Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json)
Hash identifier: KEhqG36eim5JBwnknmxpyYaGGzjA/hyup0z6HxFL8fM=
Subject key identifier: 76:45:C4:96:CC:10:51:F2:2E:F2:81:24:10:40:30:06:48:D7:AD:B8
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial: 02A7B18CC1F6FA2AF016B85E1670942876121AEF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
Manifest number: 04A2
Signing time: Wed 29 Jan 2025 18:31:04 +0000
Manifest this update: Wed 29 Jan 2025 18:26:04 +0000
Manifest next update: Sun 02 Feb 2025 01:38:04 +0000
Files and hashes: 1: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: F1X4boFtxn/EgnpkVQWCKt75oCjM/gmO/k75zwrcQVs=)
2: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: 2ZXLwwMPxmVjknI2iKMFD2lZAYMluEi1mcAfKCQw7NQ=)
3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: YpXfCL82On8UTAObXpsp+TSzduNgz0G+wsNlyOIz0pA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a7:b1:8c:c1:f6:fa:2a:f0:16:b8:5e:16:70:94:28:76:12:1a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Validity
Not Before: Jan 29 18:26:04 2025 GMT
Not After : Feb 2 01:38:04 2025 GMT
Subject: CN=7645C496CC1051F22EF281241040300648D7ADB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:a5:11:32:98:58:65:98:66:50:60:87:ab:
1b:59:72:f3:85:06:ec:a4:a0:ac:71:33:6c:21:97:
c1:24:db:af:6d:76:bf:ab:7d:f8:75:74:68:58:fc:
04:53:df:9e:a6:67:78:68:88:f4:e0:6c:52:e2:05:
42:60:9b:fa:a8:e6:fd:0b:fd:9c:9c:60:5a:8c:5f:
8a:34:a9:60:19:7d:9e:3f:1a:af:b5:33:43:5c:44:
3f:ac:59:fe:2d:88:63:05:ab:84:06:40:6c:d3:8e:
a6:03:5c:87:91:d9:a2:14:4d:c1:96:4b:65:a0:17:
b3:c5:96:6f:4f:81:11:44:8b:09:64:a3:fa:f5:aa:
09:a9:d1:f6:d1:be:6c:fa:c3:45:4f:30:6a:94:af:
91:97:a8:c4:b1:4e:e3:ce:af:fe:91:5c:e1:e0:5a:
b0:ba:0c:76:dd:d8:db:a7:32:23:29:66:e7:f6:dc:
da:1d:09:78:98:dc:ee:1c:79:84:85:21:8a:89:a1:
eb:44:bc:4b:34:a5:72:af:53:0a:e8:cd:1a:74:f3:
fa:f1:47:46:c9:1e:35:1e:ab:b2:5d:b1:7c:6b:ef:
f2:ea:6e:4c:64:f3:d7:2a:b0:1b:2b:fe:ae:1a:c7:
4f:e3:39:f1:dc:22:6c:e5:ba:d6:c3:31:a4:c3:19:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:45:C4:96:CC:10:51:F2:2E:F2:81:24:10:40:30:06:48:D7:AD:B8
X509v3 Authority Key Identifier:
keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:f5:8f:ec:d8:7d:5e:6e:d8:11:a6:a4:9c:a5:01:36:a3:
92:24:f5:d2:92:4e:0f:b0:1d:3f:98:94:ca:50:b0:2c:7e:80:
a2:e1:a7:1e:cf:88:86:bb:c3:2e:d1:71:f8:ce:0f:42:37:13:
03:7d:6c:78:94:85:8e:83:b9:30:2e:85:63:90:f1:74:b0:fd:
80:72:f1:b4:97:d0:c0:8a:e9:4d:b2:cd:90:90:c3:7f:22:1b:
de:51:ac:99:e1:34:51:40:a5:2a:3d:76:06:c5:fa:d0:8c:70:
92:54:aa:b7:73:25:e6:fb:9c:d4:28:94:b7:ca:df:32:c9:11:
15:c2:0b:8f:7d:af:f0:08:2f:cd:0a:91:6d:af:b5:90:74:f7:
02:3d:e6:61:05:2c:c4:f5:94:f1:01:66:18:1f:1e:01:64:6c:
12:25:8c:d6:94:e3:07:4a:d0:44:42:41:51:c8:16:61:8e:0b:
40:9d:8a:52:62:c1:8c:db:c6:37:cd:37:43:4d:9f:f2:b4:14:
98:75:b8:64:51:a5:26:f1:d1:49:5f:6a:08:f9:05:96:ae:a6:
f7:5f:e7:a6:b4:c5:af:2c:91:3e:8e:e3:b3:9d:24:9a:07:bd:
81:7e:bf:04:6d:2f:ba:3f:9b:41:30:9b:16:de:52:25:2d:66:
d1:a8:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:01 2025 by rpki-client