:06:27:40:b5:90:e4:20:9c:62:6b:ff:46:96:12:11:
87:2b:83:90:b9:1d:c1:f2:75:6e:2f:92:1e:85:5d:97:33:03:
51:12:b6:b9:d1:05:31:76:e1:16:12:2e:7f:64:2b:a1:a1:23:
9c:aa:c4:a8:4a:c1:4a:af:ad:6d:d3:53:54:3b:02:9f:e3:2d:
23:78:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:16:06 2025 by rpki-client