Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft
File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json)
Hash identifier: M6/8BHj0i8F1RDAgWYlxA3BCho7rHrzGSZICXlH+qCA=
Subject key identifier: 2F:AA:89:82:74:52:84:D0:A4:8E:1E:55:D5:3C:6D:2D:3D:9A:C1:49
Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8
Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8
Certificate serial: 7BF657FA9A18ED47632E5715EECAFFA3BCCC78E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft
Manifest number: 77
Signing time: Thu 27 Mar 2025 01:41:36 +0000
Manifest this update: Thu 27 Mar 2025 01:36:36 +0000
Manifest next update: Sun 30 Mar 2025 13:32:36 +0000
Files and hashes: 1: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=)
2: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: YyNSOHvE1iaoxcPb1Zy+F/+yt2/aCysEObG3hL4XdZo=)
3: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=)
4: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f6:57:fa:9a:18:ed:47:63:2e:57:15:ee:ca:ff:a3:bc:cc:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8
Validity
Not Before: Mar 27 01:36:36 2025 GMT
Not After : Mar 30 13:32:36 2025 GMT
Subject: CN=2FAA8982745284D0A48E1E55D53C6D2D3D9AC149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:7d:24:d4:31:12:6f:b6:ed:4a:22:41:d9:
90:6d:b1:7e:fa:fe:75:ba:49:65:ab:a2:c9:3a:01:
8f:27:22:d7:2a:93:d4:93:02:b9:8e:a1:14:96:e1:
f5:03:de:22:1c:1a:0b:3c:07:cb:b5:60:d3:9c:7b:
37:cf:dd:68:14:79:f7:fc:12:5f:39:df:19:b2:06:
02:2a:1d:43:6a:af:fd:88:64:c2:f0:61:11:e8:fb:
8f:d5:bb:f8:87:4f:fb:63:dd:9e:08:ff:6e:55:ce:
25:01:b1:6b:2c:59:c2:0e:a6:30:52:44:a9:64:97:
c7:89:f6:e7:1f:52:d2:46:f4:07:9e:8f:dc:38:15:
aa:1c:7c:56:bf:84:b4:72:14:88:31:60:2a:36:d9:
b0:0f:29:03:e0:3b:08:25:97:65:56:a2:59:0b:6c:
be:be:c5:40:5b:67:74:9a:d8:c7:96:d0:96:ca:9e:
4c:9d:e6:ca:e5:1f:42:07:66:0b:49:85:92:25:d9:
c9:88:3c:3f:11:24:e9:37:83:b0:a7:db:33:26:48:
7b:e0:7c:59:13:9f:a7:a5:42:b8:c5:c1:bf:9d:3a:
a5:a1:a1:82:c4:c6:81:62:2d:88:fa:55:36:f9:37:
b3:c3:97:32:38:e2:60:57:b3:f7:35:50:7b:cd:2a:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AA:89:82:74:52:84:D0:A4:8E:1E:55:D5:3C:6D:2D:3D:9A:C1:49
X509v3 Authority Key Identifier:
keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:95:8c:8f:53:5f:17:55:be:b0:05:c5:a5:a3:65:8b:1f:b9:
08:62:52:84:da:22:a6:65:11:b2:09:a9:8f:f4:47:0e:21:67:
39:6f:1b:d8:cd:51:be:42:04:ea:87:9f:92:00:e9:d1:09:99:
05:0a:51:e1:cf:20:af:1a:df:c3:81:e3:72:94:c0:86:2d:50:
a0:11:d2:bb:3d:6d:64:40:45:8d:dc:36:03:6c:05:9b:ae:9e:
3b:b1:56:97:ed:87:9c:71:3f:a1:1a:c7:65:8a:69:0e:51:d7:
2f:11:35:fa:18:9c:54:a9:ee:b3:f6:ba:81:87:31:9c:78:b1:
a0:31:3a:31:46:a5:af:bd:ba:d1:2d:9b:84:c1:1e:78:9c:95:
24:fb:9a:91:a9:20:29:5f:19:f7:28:c6:94:7a:ae:cc:ee:0c:
de:c4:99:9d:50:e7:f1:c9:fc:3c:6f:7c:71:20:80:35:33:a7:
8b:a9:4e:89:7a:1a:9c:34:d6:6e:8a:77:e2:db:fc:25:83:01:
1d:73:fc:13:41:b8:6f:ab:df:29:3e:1b:52:1a:09:2b:67:f1:
f9:3f:8e:82:01:e9:df:a4:91:a9:08:4b:ae:8c:90:28:00:9d:
67:95:b5:04:c4:23:eb:f0:13:5e:b1:68:a0:ae:df:76:26:e9:
85:49:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:43:35 2025 by rpki-client