Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json)
Hash identifier: lgFBPmfHCEqp/oshUFzSpRYNCN6Ee9vqlQ7ADTukG1U=
Subject key identifier: 2F:F5:BC:F3:28:49:8F:C6:13:98:35:2F:57:2C:BF:32:EE:3E:DF:E4
Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E
Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E
Certificate serial: 4B8D19C6EFDF983961FAD9345F56695D48920A2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
Manifest number: 04A2
Signing time: Wed 29 Jan 2025 19:30:42 +0000
Manifest this update: Wed 29 Jan 2025 19:25:42 +0000
Manifest next update: Sat 01 Feb 2025 20:18:42 +0000
Files and hashes: 1: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: htS/mOXNz8fNjrYCraLvtDOWNvj77Vu5R0ubwkx6Y70=)
2: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: v/wNC11/mGa67gP20vk9bZW53k2FAuEzkngEjF9WCOs=)
3: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: r7rkQmAorpaA2HQiF7v1k+siSmXYdSBe2smRZcsSuIo=)
4: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: sckkCjMHs7WsRB95RCqI2G0Z8CclzEEJ3tVAHrA+aMM=)
5: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: R0NLF4Ov1wAGeHFAFhKyGtvsypexoChl/jl0cHH5TqA=)
6: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 7J0oFyysipA3qHhTtoXbnDFHuiZkIxXPeZGfLnkl0e4=)
7: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: ZIlmLZbX8j274XTFyCrw3NuLODlNL7TDmCU2gE1O9vc=)
8: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: P7RUWY6qH7oEO1y5dEH1xpvQBN+949irjZIivcgB6do=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8d:19:c6:ef:df:98:39:61:fa:d9:34:5f:56:69:5d:48:92:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E
Validity
Not Before: Jan 29 19:25:42 2025 GMT
Not After : Feb 1 20:18:42 2025 GMT
Subject: CN=2FF5BCF328498FC61398352F572CBF32EE3EDFE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:65:5d:49:e0:ff:f2:a4:ea:f2:20:09:ed:
31:72:ff:ea:87:39:eb:f3:5d:04:96:dc:75:77:b6:
67:a3:55:2e:5c:ed:33:1d:44:2b:33:bb:35:9e:32:
d4:d2:90:8b:a6:5f:88:de:22:d7:2d:b6:c6:23:d9:
4c:77:74:60:59:94:f6:41:d2:9b:cb:9d:eb:41:47:
3b:e6:f7:22:ca:8e:89:f2:a9:62:87:8c:ba:1a:ba:
20:55:a7:1c:34:be:0b:96:d1:a6:85:58:48:25:b3:
6a:98:08:cc:53:e9:d7:5e:6b:7f:f8:45:4f:98:1c:
90:09:f5:01:51:78:ec:46:39:2a:3d:5e:4d:05:45:
51:6e:72:85:b8:97:0a:23:57:b1:39:a5:f3:91:7a:
a1:c1:c1:bb:d2:ed:56:2e:75:ff:83:30:b6:9a:6c:
41:65:d2:d3:14:82:a2:3e:30:9d:50:59:87:4e:c0:
f0:7e:ed:f0:64:ac:1c:77:66:d4:1f:f4:e2:34:dd:
51:7b:4a:ea:e4:e0:50:c3:30:cb:c7:d8:1c:cd:ce:
5a:eb:7e:ea:42:41:80:3c:c5:59:d2:bf:4c:9b:e6:
9e:8c:7a:47:8c:b5:4b:99:e5:49:0f:b8:fb:e7:6c:
43:27:aa:00:cb:5d:b8:7f:0c:aa:ed:a5:66:42:d8:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:BC:F3:28:49:8F:C6:13:98:35:2F:57:2C:BF:32:EE:3E:DF:E4
X509v3 Authority Key Identifier:
keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:27:a9:96:bd:27:0c:74:da:f0:2c:a1:8a:06:f5:b7:a6:b9:
9a:c8:d4:67:fe:18:91:6a:f2:26:32:c3:1d:fc:a9:6f:92:ed:
67:7e:cd:18:c1:3f:09:17:51:02:e6:6c:9f:c7:42:f6:d2:3c:
93:c2:ee:3f:85:ba:c6:7c:b7:a3:02:32:51:67:ac:6c:6c:dc:
ec:b0:5f:23:e9:3d:ad:7d:33:a4:85:24:e6:cc:b6:2d:e5:b1:
61:4a:3d:fb:84:50:84:c6:f6:49:79:42:1c:f6:9e:10:af:9d:
f6:48:64:67:47:80:a7:99:68:40:a1:70:81:02:c1:8d:dd:45:
ef:00:cb:2d:9f:6c:e2:c8:0b:2c:81:14:4f:12:38:f4:66:88:
24:27:a1:74:ff:51:f8:b3:57:7f:9b:c7:e5:c6:84:c3:7f:d8:
35:79:ce:a3:41:f0:54:c4:fc:e0:d1:c5:3d:3a:a4:ec:16:4b:
8e:aa:66:25:f4:3b:e3:b6:d9:36:d9:81:dd:c4:04:60:99:69:
b0:50:13:52:4c:00:9e:fe:37:27:9a:97:33:c7:95:43:e4:c3:
a4:70:ec:fc:07:f1:17:98:7e:f9:c5:ae:66:a3:ab:ce:b2:2e:
ab:30:c0:04:98:31:65:8a:f7:36:a8:10:0d:df:6c:d7:32:69:
b1:5d:f3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:44 2025 by rpki-client