Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft
File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json)
Hash identifier: bVE+rA0sRjBbg1HgYty9VO1EXqgwJE7z2vKDcFT4UHU=
Subject key identifier: 24:54:C8:67:F5:90:50:7E:3C:C8:D0:FD:27:4D:53:E2:14:B4:85:2F
Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64
Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364
Certificate serial: 1B683130627A489D72557618B6A04A85298E17AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft
Manifest number: 04C0
Signing time: Fri 28 Mar 2025 18:30:52 +0000
Manifest this update: Fri 28 Mar 2025 18:25:52 +0000
Manifest next update: Mon 31 Mar 2025 22:05:52 +0000
Files and hashes: 1: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=)
2: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: 2z41bOv4P0bIjXrW9hzgsIjEp/847NTDBQuCs0WZwnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:68:31:30:62:7a:48:9d:72:55:76:18:b6:a0:4a:85:29:8e:17:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364
Validity
Not Before: Mar 28 18:25:52 2025 GMT
Not After : Mar 31 22:05:52 2025 GMT
Subject: CN=2454C867F590507E3CC8D0FD274D53E214B4852F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:95:50:49:51:09:e9:0f:2e:40:76:c6:a4:
ce:b9:dc:7e:ae:71:93:b2:f8:6f:e7:67:2f:57:9a:
b4:fe:bf:f8:30:ba:67:94:3a:1f:5f:53:34:a1:db:
fb:db:cd:f8:cf:7b:6e:63:45:66:cc:96:b6:cc:67:
49:8d:bd:1b:08:9b:47:ea:e2:8a:85:93:44:00:e8:
dd:c4:8c:a6:e6:f1:61:e2:6e:ce:0d:fa:ce:70:0e:
a0:1b:4b:db:87:f1:44:bc:c4:a2:64:00:ab:7b:8f:
8d:20:82:ff:f0:6a:60:b5:4b:c7:9b:62:be:49:cd:
b6:d1:91:52:98:c5:bf:36:14:d2:a0:ce:e5:ab:ed:
0a:53:3a:55:3b:c5:99:35:e7:0f:ab:00:fe:14:ae:
2d:58:b6:da:0e:a0:17:c6:2e:e0:39:a4:a5:4a:2c:
70:d9:2e:c1:07:9a:7a:4b:f9:00:07:79:d1:b0:ef:
cc:f1:16:7e:8d:cc:65:a1:39:87:c7:ef:20:7d:a6:
b5:40:f4:d3:9e:86:3a:ef:90:95:0c:45:57:12:c2:
10:21:74:d5:aa:dd:0d:d7:a1:45:a4:74:87:a3:00:
d0:0b:74:5d:2f:ed:65:3d:91:68:d1:17:80:30:3c:
77:c1:ca:2a:5d:30:72:8c:f1:ea:6d:c3:6a:cc:6b:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:C8:67:F5:90:50:7E:3C:C8:D0:FD:27:4D:53:E2:14:B4:85:2F
X509v3 Authority Key Identifier:
keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c0:00:a6:e1:04:bf:a1:78:a8:5d:db:35:aa:1a:bb:95:e4:
d0:e7:27:17:f2:ce:f8:84:cd:68:0b:59:e1:e7:6e:40:76:85:
38:b7:8c:97:c6:74:66:4f:fa:ea:a5:b2:b1:22:6a:66:29:99:
b6:0b:e8:f7:8d:ba:ee:21:ba:51:45:8d:8f:49:59:19:54:89:
00:f2:39:0d:23:52:b5:08:ea:cd:ed:cb:97:b4:0f:72:83:0a:
f6:28:7b:2f:7f:1e:85:94:3d:10:e0:bf:0c:1c:6e:fb:9b:39:
29:de:8c:3c:53:35:ba:b5:7d:3a:1f:f0:d5:a1:5a:2a:0d:64:
d2:52:51:a0:a7:77:fb:71:f8:76:3b:f6:c5:d2:69:6f:af:1f:
1d:af:33:69:dc:0a:24:f1:6c:0b:17:01:59:49:3f:45:72:4a:
6a:d1:08:8e:ab:b3:49:cd:67:a5:13:67:b3:2d:e2:d4:4c:7a:
c6:f4:3a:fd:84:c4:7b:a7:e8:1c:be:55:23:46:52:23:64:17:
5f:62:17:59:6e:d0:38:ca:9d:1d:46:25:fd:70:a4:bd:f2:a4:
3b:1b:86:3b:d6:e2:d8:2e:7f:6a:b0:24:bd:7c:3e:94:1d:07:
b3:df:91:fc:8b:95:f6:87:6e:bd:35:7c:bd:a6:2f:09:b9:74:
68:e9:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:25 2025 by rpki-client