Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft
File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json)
Hash identifier: ltvt+QEyd4KIl9lvvYInH9XAbruM5+lKX+x3eSTDoA0=
Subject key identifier: 42:57:A8:C2:36:4C:C8:FF:33:8D:BE:17:1E:DD:64:35:F0:76:49:76
Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D
Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D
Certificate serial: 204E32D9A8A25D14E3A91FF028DB8169CB256EB6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft
Manifest number: 04A6
Signing time: Thu 30 Jan 2025 10:31:44 +0000
Manifest this update: Thu 30 Jan 2025 10:26:44 +0000
Manifest next update: Sun 02 Feb 2025 18:10:44 +0000
Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: Xq/nk1aLkZ/Nl9N21WbLvcg8yh69WLzrt1dFMWGoW1k=)
2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: 8a/Bc144ZLCV/eZAS9z3Dkpqr80DtXfVnB1OulJyhdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4e:32:d9:a8:a2:5d:14:e3:a9:1f:f0:28:db:81:69:cb:25:6e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D
Validity
Not Before: Jan 30 10:26:44 2025 GMT
Not After : Feb 2 18:10:44 2025 GMT
Subject: CN=4257A8C2364CC8FF338DBE171EDD6435F0764976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:dd:be:fb:5d:5a:f2:d6:cc:23:1f:0f:64:
60:d9:3d:f5:53:b6:b8:c4:c7:28:dd:c2:42:67:87:
d5:d3:80:e6:c7:ee:e8:60:60:0a:da:70:25:0b:25:
7b:9e:f8:a5:2b:a3:79:44:f4:5f:5e:6c:c2:d1:f8:
f0:22:62:5b:71:fd:e9:c4:3b:91:bc:cf:ff:53:f3:
45:ca:04:ce:24:6f:3d:1b:f2:c3:5c:86:d0:c6:78:
0d:d3:89:67:dc:5f:6f:ec:b9:6a:6d:7f:e4:5e:0a:
72:df:b3:1b:e7:54:fd:ee:6c:57:64:63:6e:05:89:
f5:83:e9:eb:ce:c3:74:1f:e3:0d:55:71:30:ca:9d:
72:4f:ef:d4:9e:56:a2:af:04:8e:73:18:12:64:56:
22:94:6f:00:2b:fa:94:29:38:ec:51:1b:f6:a3:73:
77:2b:7f:c6:d5:95:9c:58:4d:bf:e9:25:66:9c:32:
ee:a4:c3:ec:10:b9:d4:a7:df:d4:78:97:92:b9:5a:
d8:52:f3:c5:7a:76:a6:d6:a1:e3:8e:92:41:c6:23:
84:33:af:7c:0a:dc:e1:e3:ac:60:e0:b4:2a:ae:ae:
3d:11:d7:4e:9a:ae:fc:b5:54:97:1f:2c:02:c5:64:
8e:17:55:29:61:dd:1f:61:af:1f:8a:48:5a:de:49:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:A8:C2:36:4C:C8:FF:33:8D:BE:17:1E:DD:64:35:F0:76:49:76
X509v3 Authority Key Identifier:
keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:89:44:49:38:a8:94:2a:ab:1f:5d:83:e5:cb:c4:e0:81:
df:d6:95:8c:60:27:2e:91:1d:0f:70:fa:e0:c3:1f:82:77:b2:
bf:36:a4:be:bf:c7:c6:a8:8e:84:9f:bd:72:01:59:00:6b:d7:
36:ab:fe:27:7d:3e:cb:04:be:4d:de:07:b6:57:bf:68:c5:43:
d4:46:0e:d0:b4:77:5c:d2:89:76:0b:f4:92:23:9a:35:ab:22:
bf:28:e5:09:44:85:92:8d:8f:b6:cf:90:3b:22:52:fe:d2:c2:
27:6f:7b:cf:cb:c0:bd:09:6d:14:e5:6a:99:07:f2:a2:0d:da:
52:02:84:23:a0:01:98:11:9d:3f:9f:ef:48:5f:36:61:88:48:
6d:ac:1c:6b:94:56:a5:2b:1c:c0:53:7e:16:b4:6d:26:0e:b1:
9f:e8:34:5e:56:2a:f0:03:3d:23:19:d1:d2:d0:2b:84:03:a9:
ed:b1:2a:81:55:61:96:bd:57:3c:0d:63:76:c6:9b:6a:1b:3c:
11:3f:02:51:04:52:5a:38:db:07:96:46:c8:27:41:cc:64:11:
7c:75:1d:b9:01:06:86:43:4a:35:ea:c4:8e:f9:ed:63:9f:32:
f4:67:66:32:7f:df:a1:8d:f4:45:37:ba:dc:1e:4e:d5:e6:ac:
25:03:df:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:56 2025 by rpki-client