Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json)
Hash identifier: U5BBka/dh06X2r8oOS4KFj2Eg14nIKM6Tgio1rp2Z3M=
Subject key identifier: A0:B0:E5:2F:A8:2F:9A:E2:A9:E9:21:5E:FD:5A:FA:58:53:74:23:7F
Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
Certificate serial: 6A2E185FAAADF2A767B2F752FB9FAC707A2C580C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
Manifest number: 01AF
Signing time: Thu 30 Jan 2025 04:50:00 +0000
Manifest this update: Thu 30 Jan 2025 04:45:00 +0000
Manifest next update: Sun 02 Feb 2025 10:04:00 +0000
Files and hashes: 1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 2gcsGWrwNMsQNKXI5tKhPs55zDtiRTAJh20IdsKpBxc=)
2: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: 5Llvjpkd9ZZ6lzgsBeGc60DxrJxhgcuE/iGY0fKw6P4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:2e:18:5f:aa:ad:f2:a7:67:b2:f7:52:fb:9f:ac:70:7a:2c:58:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
Validity
Not Before: Jan 30 04:45:00 2025 GMT
Not After : Feb 2 10:04:00 2025 GMT
Subject: CN=A0B0E52FA82F9AE2A9E9215EFD5AFA585374237F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6c:ba:b2:d9:9f:51:09:06:13:41:61:bc:5a:
5c:3b:3b:84:76:b7:06:75:7c:d1:10:69:41:18:be:
84:75:aa:ad:55:c3:39:7b:25:f2:24:56:18:dd:71:
2d:b4:4b:4e:47:aa:b9:80:fd:6c:02:00:2c:88:5e:
68:27:31:89:52:c7:7c:58:08:43:6a:b0:87:c6:d4:
9d:3a:61:27:38:78:fc:4b:0f:c2:0b:ec:30:50:b1:
a3:28:f0:b2:d2:e1:0a:b7:e7:9b:e2:56:31:55:04:
7e:7d:24:db:03:6d:a8:da:c4:77:c1:cf:ec:f2:ca:
c4:7e:5d:13:a0:97:3c:e0:9b:51:e6:78:95:99:c7:
b1:ef:21:98:7d:37:fd:99:4d:4b:c9:d3:89:52:99:
0c:a5:e3:25:a4:5f:32:c4:b5:da:8b:d9:c9:81:d7:
8c:b8:4b:49:e8:1f:73:c5:c9:62:ab:37:ac:51:b1:
23:85:62:3c:cf:20:4f:f3:b6:ed:f7:de:08:f7:b0:
0b:e8:35:36:a4:7b:f2:6d:d7:06:e9:a6:c0:12:58:
21:d5:21:07:95:17:57:62:45:69:77:ee:9b:a8:89:
ea:38:a8:52:35:cb:73:41:25:ba:8f:c2:40:a0:82:
0e:c8:3f:06:13:24:08:fe:3d:1b:5e:aa:01:3a:4f:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:E5:2F:A8:2F:9A:E2:A9:E9:21:5E:FD:5A:FA:58:53:74:23:7F
X509v3 Authority Key Identifier:
keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:42:a3:61:78:12:45:70:ab:f8:19:9c:7b:37:6b:d4:ac:
53:98:89:18:7a:53:2d:e6:d6:75:89:78:f3:93:17:23:1b:91:
b5:67:e9:df:23:5a:96:39:b4:f4:60:b6:44:a3:b4:22:17:07:
50:fd:b0:61:04:c1:43:f7:32:61:8f:fd:5a:3a:1d:08:30:ef:
ea:f7:7a:e5:71:fc:7a:1e:1c:76:94:17:6b:73:0d:df:f1:72:
48:cb:70:0b:f0:5f:76:6f:e0:bf:88:f0:e7:ca:7b:06:5f:27:
65:7a:36:5a:e0:ad:b0:67:31:92:fa:3b:bc:ac:bb:81:28:5c:
9a:1c:97:04:72:1a:db:20:df:07:41:40:bc:ba:ae:07:c9:30:
89:31:b5:76:6d:8f:7d:2f:8b:ea:22:d4:97:5e:a8:05:e3:f3:
e6:f9:6b:59:97:6f:0c:49:b9:bf:b6:45:25:fc:56:69:45:3e:
2a:72:1e:ca:ec:25:aa:c4:9f:7e:20:99:e3:94:0f:7c:32:1b:
ad:ea:c5:a7:58:0d:d3:7d:f6:50:6a:43:7d:3b:39:58:55:9e:
90:ef:34:06:27:96:45:3b:ca:90:de:3c:91:ae:21:37:02:16:
4c:5a:df:dc:68:ad:34:b7:c1:7e:f0:f9:e9:80:93:9f:7f:f8:
c5:1f:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:45 2025 by rpki-client