Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft
File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json)
Hash identifier: RH3u+r+B27XI+KNHp/tiwNrqkNJ9WpT82w0t73/sl1Y=
Subject key identifier: 6E:8B:9E:2E:37:68:5C:C7:3D:68:4C:2D:BE:5A:F6:99:D9:94:8D:30
Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Certificate serial: 8A3D874BD987C8292600BE6F1C930A01CEBA83
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft
Manifest number: 33
Signing time: Sat 29 Mar 2025 05:31:17 +0000
Manifest this update: Sat 29 Mar 2025 05:26:17 +0000
Manifest next update: Tue 01 Apr 2025 09:32:17 +0000
Files and hashes: 1: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 66g0GBTdSeAme2H37nLc01yyifW6eVqeoyuhCfgsCgA=)
2: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: ysx5pKkZfATETWTEhxpt/VkIgK+geT2B5o5zX+RNwGw=)
3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8a:3d:87:4b:d9:87:c8:29:26:00:be:6f:1c:93:0a:01:ce:ba:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Validity
Not Before: Mar 29 05:26:17 2025 GMT
Not After : Apr 1 09:32:17 2025 GMT
Subject: CN=6E8B9E2E37685CC73D684C2DBE5AF699D9948D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:15:3d:d3:1a:74:3b:d2:20:bc:18:71:1b:
d4:46:5d:0b:62:b6:a4:51:9c:d7:e6:31:bb:e9:29:
4b:15:1b:9e:42:c5:db:e8:5b:7d:45:43:1a:34:df:
67:ac:7d:66:cc:a5:2c:ad:17:cf:86:a6:ce:c0:52:
49:e2:98:8b:4d:a2:23:60:67:60:80:d5:fa:f3:26:
2c:77:09:07:23:d5:b3:5f:3f:b3:55:4d:3f:89:71:
10:1e:d0:3e:ea:df:66:41:46:d6:a1:83:be:10:35:
81:2f:29:57:3e:ff:1f:4a:16:43:b6:6e:9d:bf:cd:
0a:88:6e:ec:99:33:dc:64:b1:77:22:68:56:56:7a:
e4:b2:92:76:63:23:6e:da:5c:d7:0c:e7:15:a9:32:
77:3a:30:58:62:77:78:dc:c7:f0:3a:37:f5:47:05:
85:21:8d:63:1f:cd:ac:18:bd:e4:ab:a2:1b:42:fc:
81:b7:b0:e5:07:82:c4:6f:1c:66:96:09:44:00:af:
90:d1:e1:ed:90:fe:e0:dd:da:ca:1c:62:72:ae:cc:
50:52:18:e7:f1:ce:bb:d7:4d:ac:53:7a:3f:75:1e:
7a:63:3c:00:50:5c:88:76:c8:5c:d2:d5:ad:5e:bd:
04:1d:fc:a0:de:e5:73:70:d7:f1:e8:63:57:7b:63:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:9E:2E:37:68:5C:C7:3D:68:4C:2D:BE:5A:F6:99:D9:94:8D:30
X509v3 Authority Key Identifier:
keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:46:42:5b:57:f0:76:47:f3:94:61:31:b0:c4:01:11:58:ea:
e9:ae:79:48:7f:79:1c:34:6e:f4:ba:03:5f:c0:e3:ed:7c:de:
67:64:de:61:7a:90:bb:c1:7c:95:cc:6e:7b:9f:fa:db:3a:39:
98:64:35:1c:4d:35:a8:52:03:67:03:98:06:bd:cc:b3:9d:f4:
83:d7:11:32:6b:70:6b:94:31:85:90:a8:02:40:bf:0f:78:78:
39:59:72:6f:77:f8:2d:33:57:17:de:c0:64:d8:70:cd:96:59:
62:fd:24:ab:90:59:d8:6d:aa:5b:62:e8:29:74:46:a1:30:85:
e5:f6:2d:0e:d5:b9:77:db:08:3f:63:e5:ba:c4:0b:bf:2c:48:
64:42:60:11:e9:94:97:ef:59:8d:b3:4c:34:48:50:dd:13:ff:
13:56:53:c9:16:9d:96:8b:08:18:33:4c:c9:9f:fd:14:90:26:
55:8f:f8:eb:59:b6:5a:46:9a:b9:5a:23:10:79:fc:dd:b5:ee:
73:bf:f3:c7:91:e9:f4:3d:b2:93:a5:f4:d9:57:2c:00:4b:4f:
92:65:e3:96:8c:c3:b3:4d:c1:05:fd:59:f3:f4:f9:63:94:98:
61:11:d3:13:b1:7a:5e:6f:f0:4b:f8:c1:a3:9d:c4:fc:2e:e4:
bb:89:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:22 2025 by rpki-client