Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
File: 16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json)
Hash identifier: Hy+pZnwrVXop+ZndBo2sH6XrdrhPUMoGx1ZsGNGH78w=
Subject key identifier: FF:59:52:3C:22:AB:13:33:BF:80:1C:7C:3D:BD:8A:3B:64:65:C1:D7
Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Certificate serial: 0157DB8C680DD4B89411BDB02D3966A760520E89
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
Manifest number: C8
Signing time: Thu 30 Jan 2025 19:31:09 +0000
Manifest this update: Thu 30 Jan 2025 19:26:09 +0000
Manifest next update: Mon 03 Feb 2025 02:06:09 +0000
Files and hashes: 1: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: dOd/WmcL1O2XqOSnpwsMSYP0+oN55Jz82rLt6CdY2eM=)
2: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg=)
3: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: km/J3O6wA+/+giyqpUHqvd0x617eyhN+dq0ZwqMW8PA=)
4: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: rf5iUjF9eujl8v5eeG3m2znXJEhYgYPkRsuS6kDn8t0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:57:db:8c:68:0d:d4:b8:94:11:bd:b0:2d:39:66:a7:60:52:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Validity
Not Before: Jan 30 19:26:09 2025 GMT
Not After : Feb 3 02:06:09 2025 GMT
Subject: CN=FF59523C22AB1333BF801C7C3DBD8A3B6465C1D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:bc:d4:b1:d8:c8:d8:59:88:e8:24:6d:2f:
06:0b:1f:4a:ad:31:73:95:02:42:d2:b3:4e:07:0e:
d9:ce:b3:2b:cc:6c:81:84:38:89:c0:c1:9f:9e:8f:
24:dd:52:8e:73:c6:72:ec:e8:57:fe:b4:80:36:86:
65:af:d9:bc:81:0f:ed:ee:54:aa:e5:d5:8a:78:33:
c9:ca:66:b9:05:ef:fe:64:7f:98:79:10:34:0e:ec:
83:46:6f:d3:36:6c:b2:f5:84:08:45:8a:ba:94:45:
27:d1:5b:88:a2:0c:ff:48:15:2a:ee:91:8b:94:3b:
9c:82:4c:c5:67:77:41:a7:ab:83:b9:ff:72:7b:76:
5b:5d:d2:0a:8b:75:2d:40:af:e0:90:bb:df:66:c5:
35:27:78:38:36:a8:1a:03:30:a0:e1:a1:e4:89:88:
40:f4:69:51:ba:29:d4:2d:68:84:bd:15:41:90:ed:
a1:0c:1e:71:db:ae:dd:87:41:d6:db:3f:ed:a8:e3:
9e:20:a9:5c:42:02:23:21:ba:24:dc:d7:5c:22:f9:
60:f2:4a:df:af:53:04:2f:35:44:a6:2a:f7:06:0c:
24:49:31:b8:b5:6c:94:27:2c:7f:e4:db:d0:87:ea:
79:fd:ce:a6:b1:9d:85:27:32:d0:1f:74:6c:08:57:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:52:3C:22:AB:13:33:BF:80:1C:7C:3D:BD:8A:3B:64:65:C1:D7
X509v3 Authority Key Identifier:
keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:42:51:e7:29:c2:5f:fa:59:96:99:e4:f2:e1:5b:05:aa:
7c:43:39:5c:86:de:66:8b:60:17:a4:5e:af:29:07:eb:b9:df:
4b:bb:f7:55:fa:af:0d:81:8a:50:15:9f:09:0a:4c:4d:7b:db:
ac:39:37:85:8d:0c:f2:0c:de:ac:73:5e:f1:c8:b2:58:91:2e:
e7:12:28:9b:db:b3:f8:29:6f:39:9c:94:5a:fd:61:c8:ef:a7:
9a:f7:8f:42:ee:32:f9:2e:43:aa:39:d8:7e:b6:c3:5e:e9:99:
d3:cb:c9:c5:15:5d:1c:f8:3f:1b:7b:64:0c:84:81:75:ca:11:
21:5e:2e:20:a3:08:4c:c4:26:69:a2:fb:06:d7:90:b7:08:08:
e1:c7:f8:42:54:0a:1a:25:97:f6:08:65:ab:3b:e7:36:45:36:
18:59:15:d0:79:e5:a2:bf:23:b6:09:88:17:6b:8b:d3:fc:ab:
ff:95:a7:3d:e4:b6:79:47:24:bf:5c:43:d8:cb:72:81:22:a8:
57:a3:d2:68:9b:fd:1e:c2:3d:c7:55:74:cf:5c:34:ac:25:43:
70:5d:80:7c:87:0e:16:b1:d0:e9:a7:50:ba:7e:70:79:b2:0a:
dd:2d:1f:1c:aa:8b:62:0f:4b:7a:b8:6d:5d:b7:3a:f4:5c:62:
3c:54:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:54 2025 by rpki-client