Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft
File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json)
Hash identifier: AjMDVp0XhdVV7GEq1yfO3/DpombG7N9xgrcj/5Omalw=
Subject key identifier: 7D:E1:D9:1F:E4:46:01:36:82:DF:4D:BC:51:E9:50:E8:1E:9C:1C:40
Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8
Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8
Certificate serial: 42B7F9BD10600636B33D57E80CAF69A2B75557F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft
Manifest number: 01BD
Signing time: Sat 29 Mar 2025 09:21:05 +0000
Manifest this update: Sat 29 Mar 2025 09:16:05 +0000
Manifest next update: Tue 01 Apr 2025 09:28:05 +0000
Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: eCE1Vldg+6Zu0UbUoAu76XxJnAdggVm2QDq2eX1tBXk=)
2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: Vd0u+btEJrECnabQnVYiOtI3DjTRkUJ1K6mSTrY7Rkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b7:f9:bd:10:60:06:36:b3:3d:57:e8:0c:af:69:a2:b7:55:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8
Validity
Not Before: Mar 29 09:16:05 2025 GMT
Not After : Apr 1 09:28:05 2025 GMT
Subject: CN=7DE1D91FE446013682DF4DBC51E950E81E9C1C40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:76:ca:c4:f6:ab:00:1a:d7:06:5c:7b:b9:9b:
ab:b9:e2:e7:91:2c:82:28:23:51:9e:07:3d:94:48:
3a:b7:62:12:ab:cc:ed:00:0d:1f:e6:df:a7:59:10:
da:3c:3f:4e:65:36:ef:30:f5:16:32:05:f3:e4:30:
b2:25:5b:c3:7d:5c:d1:08:66:95:db:7c:9b:92:4b:
a2:a4:d8:86:0a:76:0a:91:ba:fe:ec:83:0f:43:6f:
0b:02:57:9a:c2:3b:61:71:c0:7a:1b:22:f0:1f:26:
d4:86:80:75:ca:99:93:01:ca:27:ff:0a:dd:fa:3a:
04:ed:23:77:40:f7:d7:b6:7f:5f:4d:fd:ef:1c:d9:
8c:82:78:2c:25:e3:40:d4:e6:ed:9b:22:ee:42:a0:
2e:52:d5:d3:c6:d4:bb:74:1a:0a:f1:a1:2a:9c:64:
83:dd:39:1a:fc:31:be:ec:1a:12:bb:5e:ad:ea:5a:
22:d8:c9:e8:06:ad:e7:9b:cb:fa:2f:3e:99:84:a2:
6f:84:d3:11:da:37:dc:2d:69:bb:2e:de:68:a9:69:
60:3e:bd:f9:31:4c:db:a4:76:36:c2:ce:68:b4:d8:
b8:3d:c9:72:42:cb:17:ad:b2:58:65:a0:a2:4f:dc:
4d:ed:e3:84:e5:e9:92:48:cf:6f:6a:9b:ce:bf:ea:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:D9:1F:E4:46:01:36:82:DF:4D:BC:51:E9:50:E8:1E:9C:1C:40
X509v3 Authority Key Identifier:
keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:48:6c:5f:ef:14:0d:c3:05:39:a6:66:22:89:90:73:40:eb:
38:47:96:d1:90:c8:86:92:d4:8e:af:53:65:27:6d:11:9c:68:
8c:59:e6:ff:ac:e4:06:d1:7f:2a:25:f1:10:16:ee:b0:7a:76:
21:9f:14:63:b6:29:01:ac:a3:9e:2a:91:79:81:aa:3e:be:94:
d5:d5:e2:2d:6d:84:66:0d:03:15:70:ec:a4:a3:57:c6:5b:24:
f5:c1:d9:de:58:f9:79:91:1c:bc:40:a3:70:97:aa:31:4e:28:
bc:4f:ee:90:e6:f4:99:4b:d6:be:51:d0:c6:79:88:4a:4d:ec:
04:38:03:a4:7b:d0:6d:b2:d2:c4:51:31:44:98:8d:97:be:aa:
39:74:25:75:c6:de:7e:13:05:3d:40:05:c1:24:ee:67:d7:11:
e7:c1:ba:40:11:a4:55:c8:58:71:a4:3d:c6:db:8c:d9:ae:48:
5f:75:4d:dd:c9:4b:43:cd:c9:bb:49:c4:ec:4a:1b:02:5e:91:
16:fe:3a:38:2a:90:03:79:3d:d0:ff:08:57:89:29:24:6c:f6:
0e:4c:0a:d5:7e:d5:bb:75:31:e5:af:0a:00:09:4d:8f:71:d4:
5e:ed:ba:66:79:96:2e:ab:56:5f:1a:26:75:8d:5b:f1:24:2b:
b2:35:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:15 2025 by rpki-client