Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json)
Hash identifier: mrUO+xM4MJedeLd5vfw9zC+GfRHbKX4e0/cOsB2aaCM=
Subject key identifier: 52:F7:36:AA:73:1B:DC:04:36:60:C1:5E:A0:38:B4:7B:B9:9A:48:D8
Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Certificate serial: 62E88EF31DB5125D4280D8B0D7FE903DF8D01122
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
Manifest number: 81
Signing time: Fri 28 Mar 2025 23:11:24 +0000
Manifest this update: Fri 28 Mar 2025 23:06:24 +0000
Manifest next update: Tue 01 Apr 2025 07:03:24 +0000
Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: UQvjbahM5wEVbxKknlNWx8E15RhJ5vKpHF1nJfhJShU=)
2: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: 5+9WtW0y6whI7sRwXKLuIF1wKaAV5CDt5OGXcDbrDOo=)
3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: IO/iDpjxGtO9u/3pWEFUATuibuSL20cGvyzQOUML/eA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e8:8e:f3:1d:b5:12:5d:42:80:d8:b0:d7:fe:90:3d:f8:d0:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Validity
Not Before: Mar 28 23:06:24 2025 GMT
Not After : Apr 1 07:03:24 2025 GMT
Subject: CN=52F736AA731BDC043660C15EA038B47BB99A48D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:6f:02:b6:22:91:07:a5:04:e2:28:d7:b9:
c6:fa:ff:4d:b0:75:da:11:9a:b9:7a:1a:94:05:62:
15:5d:85:45:49:5a:3f:e1:d6:1e:8d:2a:11:a0:0b:
39:8d:c6:f3:00:f5:6f:bc:de:d1:c5:4e:bb:0b:46:
fb:19:4d:cb:2e:e5:8e:0d:5e:cf:4b:ed:a1:0c:2b:
9c:59:ea:e8:8e:53:62:45:2b:4a:96:9f:b5:eb:b6:
c3:52:1d:46:b7:0d:96:c3:da:0e:cf:54:56:ca:9a:
72:f4:27:5e:37:04:e7:22:1e:c0:45:d0:d7:36:75:
a2:a4:29:f1:f0:13:42:bb:f8:57:0e:44:90:e3:2f:
10:5e:91:de:38:1b:49:74:f8:88:d9:a2:19:0e:bc:
06:67:d8:98:47:1a:97:22:5e:a2:56:a7:3d:3d:44:
45:56:84:67:29:6e:b1:7e:f2:77:64:8d:70:78:53:
9c:06:dc:be:2d:1a:55:76:0d:1b:ff:45:ac:b9:80:
5e:56:91:c9:97:60:95:78:a2:a2:6b:40:74:62:ca:
a5:cb:a8:94:78:67:1c:9b:c4:d2:ee:8c:10:62:fd:
83:ce:e7:69:9d:fd:dd:85:4f:47:d5:e6:d7:f8:4a:
ef:9f:da:1b:5e:14:b9:6f:53:f0:6e:0a:6e:f5:28:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:36:AA:73:1B:DC:04:36:60:C1:5E:A0:38:B4:7B:B9:9A:48:D8
X509v3 Authority Key Identifier:
keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5f:13:22:02:53:a9:32:00:b0:f8:c7:bb:eb:69:cc:a7:67:
41:02:b3:2a:22:a7:83:10:57:69:e4:b3:99:1d:61:41:33:36:
0b:36:96:8b:96:5d:56:50:99:bb:a9:51:e7:c5:51:a7:85:74:
2d:b7:43:81:b9:32:6b:9b:e4:82:d9:6d:04:1b:48:ec:46:ba:
18:0e:8a:56:64:2f:00:2e:9b:cf:22:2b:f6:1d:bc:d8:b4:04:
1a:f2:41:24:be:e5:fa:2e:da:37:3e:d1:c4:76:b1:f0:46:ea:
52:ad:4d:bb:ec:95:0a:1e:a0:4c:72:df:45:49:25:82:43:86:
49:bc:4f:92:66:25:77:7c:c3:80:cc:c2:fb:eb:b9:8f:19:52:
44:2d:1e:c0:dc:00:12:34:84:e6:24:67:10:f4:84:ca:e8:fe:
e8:27:db:88:a5:e3:5c:00:c3:58:52:ac:2e:d9:fd:b4:af:bd:
24:8c:1e:f8:81:b8:19:31:c6:3e:dd:9c:2d:ad:6f:69:f6:ec:
ba:b6:04:4d:bd:5b:b6:b2:62:35:58:0b:cd:0c:59:fa:7c:58:
c3:fb:66:41:7c:0b:e8:61:bd:39:9a:5c:51:7b:18:8c:33:9d:
f4:e1:15:88:68:4c:56:4f:5d:bd:ae:b7:e9:23:f6:c9:0b:c7:
0a:d9:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:25 2025 by rpki-client