Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft
File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json)
Hash identifier: xRU3YSE4sqgKBHx1gAMt3VOcmcaZqtuq4QKzLmFZYqQ=
Subject key identifier: A6:CB:3D:91:AE:76:93:77:48:6F:C3:B3:2D:12:36:8B:BC:E5:CB:E0
Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8
Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8
Certificate serial: 238EC9AF0E0A5546181E04D172334B849C47A32C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft
Manifest number: 8B
Signing time: Sat 29 Mar 2025 03:52:16 +0000
Manifest this update: Sat 29 Mar 2025 03:47:16 +0000
Manifest next update: Tue 01 Apr 2025 13:59:16 +0000
Files and hashes: 1: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: DWjdVyyei1KmxAJ83RMT4bXmNp0sw1ZdlinuHCCOQ7E=)
2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: 1f4UXWKsOacyCVtxubj2AeJTPPvOpeqJnHyC0iziuxo=)
3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LrI1MXered6/Wn/sgVv2p3qHmbqQpnmve4fLzG+M9WE=)
4: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: UffQnz05QFV8GgWK1doH6hmpZ9NUthRZ5as/2PM5Ybc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8e:c9:af:0e:0a:55:46:18:1e:04:d1:72:33:4b:84:9c:47:a3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8
Validity
Not Before: Mar 29 03:47:16 2025 GMT
Not After : Apr 1 13:59:16 2025 GMT
Subject: CN=A6CB3D91AE769377486FC3B32D12368BBCE5CBE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:aa:7e:f0:db:e6:60:6f:2e:24:de:9c:2f:
9a:74:d7:c4:8f:c3:ba:ab:99:87:4f:3a:a8:2d:30:
19:59:55:65:80:5c:2d:f2:e8:24:d3:d9:4a:62:ee:
6b:88:34:30:09:a2:93:01:96:50:73:43:ef:79:ae:
a0:42:55:24:1e:6c:0d:36:fb:be:6c:9d:43:94:83:
01:e8:b5:52:08:f7:17:d7:12:db:21:e5:f5:3d:77:
39:d3:db:27:59:02:87:f5:6d:34:94:67:14:84:fd:
c9:f2:1b:d8:91:11:23:d1:bb:7a:33:7a:f5:cd:b4:
f0:c3:64:f6:e5:c8:ca:f1:63:52:35:b9:e1:91:e8:
40:87:3b:16:80:17:1c:d3:dd:ff:cf:e8:54:f5:ee:
c0:26:05:84:43:eb:05:c4:7b:8a:75:96:32:e6:2b:
ba:80:8f:60:ab:e4:ef:51:43:59:c5:53:e0:61:71:
bb:77:ac:78:f6:6c:44:6b:32:1c:92:10:d4:a6:93:
51:ff:d7:5e:e6:e6:6c:c0:7e:b1:84:4d:b5:d9:f3:
ba:4c:2c:9c:e5:35:ec:67:8f:66:7b:07:ae:e2:0e:
d7:3e:44:ce:ba:a1:d4:09:63:29:0f:36:e9:1f:61:
9b:e0:e8:30:a5:6b:c6:ab:24:46:de:f7:4e:72:d0:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:3D:91:AE:76:93:77:48:6F:C3:B3:2D:12:36:8B:BC:E5:CB:E0
X509v3 Authority Key Identifier:
keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:93:7a:a5:30:04:64:68:3b:5e:67:76:01:7c:14:d9:ae:de:
4e:98:51:bc:bb:b4:cf:1e:f3:ee:ed:6a:61:53:03:2a:25:e6:
9e:12:47:c9:47:11:12:1f:11:a4:2a:23:17:71:7b:e2:8a:95:
3d:38:eb:7f:f0:69:69:0d:44:d2:c1:cf:44:c2:c0:43:fd:f5:
f0:ca:ee:04:b1:09:01:b8:25:05:5b:60:ad:4e:c4:42:d9:7f:
ae:20:ca:4f:e6:0a:cb:c5:20:53:45:59:00:65:f2:3c:76:d7:
1a:75:04:6e:70:41:e0:45:b5:a1:58:37:7e:76:26:ca:6c:4a:
d5:02:3f:48:18:a4:14:0b:41:6e:f5:20:c3:6f:ed:00:27:01:
67:5f:a3:23:00:26:c5:d0:ba:24:72:1b:e9:6a:2a:3c:fd:36:
af:86:df:e3:c1:66:d4:d5:53:01:a0:b4:fa:23:60:3f:1b:a7:
8c:f5:95:ba:c3:1a:7a:c6:c4:be:5e:f6:1c:bd:d5:e6:9f:6d:
3a:72:82:dc:ce:82:cd:5c:33:fd:f5:bd:78:2a:b1:67:67:7b:
43:a5:ff:66:0e:44:1c:4c:9d:d0:01:d8:59:10:a9:2f:53:2e:
93:3d:e9:98:b1:a1:c0:81:df:88:a5:ff:04:0a:75:10:3f:65:
fa:a7:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:50:33 2025 by rpki-client