Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft
File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json)
Hash identifier: RP4sSP69n2pAhxXw86ePpTRL+3nVdYTXTyKxWpQwThc=
Subject key identifier: 9D:78:53:57:33:0B:AB:5F:03:29:AA:19:E2:27:D4:08:DD:58:25:18
Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73
Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373
Certificate serial: 4FACB9CD5593D4F1DF18EC7456EA9166BFD4E85E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft
Manifest number: 031A
Signing time: Thu 30 Jan 2025 20:41:07 +0000
Manifest this update: Thu 30 Jan 2025 20:36:07 +0000
Manifest next update: Mon 03 Feb 2025 01:07:07 +0000
Files and hashes: 1: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: Q4lh7hWjC8bc6v/wq2VxqnjdzK0RlcUZM7Z4cKuX1pw=)
2: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: XGrMQaUc15c/+IqlJ1FheEKC0FXud8xuV7K69pUnb3A=)
3: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: 3GzA5wN35IOoQ+xQT5zm+edix+aB/6IJuSik7nBOts4=)
4: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: o2UD3kyV51bD7C8hSauEceV62JNBo31NQWTgcC8C+Zg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ac:b9:cd:55:93:d4:f1:df:18:ec:74:56:ea:91:66:bf:d4:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373
Validity
Not Before: Jan 30 20:36:07 2025 GMT
Not After : Feb 3 01:07:07 2025 GMT
Subject: CN=9D785357330BAB5F0329AA19E227D408DD582518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:f7:83:6d:b0:b4:22:ed:03:41:54:03:0d:
a4:73:36:58:b5:f1:65:19:ce:fb:19:b9:dc:23:d2:
b3:8f:26:92:5f:ce:b0:62:c1:52:c7:46:f0:65:a3:
43:04:87:95:4a:a4:40:90:ff:8e:91:5a:78:69:f2:
50:76:20:e0:76:4f:ec:78:42:30:a0:f5:e7:d3:ba:
82:01:3e:05:25:0f:13:23:89:50:53:34:3a:48:4c:
8f:0e:73:1b:29:e6:dd:85:a1:8b:23:9a:9b:6c:c3:
df:83:46:4d:26:58:a2:bf:47:5c:a9:99:82:d5:8b:
a6:f5:d9:19:0b:e3:b8:04:f7:68:74:d2:84:72:40:
50:d0:e6:8f:29:15:36:9f:89:63:8a:f1:21:7f:71:
06:c3:71:72:c0:7b:86:4e:76:3a:07:8b:53:d7:de:
0c:bd:66:ea:3e:63:06:a9:ac:83:4c:c2:0d:f0:55:
37:46:a1:89:95:5a:d2:e0:d8:0c:22:8f:40:88:73:
c9:4e:40:48:2e:4a:cf:ba:d0:af:1f:e9:0d:74:43:
94:47:04:c8:2c:39:b9:9f:af:70:bd:91:43:f1:a0:
b0:be:ff:2b:00:77:6b:0d:cf:8d:55:23:c7:d5:53:
7b:42:3b:d9:59:61:10:43:90:d4:98:0a:2d:77:3c:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:53:57:33:0B:AB:5F:03:29:AA:19:E2:27:D4:08:DD:58:25:18
X509v3 Authority Key Identifier:
keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:99:29:5e:00:78:a2:a9:74:53:66:22:54:f5:af:94:29:de:
39:f1:a6:e3:e1:58:53:8c:04:60:cd:6c:c2:8b:08:00:0b:12:
88:e5:e3:43:ee:21:ca:e6:60:1c:93:2e:fe:0f:06:06:47:5d:
59:fa:cf:10:1d:03:82:c4:1d:e0:0e:a6:df:d0:52:de:a2:55:
10:e8:aa:fe:76:68:41:1a:b6:a9:8b:1a:4e:ff:3b:18:c2:12:
4e:0b:48:0e:31:34:9d:af:31:df:1a:48:4e:d5:c3:e5:cb:5c:
a5:9f:a6:8e:17:a8:fe:5b:4f:c8:de:d6:7d:68:c5:36:08:ef:
d1:61:9d:6c:ed:2a:80:67:85:c6:6f:52:ce:b1:a6:1e:91:db:
14:25:74:3d:54:7a:5d:e9:c6:88:8d:36:17:a4:7d:c2:15:40:
2e:d8:95:48:14:b8:9b:17:5d:d5:69:f8:8f:2c:5b:a4:33:81:
aa:37:f7:c0:08:5c:80:5f:81:a6:a1:74:28:d6:af:c4:90:49:
58:9a:18:3f:0a:cc:32:b7:00:fe:15:a2:bd:9d:2c:8f:43:4f:
67:da:47:c1:39:04:13:69:70:16:64:66:a1:94:92:15:dd:6b:
ef:6e:a1:35:0e:13:61:f0:b4:c5:6c:ae:b1:37:bd:cc:69:dd:
32:68:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:57 2025 by rpki-client