Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft
File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json)
Hash identifier: yKUM07o51zBNmizE9+bYe3L4R0+jF9WEVIHAnWjU/No=
Subject key identifier: AD:08:09:30:A7:16:22:8E:85:61:F5:F9:9D:3B:92:86:62:61:E8:04
Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD
Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD
Certificate serial: 26B4539DDFB81930B0A05B0B08801281A0CC188F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft
Manifest number: 88
Signing time: Wed 29 Jan 2025 16:31:48 +0000
Manifest this update: Wed 29 Jan 2025 16:26:48 +0000
Manifest next update: Sat 01 Feb 2025 21:33:48 +0000
Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: M93pxbIAs1Pryd9TjQFFBfJQwjvArbju+c3MXIwtsaY=)
2: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: Yfr2cHR5sc+IlvVtjIiVFvt93ClasOugnkU4c0l1/lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b4:53:9d:df:b8:19:30:b0:a0:5b:0b:08:80:12:81:a0:cc:18:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD
Validity
Not Before: Jan 29 16:26:48 2025 GMT
Not After : Feb 1 21:33:48 2025 GMT
Subject: CN=AD080930A716228E8561F5F99D3B92866261E804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:b5:36:00:2e:f3:50:14:91:9e:8a:2f:f9:
53:66:89:c9:f8:83:a9:94:31:57:4b:d9:c4:25:b9:
0f:88:9b:b4:cf:a2:08:17:3f:9a:dd:14:48:a1:2b:
2a:04:12:ef:24:0d:55:23:69:6d:6a:43:b9:18:4d:
28:3b:71:16:27:b9:1a:bb:75:f5:d4:58:2f:c7:c2:
a4:ea:be:97:46:25:6a:4b:94:31:f1:3d:dc:ad:19:
1a:19:be:53:50:bc:83:a2:e4:b9:27:84:b8:f1:33:
31:11:82:cf:b0:6b:ee:e9:61:5e:da:d2:6f:29:a8:
fd:98:3f:35:4c:c7:e2:1a:4c:92:84:25:1c:8d:f0:
a3:4d:fe:a8:07:5d:2b:45:9f:31:e1:ef:f4:a8:05:
20:fb:f4:65:4e:10:06:60:b5:79:ec:ee:da:82:b6:
20:02:aa:74:fe:ad:c6:a3:9f:13:4b:a2:19:8c:8f:
16:e3:68:07:16:7e:58:46:84:4c:5c:bd:af:7a:86:
b5:ff:df:bc:c5:01:75:42:ee:60:99:91:59:ff:14:
b4:d2:ce:26:3c:1a:b1:84:5f:e2:f0:ea:2f:4e:0e:
22:f7:22:5e:64:af:85:6f:16:33:ff:7b:aa:61:c3:
95:99:d2:86:58:22:43:d5:bc:c3:d8:20:a2:34:ea:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:09:30:A7:16:22:8E:85:61:F5:F9:9D:3B:92:86:62:61:E8:04
X509v3 Authority Key Identifier:
keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:fd:39:2f:25:b6:36:8a:88:21:47:c4:d3:4d:c2:39:7f:
e0:35:aa:84:db:f7:fe:b2:44:9e:9b:c8:2b:a1:a6:e8:35:68:
76:19:42:5f:d8:28:f1:d7:60:af:79:29:d1:67:20:ed:ba:60:
01:d8:9f:9e:0c:f3:4b:c5:eb:32:f2:0c:5a:4e:c5:21:47:85:
07:cb:28:88:4c:0b:9c:c5:9c:a6:be:b6:3d:c9:69:f5:c6:72:
c3:97:27:e0:ae:d7:5b:2e:17:d8:64:e2:f0:22:89:a4:75:41:
7b:e2:b6:8d:9e:92:af:c0:0b:95:af:78:91:1d:2a:32:42:af:
58:95:86:46:92:2e:65:08:74:5e:96:ef:b0:46:d5:fe:c2:1e:
d3:eb:d3:d9:ab:a8:52:13:ed:78:3a:79:90:f9:08:88:86:62:
ac:68:87:73:d3:3d:ab:24:5f:4f:1f:54:27:eb:c5:a5:21:9c:
e1:9e:da:5a:f3:fb:fc:0f:73:2d:73:8c:fa:8b:8a:00:ab:4b:
cd:78:b4:4c:3f:88:6d:f7:78:e0:6b:c4:ab:6d:2d:92:d6:20:
82:c2:6c:44:7b:b9:8e:87:1e:0b:8b:b0:9c:d7:3c:bd:ca:40:
5c:4f:d1:40:75:9b:8b:08:e1:fe:c3:03:4e:86:8b:48:d2:12:
3f:b1:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:23 2025 by rpki-client