Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft
File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json)
Hash identifier: oPCHjiVile2X4pXCair6vNjRk321a/w14zEhQTqXPPk=
Subject key identifier: 40:5F:41:D1:DA:D1:BD:F3:8D:4A:3A:34:1E:1E:07:D8:C1:21:5B:0D
Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66
Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566
Certificate serial: 07808612691781301A5F2B1745907A9FA912E3E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft
Manifest number: 36
Signing time: Wed 29 Jan 2025 19:01:53 +0000
Manifest this update: Wed 29 Jan 2025 18:56:53 +0000
Manifest next update: Sun 02 Feb 2025 03:46:53 +0000
Files and hashes: 1: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: oREwhnRfJpb5xM97Y7it/Cn0AagIgA5NECofDOq9xZY=)
2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=)
3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:80:86:12:69:17:81:30:1a:5f:2b:17:45:90:7a:9f:a9:12:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566
Validity
Not Before: Jan 29 18:56:53 2025 GMT
Not After : Feb 2 03:46:53 2025 GMT
Subject: CN=405F41D1DAD1BDF38D4A3A341E1E07D8C1215B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:b4:bd:c2:01:5c:20:ba:af:d7:21:6e:df:
f0:2d:dc:53:a9:04:8f:25:ef:7d:1b:ee:41:73:90:
37:f1:a0:07:47:6c:7b:a4:eb:5d:14:5c:14:dc:6d:
23:bc:73:6a:62:3c:12:5c:a6:b1:52:78:8d:41:6b:
8c:1f:9c:9c:9c:85:9b:a9:48:9d:1d:04:69:03:2f:
18:b0:ae:b7:c4:81:55:24:4b:c2:57:02:f6:b7:76:
31:74:35:e2:a5:cf:bc:16:f8:d9:fd:5a:e7:82:d1:
62:2c:05:5c:d3:17:62:1b:a1:82:cd:64:1a:e0:ba:
15:4a:dd:de:df:af:6c:c4:70:57:fb:ce:0b:b6:ea:
ab:3c:50:47:28:07:23:53:7c:13:aa:16:1d:98:10:
5e:12:cc:14:b8:fb:7f:ac:78:79:f1:1d:cd:ea:c4:
cf:a7:67:6a:77:21:6b:e3:70:d2:31:7e:8b:88:77:
15:2a:b2:f4:36:48:9f:ef:ea:12:bf:b6:df:af:0e:
c7:23:a0:b6:64:1e:3b:0f:b1:ac:72:2d:98:4f:cb:
82:20:63:be:6f:92:9f:fc:5b:84:d4:a8:42:fe:81:
f3:80:01:8a:53:64:35:d7:2f:92:9d:1f:2d:cd:6b:
62:d4:45:8c:5c:42:32:60:42:31:4b:7e:82:4d:92:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:41:D1:DA:D1:BD:F3:8D:4A:3A:34:1E:1E:07:D8:C1:21:5B:0D
X509v3 Authority Key Identifier:
keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:80:1a:96:6c:32:31:01:06:f6:6e:f1:02:76:46:6d:45:30:
b8:11:29:c4:26:15:4b:38:ad:98:02:07:45:17:33:c4:58:4a:
13:72:73:a8:c7:f3:7f:15:da:f0:36:6f:50:e4:1c:82:f3:4c:
c6:5c:da:29:b4:8b:b3:4e:2c:f5:93:38:24:67:3c:14:e5:58:
f4:57:77:b2:e7:53:70:ed:6a:ad:2e:ed:be:5e:a3:1a:a5:17:
c8:37:79:93:85:94:94:d9:16:88:cb:85:a4:ed:0f:68:b2:c9:
38:54:d1:22:39:f2:26:59:8e:c9:74:d3:0a:6f:a1:9a:36:8d:
ee:cc:3e:7f:d2:f2:2c:42:d3:bc:cd:0d:8b:83:92:37:18:19:
fd:da:ae:7d:76:5b:89:8b:4c:fd:d5:4f:f0:89:55:28:0a:fb:
27:47:f6:7d:2e:28:3a:d9:9d:38:67:20:02:b4:a9:b7:b2:50:
64:e4:a0:66:4c:11:d7:de:71:17:3f:c0:48:b5:ad:11:42:e4:
2b:bf:7d:09:c3:46:4a:9c:50:7f:a1:23:26:78:2e:c7:4b:8d:
89:3c:b2:a9:5a:bb:2c:22:1f:91:5e:e4:cc:c6:de:c7:75:8d:
3a:37:e3:7e:57:99:7c:e6:92:c9:1e:e3:bb:fd:a5:94:8f:14:
6a:bf:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:43 2025 by rpki-client