Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft
File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json)
Hash identifier: zReDn+NLUqxLvbY+NPl92nYgZxf0v+Dh4zc07Na40WQ=
Subject key identifier: 1C:10:D2:BA:76:62:A8:F0:87:95:FB:31:FE:EB:2C:62:8A:92:4C:2C
Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C
Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C
Certificate serial: 1451C1D9419BC5016743ED92486BC418383520DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft
Manifest number: 0126
Signing time: Thu 27 Mar 2025 08:41:40 +0000
Manifest this update: Thu 27 Mar 2025 08:36:40 +0000
Manifest next update: Sun 30 Mar 2025 13:59:40 +0000
Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: YwTP6biL0vWcLoh9MoLz1Uo2jrp+zMTivqpB+PZ6AqY=)
2: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: g/NS4UasYZ0fQE9n3uEUkCFnTGLCdbnhpocihSol9Dk=)
3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: eoiqESJfyAflmuyxAiqbZbjAB8pFlV4NBTXMBJ5PgaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:51:c1:d9:41:9b:c5:01:67:43:ed:92:48:6b:c4:18:38:35:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C
Validity
Not Before: Mar 27 08:36:40 2025 GMT
Not After : Mar 30 13:59:40 2025 GMT
Subject: CN=1C10D2BA7662A8F08795FB31FEEB2C628A924C2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:ce:8e:eb:2f:7e:eb:63:25:f0:ca:0a:e3:
f9:18:bc:39:5b:36:a2:70:79:c5:9c:33:ca:2e:e9:
82:ca:4a:05:51:88:ee:6c:cc:43:02:49:00:52:41:
c9:65:1f:e4:b7:9c:ad:45:c9:08:96:a7:00:b9:e4:
7f:d5:20:53:e3:23:11:7a:06:5b:c7:31:4c:f5:6e:
12:cf:c9:2d:01:30:36:19:bf:d6:99:69:4c:8f:52:
9c:51:f1:f8:d7:a4:30:b3:a6:18:19:66:a2:1e:3a:
aa:c1:9e:57:e3:21:dc:ee:97:3b:41:ec:5c:05:da:
f8:ad:8b:a7:17:5d:4a:73:22:29:8b:94:a4:17:17:
8e:9a:fe:33:e9:1b:20:90:c5:e9:b5:c3:72:04:ca:
0e:af:ca:c8:62:cd:86:82:4c:28:a0:f8:ac:2d:65:
87:7c:f6:23:1d:2e:33:d4:4a:26:56:1b:c9:a7:2e:
30:ad:9f:06:0b:98:e5:21:36:56:e8:be:5d:b7:2f:
30:90:c6:2f:fa:d2:6c:c1:09:1a:f1:51:da:73:dc:
79:77:9d:5c:60:ae:f6:b5:6d:4c:6e:7b:a9:86:b9:
79:2b:44:6d:aa:b9:90:16:89:a3:ec:f7:7e:bb:69:
a8:e7:50:b7:57:ff:4b:31:59:54:8f:2e:4b:53:b7:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:10:D2:BA:76:62:A8:F0:87:95:FB:31:FE:EB:2C:62:8A:92:4C:2C
X509v3 Authority Key Identifier:
keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:78:4a:cc:f8:8c:b8:ea:f1:42:19:67:1e:bb:f0:13:5c:
b6:56:bb:54:aa:26:59:c7:98:d7:f1:68:5f:5b:44:50:8f:81:
d6:0b:ce:a9:d7:c2:b6:82:aa:2b:21:d2:66:7d:92:20:9b:f5:
76:8b:bd:75:29:72:92:1e:7d:ba:d9:0e:a0:54:be:9e:66:54:
62:78:24:d8:02:c5:32:67:7f:92:fc:46:5c:35:be:41:5f:1e:
89:f4:0f:43:e1:de:ff:a3:28:c6:32:99:b0:6f:06:15:8e:65:
10:ba:74:da:95:ad:1e:0b:a3:72:ab:ce:1f:ee:3a:37:9c:64:
6e:db:fd:d0:ff:7f:e7:4b:c0:07:2f:af:84:f2:8e:b8:5c:12:
22:a6:1c:64:47:b7:bd:e9:b2:71:74:cc:bc:cd:7b:93:e3:76:
28:f0:6b:9b:db:94:f8:16:0d:b4:8f:bb:e5:2e:bb:df:92:6d:
25:c0:f0:74:5c:c3:f2:8f:34:2b:f1:df:e7:e6:26:45:ab:86:
fd:9d:66:cd:f1:b5:a4:47:be:95:d4:57:2b:b0:aa:6c:16:91:
b4:bc:b9:00:b8:5a:4b:ee:42:9a:9f:48:51:e3:3e:59:1c:6d:
ce:3d:80:9d:f4:e4:78:f8:d2:e7:fe:13:b0:f9:5c:3a:a0:1d:
1a:6c:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:50 2025 by rpki-client