Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json)
Hash identifier: Csi3G7y/pgF323H1+4VtzVPNqMnIeaBJDdELxgnKzxM=
Subject key identifier: 9C:A3:D0:58:5F:49:2B:6B:77:F9:46:A1:AD:2F:CB:BC:6F:39:DC:44
Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6
Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6
Certificate serial: 09189E054A1CF85B4AF25B883E45589CADABD7CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
Manifest number: 01A3
Signing time: Thu 30 Jan 2025 19:12:15 +0000
Manifest this update: Thu 30 Jan 2025 19:07:15 +0000
Manifest next update: Mon 03 Feb 2025 05:28:15 +0000
Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: JqNOb/yyQWbTFNo879uxezvJAKFYdMc5vm9FwqAicdo=)
2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: WWriWeA3IaXNty1la2ypkHMEec74jg9qZJFO3PFS51g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:18:9e:05:4a:1c:f8:5b:4a:f2:5b:88:3e:45:58:9c:ad:ab:d7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6
Validity
Not Before: Jan 30 19:07:15 2025 GMT
Not After : Feb 3 05:28:15 2025 GMT
Subject: CN=9CA3D0585F492B6B77F946A1AD2FCBBC6F39DC44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:29:dd:0e:6a:a2:0f:a6:82:90:11:41:36:56:
2b:be:47:d9:61:a0:da:5d:8f:37:71:fb:23:f7:5f:
b1:0c:a3:b5:0d:54:8b:cc:99:f6:7e:d1:63:6e:b7:
bc:b5:33:37:cc:39:54:55:78:70:9c:22:09:e1:4d:
f9:be:a7:75:b0:97:aa:b0:ea:7e:2b:cb:7d:a2:de:
bd:e2:34:59:45:a0:5d:fe:d3:ac:c3:eb:59:74:17:
73:07:35:3a:6e:40:14:b8:2b:30:a5:82:07:ac:7f:
eb:a3:30:3b:14:2d:96:c1:c1:aa:55:63:8d:bc:56:
e6:50:68:b9:82:55:61:f7:d4:e1:85:bf:b8:c8:a5:
13:49:cb:06:6b:f1:61:9e:85:de:8f:60:3e:03:e4:
54:e8:bb:e5:8f:31:6d:c6:22:e5:eb:d3:6b:19:09:
1a:8e:0b:ee:04:06:64:42:14:3b:8d:8d:92:88:91:
85:03:ae:14:cf:53:13:88:8b:d5:48:41:15:24:56:
f4:2a:7a:93:f3:f0:e1:f6:b1:23:da:1e:03:62:f2:
16:aa:ed:ab:f4:51:fd:b8:ad:45:6f:d5:cb:d2:7c:
60:da:7f:a8:32:c7:29:38:b2:cb:8f:6d:44:57:5b:
5c:58:f3:9a:53:e4:af:1e:47:57:7e:7a:c4:b7:ac:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A3:D0:58:5F:49:2B:6B:77:F9:46:A1:AD:2F:CB:BC:6F:39:DC:44
X509v3 Authority Key Identifier:
keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ca:78:15:14:42:79:70:41:b2:07:5e:10:4c:4c:9b:5b:e2:
5c:7c:99:a1:5f:c6:24:06:a4:20:c1:e4:9f:60:cb:b0:30:e1:
ad:fa:fd:51:b3:e6:73:86:e3:11:51:98:de:8f:59:13:ff:d5:
92:c9:ec:5c:3b:02:c5:9a:04:94:39:c4:75:80:45:46:c1:cc:
9d:4c:78:2a:d3:a4:7d:3a:54:81:5f:18:a1:53:80:03:b9:f2:
fe:a9:10:66:5d:7d:1c:69:34:7f:c2:fc:1f:6b:19:c2:76:c6:
4b:48:8a:bd:71:64:36:43:2d:7a:10:32:0e:79:04:d1:84:90:
3f:41:b3:2f:a3:5a:b4:74:d2:47:07:32:22:2b:cb:78:3e:42:
77:90:66:6b:00:10:9d:92:46:21:f8:65:93:c9:16:85:48:1f:
fe:88:52:77:0d:37:14:7c:f4:36:d5:4e:7f:e3:12:94:f4:9e:
0f:10:ea:da:4d:19:fa:87:c0:ed:de:14:07:28:4f:2c:13:16:
87:ad:f0:df:f7:0d:9e:29:ab:1b:14:fa:f5:ce:94:b2:74:e8:
26:81:5e:7f:3b:44:55:a3:bc:eb:78:cf:a4:81:39:21:fc:a2:
9a:30:3b:55:96:22:9d:db:cd:32:14:eb:67:ec:19:40:ee:c8:
ec:94:e1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:58 2025 by rpki-client