
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json)
Hash identifier: rALPKei1xi+kRjKU0BVtD1Hh8BU5mWvs3JZOX7qxtV4=
Subject key identifier: 9E:54:CB:2F:8E:FC:E5:2A:CB:CB:C2:36:8B:E0:43:A7:C7:5E:E1:7D
Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6
Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6
Certificate serial: 2A4EF5F7AA57FFF6076F052D36CC3F93889D1F25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
Manifest number: 0225
Signing time: Thu 30 Jan 2025 15:11:58 +0000
Manifest this update: Thu 30 Jan 2025 15:06:58 +0000
Manifest next update: Mon 03 Feb 2025 02:30:58 +0000
Files and hashes: 1: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: FZ/KfA+DxAG+ZTg7U2MfltXt2h3VuKki+CieBBB2iIU=)
2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4e:f5:f7:aa:57:ff:f6:07:6f:05:2d:36:cc:3f:93:88:9d:1f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6
Validity
Not Before: Jan 30 15:06:58 2025 GMT
Not After : Feb 3 02:30:58 2025 GMT
Subject: CN=9E54CB2F8EFCE52ACBCBC2368BE043A7C75EE17D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:42:dc:c5:82:0f:f0:3c:f9:d9:b7:aa:d6:
d8:ba:1f:52:5c:06:c3:fe:9d:2c:44:a0:a8:7a:9b:
8d:39:25:43:43:02:15:c7:e9:5d:ad:f0:84:a4:d3:
8e:ca:5b:68:92:f2:2d:9a:59:b3:1d:cd:de:7b:b3:
b3:3c:2a:32:6a:55:9b:55:e2:d9:ab:26:fc:7a:01:
33:bd:e2:2d:43:56:bd:5f:6d:e0:1a:3f:7a:1c:47:
4f:cb:4b:b1:2c:7a:f4:e2:27:51:b6:c3:e4:0e:db:
e4:1a:f9:bb:ce:20:c5:e4:ff:20:a8:78:26:e6:77:
5b:cb:dc:32:52:b8:ae:ee:fe:2a:b3:98:a2:e7:d3:
1a:05:69:f0:97:e3:c8:6c:d4:34:da:b8:ca:aa:f8:
d0:f5:76:bd:2a:5f:9b:a8:2f:38:40:c4:48:18:fd:
f3:f8:a5:14:dd:57:9f:43:12:6d:5d:45:8f:1b:a7:
e8:b7:bc:dd:89:a4:a9:49:53:4e:0a:9c:6b:82:36:
d5:9d:a7:6e:a6:e3:b5:ab:27:2e:18:84:04:2e:50:
43:78:b3:81:5e:25:0a:cd:34:5f:50:50:4e:42:bc:
14:46:1f:d0:48:74:26:c1:30:4a:49:a7:25:c3:be:
b5:47:d5:11:bc:7f:88:9c:13:8e:08:a5:bf:4d:8b:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:CB:2F:8E:FC:E5:2A:CB:CB:C2:36:8B:E0:43:A7:C7:5E:E1:7D
X509v3 Authority Key Identifier:
keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cf:65:21:23:90:10:4d:d9:48:ae:1c:79:2d:07:81:d7:60:
58:b9:d5:64:8f:b1:97:55:17:79:d9:37:47:9c:b8:8a:1a:09:
cd:63:fd:ca:bc:34:2f:b9:f4:f1:db:9e:77:95:67:d3:ec:1b:
b1:df:32:65:a7:86:1b:64:50:43:05:59:ae:23:61:9b:36:d1:
a0:59:be:ad:72:6c:fe:8a:5e:19:bd:dc:82:ee:d4:3d:3e:5d:
27:c4:72:1d:fc:71:bb:cf:21:bc:10:b7:7b:c0:12:a9:98:ce:
86:b3:7c:5e:47:e4:6e:cb:62:60:4c:00:50:1e:bf:9c:e2:cf:
aa:a3:e8:6f:4b:23:66:11:f6:9d:4d:27:e3:e0:3a:65:6e:b7:
14:26:7b:7d:22:c4:3a:e2:f7:47:2a:a9:c2:3a:f3:79:54:3f:
95:d4:b6:45:2f:19:e8:e6:fb:f2:34:fa:17:ec:ad:97:e8:79:
38:d9:a2:22:23:8c:94:79:78:03:2f:9a:33:eb:43:70:17:09:
59:7d:56:8e:51:a0:d0:42:4f:e7:d1:34:13:41:42:5c:9d:86:
c6:4c:c0:28:9c:a2:35:ae:8c:f6:6f:81:25:e1:11:3a:95:10:
59:05:9d:fc:61:82:ae:43:08:3c:51:93:a5:a2:ca:b5:93:c3:
53:75:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:23 2025 by rpki-client