
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json)
Hash identifier: c3d/Kouobr81I2VQN7IA4HAcqm4x2ab2jyj6QjtfYW0=
Subject key identifier: 61:24:80:03:3E:D8:0D:92:65:46:D2:7F:7F:2B:73:76:76:C1:8F:8B
Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B
Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
Certificate serial: 55A2670B8074780AD093E51199FCC69FE4615BB1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
Manifest number: A3
Signing time: Fri 28 Mar 2025 18:32:15 +0000
Manifest this update: Fri 28 Mar 2025 18:27:15 +0000
Manifest next update: Tue 01 Apr 2025 05:57:15 +0000
Files and hashes: 1: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: Fy8DpP1Xrx7q2gwfyJRpPdYluhwe+Xyh4/IzM8NqOy4=)
2: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a2:67:0b:80:74:78:0a:d0:93:e5:11:99:fc:c6:9f:e4:61:5b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
Validity
Not Before: Mar 28 18:27:15 2025 GMT
Not After : Apr 1 05:57:15 2025 GMT
Subject: CN=612480033ED80D926546D27F7F2B737676C18F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:44:16:c2:6f:50:fe:77:7a:d6:5a:c5:6f:
72:71:6b:bd:9d:22:b0:f6:ea:0a:d9:ac:f5:80:20:
83:7d:8c:07:7b:5b:32:f6:f7:cb:33:d0:81:d0:37:
3f:b6:26:4e:d2:43:fa:a8:cc:ac:71:d8:6e:ff:0e:
bb:8a:dd:74:18:be:bc:4c:26:1c:9d:5d:cc:21:09:
74:91:ad:fb:22:8c:5b:56:a8:f9:48:ed:2e:98:0a:
ac:c3:81:03:b7:83:cd:d1:d9:dc:aa:13:f7:ed:d7:
c4:85:df:c5:0e:b3:9b:4d:c6:80:8c:cc:3d:d9:3a:
d0:cb:04:e9:81:40:d0:ec:5b:48:ed:a0:f2:bf:41:
b1:90:ed:3f:c1:01:5a:d5:e9:d7:fe:3a:0b:2b:78:
93:bd:44:16:05:d2:ed:48:a7:22:e7:e4:7a:a7:da:
20:7d:a3:90:7d:76:7c:fe:08:e6:c5:57:82:76:c9:
46:ff:7a:53:c1:de:92:97:73:2e:db:c1:bf:a8:00:
3f:05:53:46:32:c6:57:d7:29:4f:01:b3:48:89:ae:
5e:48:a8:26:cf:6f:4a:ca:48:0c:14:c1:e9:e4:e8:
8c:ba:b2:1c:a5:bf:87:1c:85:92:06:b0:26:13:40:
7e:ad:a4:6f:c1:52:60:2b:1b:59:70:3a:a1:9d:f9:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:80:03:3E:D8:0D:92:65:46:D2:7F:7F:2B:73:76:76:C1:8F:8B
X509v3 Authority Key Identifier:
keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:76:78:48:8a:14:81:e8:54:54:3c:dc:0f:20:8a:dd:2d:11:
91:62:45:32:16:1f:6a:2d:16:de:c6:a8:6b:43:c3:d2:3b:1b:
80:c7:c8:75:dd:d7:4c:da:0d:bb:20:c9:e6:9b:79:94:85:98:
43:48:e3:d4:36:c1:a9:ea:36:c1:72:10:31:3a:ce:12:d4:74:
67:74:21:87:b9:3f:f1:85:0d:43:cd:dc:13:d2:29:2f:84:b6:
33:45:e6:29:88:ba:93:ed:b0:46:ee:cb:ae:a1:cd:26:1f:5b:
24:67:ef:85:40:92:27:da:d7:fb:de:fd:d2:a9:3a:e0:f3:4c:
74:be:6d:3e:9d:c0:96:ce:16:11:d8:0a:6e:9a:46:ee:02:9e:
cb:42:2d:43:8b:49:68:23:bd:dc:45:c8:47:0f:1d:f2:15:6c:
22:e6:44:7b:b6:d1:6a:a6:ca:26:e4:c1:78:10:be:3a:2d:42:
cf:f1:2d:3c:c0:1e:50:57:51:7b:17:a4:0e:5c:e6:0d:1a:4b:
db:6d:4d:d3:e0:e0:96:ca:04:8f:22:8a:de:47:a6:a6:62:d1:
07:07:b5:73:98:7c:14:21:25:22:8a:a6:c4:b3:70:d1:fc:9f:
a9:17:36:21:22:4b:76:b8:9f:39:67:da:3c:a0:9a:10:65:64:
9a:55:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:38:34 2025 by rpki-client