Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
File: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft (raw, json)
Hash identifier: 4lU/+5kE+HN+lGpdKnR/Zx5D2X77rk2VCkriPpwvkyo=
Subject key identifier: F1:1C:A7:A3:15:69:41:FB:70:1C:2B:07:CD:68:0A:7A:35:C6:D7:9E
Authority key identifier: 52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB
Certificate issuer: /CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
Certificate serial: 0BD23C6936BED5E9BBC191A0AF72F75FD559F518
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
Manifest number: 046B
Signing time: Fri 31 Jan 2025 00:30:48 +0000
Manifest this update: Fri 31 Jan 2025 00:25:48 +0000
Manifest next update: Mon 03 Feb 2025 03:46:48 +0000
Files and hashes: 1: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: HvvkfODWlbpCPVaGpltaWkLF8YbtBVvjE+DIED0bI6g=)
2: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl (hash: gxxbtfperem38yW7577kgN+QQZg2z7hhHOqSMomoJj8=)
3: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: IDvrgAk2h65ZJEo1qEYbEs8Gg0z11qH57HLaIFgcM0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d2:3c:69:36:be:d5:e9:bb:c1:91:a0:af:72:f7:5f:d5:59:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
Validity
Not Before: Jan 31 00:25:48 2025 GMT
Not After : Feb 3 03:46:48 2025 GMT
Subject: CN=F11CA7A3156941FB701C2B07CD680A7A35C6D79E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:3e:30:30:5d:25:68:ab:a1:c4:98:eb:69:
e4:d5:98:1d:62:7b:15:cd:1c:8c:c5:47:f1:fe:5b:
ae:a6:2d:a9:c2:36:f6:28:27:0f:bf:85:72:9c:78:
b7:14:1e:0c:16:bf:8d:36:d3:43:3c:83:bb:79:81:
49:79:6c:1e:cb:56:32:71:50:b1:bf:40:46:9d:90:
30:42:9e:5b:c3:5d:f5:40:4d:cd:14:77:de:cd:23:
d8:7b:7f:3d:2d:79:a7:7e:5c:55:4d:41:cc:eb:06:
c4:05:14:c4:af:52:53:6d:85:6c:8a:ba:5a:85:94:
ed:01:ca:e2:d0:0d:03:a0:4e:6c:fc:64:9b:47:7e:
02:1c:20:8b:f4:fa:6f:0c:f5:0b:5d:76:04:de:8f:
36:d3:ef:4c:f9:b9:31:b2:ae:bf:a2:94:67:ab:c5:
ac:38:a7:da:91:5e:58:c9:1a:02:04:de:b3:98:b9:
29:d4:24:d2:be:c9:cc:38:ea:2b:d1:1a:f0:b4:e5:
36:10:93:12:89:b3:47:fc:89:bc:a9:17:68:f9:57:
38:50:fa:72:00:31:a0:50:d7:9b:be:b4:46:e2:55:
e5:68:56:39:63:cd:c7:24:31:6c:26:83:ed:bf:ed:
ab:44:4a:d9:8f:20:ef:65:38:cc:97:57:5a:23:ee:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:A7:A3:15:69:41:FB:70:1C:2B:07:CD:68:0A:7A:35:C6:D7:9E
X509v3 Authority Key Identifier:
keyid:52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:26:21:ed:99:86:d9:dd:3c:c4:88:71:ab:57:37:e5:20:67:
4e:04:56:83:49:45:fe:f1:92:b1:50:2a:6b:1e:21:a9:88:ef:
f5:ee:f5:77:79:8a:80:db:0e:9d:82:79:c5:a4:51:86:58:ca:
c3:de:88:9e:8e:2e:2a:a8:67:ea:9f:6d:9e:e8:05:f4:e5:18:
6f:6f:bf:7e:f0:46:54:5e:15:d6:64:eb:fe:53:72:ff:10:77:
0e:ab:50:59:e0:33:6d:9c:64:e3:83:1c:c4:be:1d:60:14:81:
7a:94:b0:e6:fa:b4:6b:62:14:24:84:ed:c8:87:0b:28:27:09:
e7:4f:d1:d9:ef:76:d8:8c:09:02:23:df:fd:33:65:c7:9c:19:
ba:a5:43:12:96:cc:f8:03:67:9c:82:c0:de:4f:ca:4a:4c:bb:
d9:73:15:32:03:de:5f:d5:bb:bf:ed:6b:d6:10:0b:f6:43:7c:
c2:d4:55:e1:a7:c3:4e:70:69:96:8e:21:d5:0b:27:44:ed:ed:
dc:69:f3:c0:6c:da:95:9d:69:b2:d4:34:88:be:dd:9c:36:4a:
05:3c:b8:a9:ed:07:61:af:c8:dd:00:d4:3a:10:50:82:04:9d:
fc:42:fb:a6:ef:e6:69:54:bd:b9:59:f4:ba:62:a9:7e:62:b9:
a6:ba:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:05 2025 by rpki-client