Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft
File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json)
Hash identifier: MPxgUwRKd+MFYuPKZNyatUZ5NzavlryFvYl2cGPMyOw=
Subject key identifier: 40:56:81:A5:DD:8F:69:82:B2:32:C5:BE:B7:4B:B5:77:2F:E4:A2:12
Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1
Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1
Certificate serial: 3D7B75B17B4408A6FA608225A96A5E413145631E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft
Manifest number: 02ED
Signing time: Fri 31 Jan 2025 10:01:57 +0000
Manifest this update: Fri 31 Jan 2025 09:56:57 +0000
Manifest next update: Mon 03 Feb 2025 15:05:57 +0000
Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: 8SN27JgRzLp2HkIPs909BiGw4amp0rXHb0iEz91v6Jo=)
2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: GKESC6ALOjFI3NHTalg8EvuI+eB2I6dT/+GKyiOfElw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7b:75:b1:7b:44:08:a6:fa:60:82:25:a9:6a:5e:41:31:45:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1
Validity
Not Before: Jan 31 09:56:57 2025 GMT
Not After : Feb 3 15:05:57 2025 GMT
Subject: CN=405681A5DD8F6982B232C5BEB74BB5772FE4A212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:fb:64:4d:4a:ed:98:2a:34:9b:bc:b0:50:
22:0e:d4:c2:0f:10:e6:26:55:47:ba:6f:a7:19:8a:
5c:bf:af:39:33:7c:40:dc:73:11:10:f9:14:49:ea:
2f:ac:50:b8:1b:03:89:c7:00:35:a7:51:60:2d:5d:
71:ea:8b:96:3e:28:07:a5:b2:b1:2c:0f:14:36:d0:
27:ec:6a:c5:27:d1:d6:15:7b:a2:5a:da:f7:02:aa:
0c:f6:0c:08:ba:74:c3:90:20:c0:c9:f1:4f:cf:4f:
62:53:3d:6d:46:1c:bf:f0:b9:b4:cc:a8:d9:42:5b:
e7:ff:eb:d3:17:a4:cf:ce:1a:cb:2d:2f:a3:1a:94:
d8:7f:38:2d:f3:9e:0a:b1:98:07:ac:4e:0b:f0:c4:
8c:08:f1:d7:f7:ea:dd:a1:c8:c9:13:63:96:89:2c:
e7:50:1f:75:c3:7e:0d:a6:b2:c2:48:1a:01:a2:89:
ea:3e:22:c6:3c:aa:3d:16:55:06:e4:c5:50:13:99:
c3:ba:06:15:67:f4:e8:9f:8a:3b:ed:9f:d4:e5:71:
c0:e9:d5:7c:b2:60:bc:5e:b3:38:81:b6:5a:6f:cf:
55:19:12:94:30:01:e8:de:f0:da:e8:28:7d:84:9a:
eb:6c:fe:db:b4:6b:d1:17:e5:5d:79:fd:ac:23:76:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:56:81:A5:DD:8F:69:82:B2:32:C5:BE:B7:4B:B5:77:2F:E4:A2:12
X509v3 Authority Key Identifier:
keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5a:b7:c5:fb:ff:39:35:a7:08:57:2a:33:11:2e:93:2a:28:
9f:7b:09:9b:c9:46:07:47:17:8a:db:fd:65:6e:fd:3c:99:b1:
c1:39:a9:ec:1b:d4:41:7b:05:2c:e9:ed:95:7e:b2:4e:42:0a:
10:85:27:58:fe:66:e9:73:30:5d:15:7c:e3:6e:b5:23:73:30:
01:d3:c3:da:d2:c9:29:0d:3b:ba:d2:63:47:c9:53:43:d6:75:
60:79:55:69:88:36:41:17:7a:ab:02:70:14:8b:9f:4c:1f:d9:
c8:0c:84:2b:fd:ae:d8:95:c7:58:94:08:c0:56:f5:f7:02:df:
e4:2d:fb:2a:82:f2:6b:4e:91:e2:68:dc:ca:00:75:2e:64:01:
3f:1e:f3:f4:78:f9:5e:fd:84:46:b0:50:0a:8b:e8:25:15:f1:
b4:79:69:a0:18:81:29:90:2f:97:57:a1:75:c6:e8:2b:e1:d1:
a3:4d:66:2e:3a:08:91:1d:0d:83:ac:18:d3:49:ba:3f:e0:eb:
7b:09:8b:bd:1f:f4:f3:f6:6f:d1:4e:10:ad:62:49:53:07:87:
52:0d:17:66:8a:63:ca:8b:ef:26:6c:64:43:41:3d:1a:b2:a0:
52:de:cb:06:5e:35:93:e0:bf:2d:5f:a1:16:3f:c7:fc:69:83:
20:b7:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:04 2025 by rpki-client