Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json)
Hash identifier: OHzhcKsU8/fVt4AivuYzehd/MEdcwJ2W+Utfwbsx/6Y=
Subject key identifier: 84:F8:66:0B:EB:13:36:09:89:07:D4:AA:89:31:14:D6:5E:54:4A:53
Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562
Certificate serial: 67C2F8686546126F58CED8C7269424EABCC80210
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
Manifest number: 5C
Signing time: Fri 31 Jan 2025 02:30:04 +0000
Manifest this update: Fri 31 Jan 2025 02:25:04 +0000
Manifest next update: Mon 03 Feb 2025 06:24:04 +0000
Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: LDrGtcJTq4OgY5/UX37tOI+FxWVDVhlk7fAC/6U0Evc=)
2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: Rsc2ZleXd/G8m65hfzw5qJvLKSm1O9xuagP4VDJzAQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c2:f8:68:65:46:12:6f:58:ce:d8:c7:26:94:24:ea:bc:c8:02:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562
Validity
Not Before: Jan 31 02:25:04 2025 GMT
Not After : Feb 3 06:24:04 2025 GMT
Subject: CN=84F8660BEB1336098907D4AA893114D65E544A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:bb:dd:b0:d8:64:7f:e5:3b:ad:56:ea:49:
40:af:bf:b7:0b:e6:00:97:cb:80:18:ac:4e:7a:b3:
d6:08:8c:40:bf:dc:e6:31:74:db:c0:1c:a8:04:87:
41:9a:92:e9:3d:59:27:11:d6:f6:13:c1:fe:9b:79:
99:53:82:5a:1a:2b:8a:98:6f:cc:9c:14:ee:b8:58:
82:63:fb:85:99:1f:88:45:86:ba:61:63:dd:bb:a9:
b0:ec:55:91:22:67:55:22:2d:cd:cb:a7:80:4f:5f:
48:b1:04:94:e2:0f:6a:3b:db:1f:36:2e:95:f5:04:
7f:e1:8c:16:33:d9:44:a4:b8:99:8e:07:af:f9:be:
9f:69:1b:c6:91:a2:53:72:de:a0:0f:92:31:77:20:
65:26:f5:02:38:f0:e1:b1:3a:2b:0a:f0:68:bb:a7:
58:03:f7:99:d9:62:49:db:5c:c2:b8:7b:d2:2c:85:
9d:35:b6:3a:8e:34:8a:97:d9:d2:66:4f:7f:7d:90:
1e:2a:e7:6d:84:79:48:b6:f1:c2:2d:42:5b:30:8e:
6d:95:fc:8f:bd:ed:cc:36:b2:ce:5a:8b:94:aa:0e:
89:90:2c:18:dc:ae:68:04:d1:5a:cf:b7:27:27:21:
f2:6e:e8:c1:4c:8d:fb:a5:29:37:65:ff:29:ab:dd:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:66:0B:EB:13:36:09:89:07:D4:AA:89:31:14:D6:5E:54:4A:53
X509v3 Authority Key Identifier:
keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9b:64:66:fa:ef:d4:6d:16:14:dd:1f:f6:53:c6:57:57:44:
cf:a9:e2:61:3f:96:aa:88:7e:9d:6a:bf:50:c1:16:6a:8a:56:
3e:0e:f9:6d:65:6e:5f:cf:16:b6:60:fe:c2:f0:51:80:95:90:
61:bc:29:22:1d:0e:f1:c4:56:f1:1c:9f:d8:9d:4d:31:04:27:
79:0c:cf:36:fa:0b:dc:65:2e:c5:91:5b:24:87:8f:fd:f6:a8:
ef:6c:4f:c4:00:c0:19:83:91:54:94:96:b9:29:a7:ff:0c:65:
cd:a4:27:a6:c7:1c:38:63:50:19:0e:a0:d8:f6:5b:45:45:c8:
0a:3e:79:83:16:78:dc:52:9c:17:da:54:64:77:05:19:1f:93:
37:20:fa:7e:07:0a:80:ed:ef:4d:55:13:f9:dc:26:ef:32:04:
a6:12:8b:fc:63:fe:a0:81:6d:ed:bb:75:01:d1:46:af:7d:cc:
95:be:7f:80:4d:7c:c1:21:7d:de:fa:b7:ba:9d:fd:18:6a:31:
32:17:68:63:ec:ee:18:15:15:fa:51:ac:b7:ac:eb:33:ff:ed:
6b:49:96:d7:e9:71:1d:1f:3c:3a:b3:ce:51:80:43:79:af:59:
6f:27:2b:b8:4c:fa:3d:d4:e0:ab:08:4d:ce:ab:48:f5:05:3f:
b1:45:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:05 2025 by rpki-client