Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json)
Hash identifier: H2sAzB0/w9KGzGZCyBK3fZHTyZkM9blEXs5EkH28cRI=
Subject key identifier: D3:0E:D4:FF:9D:5C:2F:7B:A1:20:C4:C7:58:71:A7:EA:D8:67:28:72
Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE
Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
Certificate serial: 25F6FE2CB410E493B15D67E76DC75C3AD4FC78FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
Manifest number: 0280
Signing time: Thu 30 Jan 2025 23:21:03 +0000
Manifest this update: Thu 30 Jan 2025 23:16:03 +0000
Manifest next update: Mon 03 Feb 2025 09:16:03 +0000
Files and hashes: 1: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: RkrAaK/l+sym5+athwm5Yt/5GNUrApl74HCsEHZR1ko=)
2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f6:fe:2c:b4:10:e4:93:b1:5d:67:e7:6d:c7:5c:3a:d4:fc:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
Validity
Not Before: Jan 30 23:16:03 2025 GMT
Not After : Feb 3 09:16:03 2025 GMT
Subject: CN=D30ED4FF9D5C2F7BA120C4C75871A7EAD8672872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:89:62:01:d9:54:60:7c:e4:50:3b:2d:d3:
ce:b1:03:2d:cb:a5:3e:f1:09:bf:4e:69:c8:bb:05:
de:7b:e8:67:8b:97:69:7b:fc:49:49:04:9a:b9:24:
d7:cd:be:45:9b:2c:58:be:f2:93:fd:18:42:7d:0f:
d7:ac:10:88:56:ee:13:ce:43:d1:d8:59:e9:ad:c1:
ba:e6:7f:70:f0:e0:e1:04:69:16:4f:9b:e0:a8:bb:
39:3f:1b:5f:2f:68:98:eb:75:f8:be:df:a8:6e:be:
0d:ed:c2:36:86:38:7e:2a:33:7c:f4:98:90:c7:f0:
b6:a6:77:d9:7a:41:94:0e:ca:69:c8:89:31:bb:fe:
8d:f2:7e:92:5f:4e:72:e7:ae:02:5a:fb:9d:26:e7:
c3:a1:6a:bf:41:19:5c:36:8a:66:1b:67:75:15:64:
fc:0c:53:39:0c:50:02:c5:cf:69:a9:5e:09:08:25:
c9:fd:22:c2:87:67:89:4a:50:29:5f:ec:00:c4:e0:
76:e1:c5:f7:04:c4:7f:b1:ce:a6:3e:53:a2:be:56:
c1:62:3c:31:fd:47:2b:c4:ab:c5:74:6e:01:3f:22:
43:1b:52:fc:b3:4f:d8:ce:e2:ff:49:37:78:64:ca:
02:90:d2:3e:71:7b:c6:e4:8e:3f:e2:1c:4e:18:27:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0E:D4:FF:9D:5C:2F:7B:A1:20:C4:C7:58:71:A7:EA:D8:67:28:72
X509v3 Authority Key Identifier:
keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:94:3b:d0:48:7a:ba:c6:48:69:c9:80:f4:9c:2c:ec:1a:be:
bb:70:10:83:14:cf:27:4a:f3:a0:c0:4c:93:81:c7:d2:81:05:
d1:9c:56:23:dc:98:57:a0:99:8b:bc:ed:a2:c7:62:12:9a:27:
db:9e:c6:fd:b4:b9:a0:d4:12:e3:03:5e:64:43:b5:46:18:a0:
ce:f5:02:08:0d:b1:a1:52:ae:7e:94:e6:2d:42:67:77:09:14:
41:9e:49:e4:7e:cc:00:89:47:9d:0d:ad:7a:3a:4f:7d:44:9d:
8d:4d:59:70:e1:48:13:26:5b:9f:43:da:ef:cf:c5:ec:53:7c:
4b:c1:5c:d1:66:d4:0e:6c:06:d8:b3:39:1e:93:f1:80:30:84:
17:35:74:fc:be:22:86:e9:d2:f3:40:b5:c2:1c:71:48:88:25:
d8:1d:ae:d6:79:5d:f6:81:1e:aa:ff:3d:de:2c:e7:93:bf:bd:
6d:ee:42:a4:a1:ab:02:f6:8a:cc:80:78:b6:2c:ca:75:46:8f:
97:dd:7a:38:15:2a:b1:80:31:55:b6:a0:67:5d:14:25:83:b7:
97:d2:c1:ea:82:ca:ec:b6:66:33:d2:9f:a7:2d:79:a1:c3:4b:
fc:86:ab:93:5a:4c:59:99:bf:a1:6c:a0:ac:db:23:94:78:fd:
dc:44:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:42 2025 by rpki-client