Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json)
Hash identifier: SFVVrpOeSIlpVK1Zvrez8KkPqfENZpn3c4ZwGKZU9dY=
Subject key identifier: 0D:44:A0:21:50:01:BF:E0:7A:26:10:2F:70:74:0A:75:74:FD:04:78
Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Certificate serial: 3D776921C916BC467E06DEB879C833F9A823C13D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
Manifest number: 0326
Signing time: Fri 28 Mar 2025 03:42:11 +0000
Manifest this update: Fri 28 Mar 2025 03:37:11 +0000
Manifest next update: Mon 31 Mar 2025 04:04:11 +0000
Files and hashes: 1: 3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (hash: NY7ZKpTS8x6iG7pDiKwo2lthlZvBEnvtv5ofUcq2cR4=)
2: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (hash: pr2MBZq6g7ft4f9khoEPd8GyxWW5p8Qaxvgx0CiJp9c=)
3: 3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (hash: eLElha3taylp2ysYME+GbE2ZFl6WH4lBY9beIkH8KvM=)
4: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: QMENYoCbff08T0irBPAQ8LcPLkFWfKxRLs4SZR3fkEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:77:69:21:c9:16:bc:46:7e:06:de:b8:79:c8:33:f9:a8:23:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Validity
Not Before: Mar 28 03:37:11 2025 GMT
Not After : Mar 31 04:04:11 2025 GMT
Subject: CN=0D44A0215001BFE07A26102F70740A7574FD0478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:1a:3a:d4:1d:cb:dc:e5:4a:e8:dc:bb:1d:
6e:7f:a1:f6:80:f2:13:9b:c9:bd:bf:18:67:c2:b6:
d0:a0:81:4b:38:c9:9b:9a:99:1f:78:cd:8d:0d:92:
d5:b0:d4:bd:78:a1:e5:0b:f8:6b:96:bc:b6:9d:1b:
5b:d7:65:52:9b:91:66:e2:96:d9:97:c4:d0:19:5b:
ae:e8:2a:dc:ea:46:b5:65:18:13:96:aa:48:e5:e8:
d9:b1:3b:47:12:50:dd:69:e3:07:5d:6f:3e:b7:5a:
15:5d:70:06:d5:d8:94:1b:cf:58:7b:c6:0f:31:27:
76:9c:fe:50:00:a3:f4:6e:26:70:5e:41:f7:17:61:
68:1f:ff:ce:8d:dc:60:14:4d:91:85:90:f9:e7:5b:
94:a2:95:37:8c:44:53:11:e5:89:29:e5:30:8c:b0:
48:cf:74:3c:1a:77:ea:8a:07:a8:e3:e6:cd:73:35:
cc:70:7b:dd:48:f8:51:45:e7:4f:c1:9c:a1:94:56:
27:ea:ed:fe:90:cb:00:b3:fa:11:6c:ec:1e:9b:e8:
2f:c4:b4:c5:5d:f5:08:19:11:62:06:71:c6:e4:f9:
d2:87:23:dc:1c:21:ca:06:f1:1e:4e:01:c3:72:b3:
d0:cf:f6:e4:61:58:ea:48:03:80:1d:c2:e4:ac:b8:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:A0:21:50:01:BF:E0:7A:26:10:2F:70:74:0A:75:74:FD:04:78
X509v3 Authority Key Identifier:
keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bd:7e:2a:ad:6c:0e:be:4a:9a:8e:48:0e:09:19:27:ee:8d:
5f:d9:84:2c:92:29:9e:55:cc:cd:70:98:4c:01:bc:a6:12:1a:
d0:7a:12:6f:f8:ca:3c:f4:48:8a:97:75:57:e7:f7:29:a9:3b:
0d:fa:ad:27:6b:41:3c:de:28:87:9c:55:68:35:51:b8:f2:84:
30:45:b1:f3:8d:d9:41:fb:31:c8:d4:4c:c9:be:8f:f6:68:ee:
83:15:23:c9:86:94:92:28:5b:18:e8:23:02:72:62:29:a1:14:
24:c4:35:91:45:b8:15:ea:4b:e4:df:20:74:1e:da:03:6b:08:
66:b0:21:d4:8a:c7:6f:c5:dc:1c:1a:82:32:84:dc:35:45:59:
86:d7:c9:27:04:3f:12:2b:fd:5e:87:19:c3:9f:17:7b:62:cd:
37:d6:23:95:21:3e:3c:e4:24:ef:e3:61:23:bb:33:7b:f0:2c:
ca:e5:c0:06:65:7b:6a:81:81:09:8e:81:3e:03:be:03:01:07:
bd:28:6a:2d:ec:29:c3:c3:fc:c1:9a:59:e9:e0:ce:c0:df:77:
74:c4:4e:69:d2:89:3e:c7:3a:30:0e:e5:bd:ec:92:bc:8c:7a:
b9:18:c1:ce:6b:b9:51:d1:8a:af:21:4c:39:1a:86:63:45:ff:
da:a1:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:27:06 2025 by rpki-client