Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft
File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json)
Hash identifier: mwJbMVMuIWgwSkOKiqO83dl9ss+FbAeXRxg85BqXWuM=
Subject key identifier: BC:89:A1:B7:DD:9D:27:8B:18:4B:B4:22:3C:B8:5A:FE:D6:24:D7:43
Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD
Certificate serial: 0CBE7DDAF5499923457BEC8BDA9A25D08C9307F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft
Manifest number: 0131
Signing time: Wed 29 Jan 2025 13:41:34 +0000
Manifest this update: Wed 29 Jan 2025 13:36:34 +0000
Manifest next update: Sat 01 Feb 2025 21:22:34 +0000
Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: 3+ZBMxH5dlwN57FCP2jvHv8Jnv211eql2ZhLils84cw=)
2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=)
3: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=)
4: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=)
5: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:be:7d:da:f5:49:99:23:45:7b:ec:8b:da:9a:25:d0:8c:93:07:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD
Validity
Not Before: Jan 29 13:36:34 2025 GMT
Not After : Feb 1 21:22:34 2025 GMT
Subject: CN=BC89A1B7DD9D278B184BB4223CB85AFED624D743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:f3:f1:05:d9:1c:17:4d:9a:fd:ef:d8:3e:
00:91:6f:04:6b:57:55:33:4a:3c:38:97:6e:ef:84:
02:c2:9c:0e:8c:db:26:ce:c4:c7:af:3b:5c:57:a4:
2e:4c:30:a3:c5:ea:4e:00:fb:f2:a3:41:4b:7d:62:
a7:34:1b:72:93:6b:40:bf:cf:7f:ca:c3:74:a6:85:
62:be:c1:53:81:65:6f:af:db:45:f2:7d:13:a8:04:
26:13:98:1e:bb:8c:64:13:44:aa:63:43:53:36:e6:
8b:d1:2f:e2:c9:dd:ad:7b:b1:f3:43:77:b7:35:3a:
67:d6:1f:42:04:ba:90:35:9d:b5:3b:af:2a:cd:c8:
f0:55:f9:46:8d:13:8f:23:fc:1e:3c:86:eb:e9:8d:
1b:03:37:ff:10:af:98:01:ed:98:03:35:d3:fb:c9:
a7:00:e9:60:88:55:49:b9:43:a3:08:1c:2a:fc:2a:
22:f1:7a:00:5e:64:11:b8:c4:ee:a4:c8:00:2e:f7:
e2:11:83:9b:9e:9e:a5:cc:3a:61:aa:1c:25:c9:fe:
11:ab:7d:d1:08:bf:fb:9d:e7:88:7a:80:6e:d2:88:
f5:6b:10:be:00:af:0d:85:83:d9:0e:2d:fd:83:7c:
a6:ff:cd:65:fd:9d:8e:71:77:2a:09:21:bb:4f:d6:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:A1:B7:DD:9D:27:8B:18:4B:B4:22:3C:B8:5A:FE:D6:24:D7:43
X509v3 Authority Key Identifier:
keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2c:59:ca:27:93:70:38:3a:2f:5e:da:a8:0b:89:f0:94:d1:
8a:bf:9f:9a:a2:56:e3:d8:31:bd:cc:6c:20:d7:75:13:42:93:
93:a7:b9:f8:47:c6:02:0a:d0:6b:72:94:87:0c:d3:2b:34:5b:
aa:9b:20:ac:e8:63:76:a2:b6:12:30:50:ef:0f:30:f5:01:b6:
d2:72:b6:6e:26:a3:cd:64:15:f9:17:47:ab:e4:f7:e2:6b:08:
c0:f0:26:7a:e0:4e:91:f7:78:64:e9:72:a3:b1:27:9c:96:aa:
a7:bf:48:ad:0d:f1:e7:af:e7:cf:e3:d4:c3:55:fc:00:d8:e7:
1d:d3:b2:e1:a8:26:3d:2a:bf:7a:a6:80:ca:7f:34:94:7c:69:
e8:57:7c:7a:b1:4b:45:20:cd:65:07:83:7d:87:a3:b6:b6:1d:
5b:7b:01:52:fd:b4:81:fe:e4:15:cb:3f:fa:bc:2d:b1:00:f6:
0f:fe:28:28:f2:e2:a9:e2:f4:3d:6f:0f:58:d2:3d:b5:6a:92:
5c:3f:6c:5b:d3:63:58:ac:0a:5a:66:47:33:72:2a:57:88:72:
d2:c3:68:e3:bc:53:2a:b8:3d:e2:ce:08:54:e5:02:c1:c1:4e:
32:47:2d:a5:94:a6:a6:14:94:17:dc:6a:68:b6:2f:62:76:70:
21:09:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:57 2025 by rpki-client