Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json)
Hash identifier: XUcO9zPxbny7JHrm+FtaxpSZVpntx2E11lg5xjyogrI=
Subject key identifier: CC:CD:8A:B1:D6:F9:83:35:EC:D9:6E:F4:B6:3F:06:CC:59:D5:8E:80
Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB
Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
Certificate serial: 53151A158315DFD5E85DB47D3B80017D83BEB2EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
Manifest number: BA
Signing time: Thu 30 Jan 2025 13:31:31 +0000
Manifest this update: Thu 30 Jan 2025 13:26:31 +0000
Manifest next update: Sun 02 Feb 2025 14:37:31 +0000
Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: Y23uNzVl1el7iBWf5vpvozngx2OvIctjxpp0+0DIq2E=)
2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: 2vI5dw2bl5H3fq0XjZZ1H6hv+MV32xnj1K9HHyXvfzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:15:1a:15:83:15:df:d5:e8:5d:b4:7d:3b:80:01:7d:83:be:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
Validity
Not Before: Jan 30 13:26:31 2025 GMT
Not After : Feb 2 14:37:31 2025 GMT
Subject: CN=CCCD8AB1D6F98335ECD96EF4B63F06CC59D58E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:07:d4:15:dc:e4:56:95:6b:6f:c9:7a:f8:21:
f8:a2:32:d9:c3:25:fc:5a:2a:ff:95:d6:35:35:b6:
98:17:3d:27:58:fd:60:5c:39:a1:9c:0c:56:ea:c6:
c5:66:8a:86:a9:bf:42:58:5e:79:68:3a:6c:25:8a:
a5:77:a0:36:cf:f3:36:7a:1f:48:66:fe:d0:38:d1:
f7:47:9e:e5:e0:0c:67:ab:c3:f7:97:f5:e7:d3:3a:
fb:42:63:33:24:40:1f:1b:ee:f1:14:f1:74:fe:08:
a1:56:b0:0f:4a:99:46:ec:e7:3e:fb:a3:66:92:85:
af:1d:33:c0:28:d5:63:7a:01:65:6e:28:f6:77:87:
64:ee:76:7f:34:31:16:28:33:e7:af:ba:54:d1:f2:
b9:a7:09:d4:13:48:c5:94:90:e4:c9:ea:50:f1:b2:
a0:63:22:9b:bc:3c:48:13:f7:5a:3f:e6:35:3d:74:
aa:81:13:1a:6e:bf:d5:e8:d7:b4:8d:3a:15:34:7e:
d5:e6:2d:f0:76:15:d1:e6:55:f4:c5:79:21:4f:64:
78:45:45:6f:08:4a:cd:92:33:bd:8e:0e:c0:3d:65:
52:24:18:7b:d7:5e:9f:89:b1:6a:ff:01:2a:70:3e:
59:af:19:66:9c:c2:f5:2e:42:73:63:81:d6:14:4f:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CD:8A:B1:D6:F9:83:35:EC:D9:6E:F4:B6:3F:06:CC:59:D5:8E:80
X509v3 Authority Key Identifier:
keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f2:42:e1:43:fa:72:7d:30:1b:48:9c:37:86:df:b6:78:61:
75:42:2b:29:48:48:04:94:b6:1d:36:80:ae:ae:c8:a9:52:83:
2f:0f:ac:e3:26:df:e4:39:04:cc:ac:f2:07:4e:42:d6:20:45:
69:65:f4:aa:f7:ac:85:00:38:76:65:3e:60:b6:5c:07:ae:8f:
5b:37:30:23:2a:84:e1:9b:c1:c6:6c:18:a3:e5:6b:14:3f:41:
da:12:fc:9a:24:a7:c4:c1:6c:14:81:19:2f:1b:f6:15:1e:ee:
a7:28:64:7a:74:5d:bd:ca:f5:17:2d:00:b0:b6:20:4c:d0:3e:
3f:ec:89:a6:7c:99:29:67:f0:12:dd:70:d8:47:44:b1:0d:fb:
37:dc:a0:f9:62:54:87:b4:c2:c9:15:be:e4:bf:23:1d:3a:f0:
6f:34:00:56:7d:11:5b:a0:41:05:5f:63:a5:27:20:ce:1e:1c:
c0:26:ab:99:ae:a9:2b:8b:d9:c2:5d:11:39:70:2c:e9:6b:f4:
37:d9:dc:bc:bf:21:17:60:3c:de:1d:27:cb:1e:f1:b2:c0:9c:
a3:b2:33:2d:a9:a5:e0:00:40:98:e0:25:54:01:de:b1:8a:18:
51:b3:0c:70:95:57:e6:71:96:c0:e8:c3:fb:bc:7d:10:db:4d:
ef:ea:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:18 2025 by rpki-client