Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json)
Hash identifier: 8t7O7zfochu29MhQKElxD2QEBAfmsY0ouHiIJY3kQ1o=
Subject key identifier: 86:FA:4F:A7:90:88:5B:41:A9:67:09:B7:43:C2:F8:71:F9:B4:CF:10
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial: 250A35793F6E95D5BD9030136ADBE0BCCA5C5820
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
Manifest number: 0106
Signing time: Fri 31 Jan 2025 18:21:15 +0000
Manifest this update: Fri 31 Jan 2025 18:16:15 +0000
Manifest next update: Mon 03 Feb 2025 18:46:15 +0000
Files and hashes: 1: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: VCJVYb5Yj3VQmqeBZPc4wM5hAoFiEaNDgbEKKi9Z34Y=)
2: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: aLfnc/DYtAc+VecV9ISLt6job5dp+n0idSQMbUs5bwI=)
3: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: NQ2ye5QxCxIoEkqHxBUJyo6rSBIUVJNBvpNF3uf87lc=)
4: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs=)
5: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: P8qqWd8lu4ePMxcCVDgoAu5B+0ALSgogKErRSPrn+aQ=)
6: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: 4rWzT0kttC+3o1m8M4nqZx/LEwYsgQQY9aJJrFVM75k=)
7: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: K6wVrrcLEBjlC6xeoIoIGULUclDZlzAkoc88QQdbCvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0a:35:79:3f:6e:95:d5:bd:90:30:13:6a:db:e0:bc:ca:5c:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Validity
Not Before: Jan 31 18:16:15 2025 GMT
Not After : Feb 3 18:46:15 2025 GMT
Subject: CN=86FA4FA790885B41A96709B743C2F871F9B4CF10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:47:e2:20:c8:8a:62:2d:4f:ba:b7:a8:84:e6:
2e:c9:8e:55:bb:14:8e:1c:dc:4d:d8:12:95:7a:86:
5f:56:76:72:15:70:74:a1:ca:a9:0e:e6:f1:93:f6:
4c:b4:1f:e6:bf:35:55:c5:72:65:11:d9:73:80:08:
4a:94:de:50:56:e5:f6:46:c9:78:c0:b5:30:3e:95:
e4:ff:a1:84:a2:cd:3d:ec:2b:f0:47:0f:39:3e:a7:
e0:de:ec:b2:3c:c0:98:ac:c2:c2:11:03:07:0c:51:
b2:df:b0:30:5e:5e:6b:6b:cc:2a:c5:03:ca:27:62:
ed:18:23:11:77:3c:ed:a1:26:e0:19:7c:95:4d:e6:
51:c1:b2:8d:81:25:95:66:ad:c2:1c:0b:5e:1e:91:
f2:59:94:ec:37:fb:2e:5f:0c:8b:ac:09:2d:55:3b:
0e:08:10:06:c4:ac:91:b7:1b:61:1d:44:7e:64:28:
9e:a2:53:bc:61:47:90:8a:b8:0f:b5:55:4c:04:7e:
5f:24:f1:b8:1e:8e:5d:fb:12:5f:bd:cf:8d:9c:38:
47:06:74:a5:7c:88:e9:00:53:83:dc:71:89:32:a5:
1b:79:78:92:0e:11:cc:8a:94:d8:55:c2:41:b1:ef:
b0:f5:7e:14:69:a0:19:2e:ff:56:ff:68:1e:cb:29:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:4F:A7:90:88:5B:41:A9:67:09:B7:43:C2:F8:71:F9:B4:CF:10
X509v3 Authority Key Identifier:
keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ac:a1:d6:7c:79:0e:90:c3:c3:00:20:c8:a0:ca:0e:af:6c:
de:d0:dd:06:af:a8:ac:86:f5:d9:63:cf:b0:8e:4e:54:aa:ce:
b3:13:c4:b2:c4:ef:17:b7:3e:16:6c:42:74:b6:7b:ca:60:24:
2d:04:c4:92:4d:75:6b:55:cc:8c:18:c5:aa:95:79:bf:89:83:
4b:96:96:a2:a1:16:9d:61:e8:29:6c:a0:2b:64:7e:7b:54:f8:
e9:8d:c3:92:8d:76:f3:6d:d5:30:a2:90:d7:ff:29:5f:95:bf:
0a:7c:03:cd:10:a1:9b:36:5d:66:d7:ad:e2:b9:a8:0d:d4:6b:
67:94:66:ee:a1:ff:e0:2b:f8:dd:aa:3a:de:88:98:22:af:96:
a3:37:a7:bf:34:92:3f:85:7c:58:b6:41:22:4f:8d:b8:34:9e:
49:86:0c:4e:56:d7:fe:26:f0:6d:77:16:52:bf:2d:fa:de:74:
d9:b9:8e:d1:7e:f1:db:93:c7:4d:2f:24:07:21:5e:9c:f0:d9:
5f:15:4a:0c:ef:d4:75:c0:44:58:31:71:09:fa:83:52:92:68:
59:a4:72:b8:bd:e6:a4:f0:41:8c:11:e4:54:b7:52:4b:c4:78:
68:fd:65:c9:0f:8a:95:d3:1f:9f:8a:2e:0d:00:9b:ac:a1:76:
ef:23:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:46 2025 by rpki-client