Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json)
Hash identifier: qAorKTcbBIs/xQOqv3YtVYJ2ZENTzO9gpAsQ8IELW40=
Subject key identifier: 6F:61:18:E0:46:E6:1F:8B:4E:32:6A:7C:B9:EC:F3:64:70:85:FB:19
Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7
Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
Certificate serial: 664E7DF41DAFE7A36AAE3B87A8F1FA08CDC3A49E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
Manifest number: 0127
Signing time: Thu 30 Jan 2025 19:02:04 +0000
Manifest this update: Thu 30 Jan 2025 18:57:04 +0000
Manifest next update: Mon 03 Feb 2025 01:17:04 +0000
Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: IQTSHKQaKra+UgzgOVHWGx1p5BgAUnJAQTM4LbIdZm4=)
2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: mvaN8XLvKPCnEJm4vDmbpI0VnR/980VlcmdkNSSA5kU=)
3: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: LsWFyeKdfgBe/iPPZkWGpv1VWX1qt3/E1kTKxdlR6Ys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4e:7d:f4:1d:af:e7:a3:6a:ae:3b:87:a8:f1:fa:08:cd:c3:a4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
Validity
Not Before: Jan 30 18:57:04 2025 GMT
Not After : Feb 3 01:17:04 2025 GMT
Subject: CN=6F6118E046E61F8B4E326A7CB9ECF3647085FB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:74:b7:80:7f:e3:0f:ea:86:d6:f7:10:88:
7b:eb:7c:f4:16:a1:d4:18:93:ef:7c:de:99:8b:be:
11:d7:4e:f9:c9:e2:07:a9:63:08:0f:4c:fb:b7:3e:
2e:a6:46:5a:5e:21:c1:ab:d7:29:73:fb:58:a5:da:
c1:c3:df:b0:5d:68:a7:45:da:59:bd:b7:5a:0d:2b:
da:c9:43:4b:c6:28:5c:e0:da:44:63:24:1c:c7:c9:
03:39:2c:60:28:b8:37:27:06:4b:ff:bc:ad:35:a4:
84:3c:3f:49:e1:d8:01:1a:e0:28:22:54:00:7d:e7:
64:7f:75:47:6e:82:d8:52:f4:6c:5e:c4:3c:c3:5d:
4e:fd:26:da:2f:c3:89:30:44:47:c2:dd:87:a4:f9:
be:7a:72:b0:2a:eb:c1:a7:be:a9:ca:e6:2d:ae:b7:
79:3d:a0:20:ba:ea:53:b4:f0:4a:ed:4a:01:ce:65:
5f:87:08:86:2f:f3:f7:89:8c:72:cc:9c:64:a7:c4:
cc:4a:5c:55:09:62:d5:15:65:4a:bd:66:70:3b:18:
69:3a:8d:78:82:27:73:e5:bb:f5:d9:50:7b:fd:13:
27:cb:e5:14:4d:b7:d4:c5:d9:a5:3e:42:fb:de:3b:
87:b2:05:b9:c6:5b:b9:a5:5c:74:f1:b6:41:aa:39:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:18:E0:46:E6:1F:8B:4E:32:6A:7C:B9:EC:F3:64:70:85:FB:19
X509v3 Authority Key Identifier:
keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c7:fa:4f:f3:21:a4:73:89:41:09:f7:e5:a0:8a:80:91:30:
8d:da:5a:1b:15:cd:71:37:b4:81:29:cc:f9:e2:a6:b8:cd:df:
02:af:2f:7e:ba:69:4f:30:4c:56:53:50:ce:91:48:e6:6c:d1:
58:63:92:3f:25:c4:56:d1:12:ef:ae:b3:8d:80:2d:8f:fb:e1:
37:e1:1a:ba:90:8b:85:e4:23:51:a5:db:93:d6:7d:62:81:4d:
de:d9:3e:a6:f4:8c:85:c4:8b:db:86:f2:ad:ff:e5:51:33:14:
74:16:d0:46:74:bb:af:e6:25:ca:56:1a:9e:b6:b3:3f:ce:ef:
fe:74:b4:84:8f:15:3d:4f:84:24:4c:5a:d6:31:5b:d2:cf:a6:
4d:d0:b8:f6:50:6f:44:a8:99:42:c5:75:29:be:d2:c0:ce:ba:
6a:68:ae:17:d3:0d:8e:c9:6c:05:48:f3:61:35:a6:68:12:00:
ff:ca:bc:43:c7:08:c8:57:8b:24:1f:33:d3:86:ef:47:6c:5a:
60:44:34:77:7e:de:3f:9f:35:63:0a:05:29:9f:f8:b6:a2:f5:
e8:a6:9a:75:58:40:9d:d5:c7:03:7c:d6:ad:c1:cf:46:4b:d9:
e3:aa:c0:2c:ae:ae:0c:dc:00:af:fe:c9:33:07:2e:87:ef:2f:
b8:7c:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:49 2025 by rpki-client