
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft
File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json)
Hash identifier: uKVgn7no0fyWT3JFXF68efQ6hwOBlUgzSvA+tPIg0/M=
Subject key identifier: 2B:D4:7E:27:14:4E:D0:32:0F:11:A0:E0:EC:65:D8:EF:1F:C1:8F:32
Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B
Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B
Certificate serial: 1D538F5DE5771D324B658DAAB9B7E75A414EA5DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft
Manifest number: 04A3
Signing time: Fri 31 Jan 2025 09:50:48 +0000
Manifest this update: Fri 31 Jan 2025 09:45:48 +0000
Manifest next update: Mon 03 Feb 2025 20:09:48 +0000
Files and hashes: 1: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: qH0WeZNksC8UHTvkYyfNb5L3ifVVZoqx+YDG6V1uSGc=)
2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: MBnVObk5rtYYwHlaUlSzw5T8+2QUD+ApGXh8c63UDdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:53:8f:5d:e5:77:1d:32:4b:65:8d:aa:b9:b7:e7:5a:41:4e:a5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B
Validity
Not Before: Jan 31 09:45:48 2025 GMT
Not After : Feb 3 20:09:48 2025 GMT
Subject: CN=2BD47E27144ED0320F11A0E0EC65D8EF1FC18F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:82:be:56:27:80:70:42:ef:0e:21:08:d3:
8c:0e:d0:df:74:2b:0e:87:84:d7:5f:aa:10:1e:61:
00:99:7e:f7:11:e9:af:f0:3e:50:e6:d7:3b:58:a6:
21:8e:cc:2a:b3:1d:f2:d8:b7:6a:7b:df:fb:ee:cc:
05:f2:3f:68:55:46:c7:a4:12:96:90:9a:b1:f2:bb:
8e:d5:b9:f9:9f:0d:0c:0a:6d:81:65:34:e2:52:9d:
7d:13:0a:20:6c:86:8c:f7:7a:06:db:9b:76:95:26:
ce:93:c5:c0:b0:a2:98:73:a3:6c:34:82:20:03:d0:
d4:d9:f9:db:d4:b6:8a:23:d9:1c:67:d4:17:68:3d:
f5:ff:da:09:65:59:49:e9:d3:ed:4c:70:43:d0:e6:
bc:41:c3:49:ed:6e:c9:48:7a:44:f9:8d:b2:99:cf:
64:20:11:cf:4a:22:c4:48:99:0f:c4:c2:90:e2:5f:
25:24:af:a2:37:7c:61:f4:9d:6f:20:57:43:6b:c8:
e5:f2:9e:a7:08:b7:2c:a1:bf:51:85:55:b4:54:ba:
86:e7:6c:0d:05:34:5e:3d:ec:16:c4:ce:9d:42:0a:
c4:50:b3:6f:fd:77:79:7b:6c:f6:91:a7:44:34:28:
a9:e5:cf:be:54:9f:cd:9c:6f:9e:23:de:f9:f1:69:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:7E:27:14:4E:D0:32:0F:11:A0:E0:EC:65:D8:EF:1F:C1:8F:32
X509v3 Authority Key Identifier:
keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5b:23:04:f2:50:f9:07:10:2d:c4:d3:10:73:02:ea:5f:11:
53:0e:91:49:21:de:3b:50:97:d0:a5:a1:95:58:bf:a1:6b:f5:
45:ed:d3:bc:a5:ae:e8:2c:5b:44:b6:11:47:cc:bb:b6:40:df:
c0:16:c1:be:a2:c9:b4:60:d0:f1:00:b8:71:5e:ee:af:7f:a7:
6c:12:1b:5d:bb:80:ac:9f:32:22:77:23:c5:ac:8d:cb:9a:e8:
b8:d9:35:de:30:d3:43:04:94:a3:2e:67:8b:f9:75:21:e7:dd:
be:b3:f3:57:5a:78:6d:e5:27:2a:6a:30:d7:cd:a0:6c:85:dd:
5d:b0:33:88:e7:12:91:37:75:5b:02:36:1a:a5:ad:fc:0a:75:
cc:61:a9:8c:4e:92:08:dc:b9:bd:4d:0c:c1:cd:75:02:29:1a:
f7:cd:ce:35:11:c1:35:25:9c:8b:5a:13:59:4a:21:97:41:74:
a1:4a:06:99:79:19:f6:47:0b:b6:99:f2:5f:66:10:0c:08:d3:
a5:6c:c1:bf:e7:ba:2c:77:65:24:1b:b3:97:60:f8:ed:95:46:
f9:e0:95:89:39:c1:4e:29:78:92:4e:44:06:15:86:b5:c3:2c:
04:de:4c:27:e5:8c:76:56:e0:a0:83:ff:64:09:63:2c:01:b7:
bc:16:70:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:47 2025 by rpki-client