Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
File: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft (raw, json)
Hash identifier: Hi52tUumLNz1GZj2uKUd6jRY7BilXj+LrE6JHhtzZtg=
Subject key identifier: 71:FF:52:AF:D2:1B:92:7D:2C:98:AC:03:B0:1A:6E:58:D8:46:62:86
Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13
Certificate issuer: /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313
Certificate serial: 08AA26BE89AB8CC1D1BFBD986EF5AF11F296212A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
Manifest number: B0
Signing time: Thu 27 Mar 2025 04:02:03 +0000
Manifest this update: Thu 27 Mar 2025 03:57:03 +0000
Manifest next update: Sun 30 Mar 2025 11:54:03 +0000
Files and hashes: 1: 3231302e37392e3134322e302f32332d3234203d3e20313431363037.roa (hash: 2z5796EleJnilMU0FLojzkS/vK51uqD5/u1kXEKOaNc=)
2: C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl (hash: Es8otPKzupHO7Zebq0HZsWcq/8i0DdR4dMtvQ3rWjjU=)
3: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: Hi9atmKGqBLh80IcI4YfkhZtw64e+ySR+ExhE9rM6A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:aa:26:be:89:ab:8c:c1:d1:bf:bd:98:6e:f5:af:11:f2:96:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313
Validity
Not Before: Mar 27 03:57:03 2025 GMT
Not After : Mar 30 11:54:03 2025 GMT
Subject: CN=71FF52AFD21B927D2C98AC03B01A6E58D8466286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:e7:fe:cf:79:1e:b7:68:34:48:0e:b9:b5:
53:a9:92:12:9f:16:3a:4f:d6:9e:6f:1a:3d:45:eb:
9d:d9:f7:ae:07:e0:f8:b2:63:eb:69:3a:38:83:46:
29:32:c0:d0:68:39:91:6f:06:8d:d8:6e:82:40:d0:
b6:80:e5:59:fc:2c:86:d5:2f:51:30:35:23:a2:93:
e7:72:c8:04:34:36:ca:a2:c0:1b:9c:e5:4f:ef:26:
91:67:26:22:3e:36:08:ec:0a:96:09:0c:21:bb:13:
c2:96:93:a8:ec:25:bf:37:ad:47:aa:b9:2c:de:38:
de:63:7d:c7:cc:3f:06:0e:e6:78:70:7b:c0:20:6f:
21:bf:df:6f:ab:fb:86:21:30:86:b0:23:2e:08:35:
d8:2c:b5:57:57:ba:f7:5c:0d:e5:cb:08:00:f1:a4:
c1:78:03:85:78:4b:24:10:0b:6e:d9:4b:59:34:a2:
c3:d1:62:7d:ef:a1:a6:b4:98:11:c5:27:d4:15:b8:
52:c4:e3:0c:30:d2:ef:0b:b6:3e:3e:93:f0:6e:e3:
9e:e6:0a:ac:c4:56:42:f4:c2:6b:8b:b1:42:03:f2:
f9:62:21:9c:2b:38:32:ea:34:5d:e5:33:2f:d0:78:
ee:19:a5:87:09:37:2a:1a:12:10:c4:90:5f:22:f3:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:52:AF:D2:1B:92:7D:2C:98:AC:03:B0:1A:6E:58:D8:46:62:86
X509v3 Authority Key Identifier:
keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5d:e9:1e:b8:1e:6c:4a:12:29:96:f8:fe:43:9e:26:12:d1:
b6:48:d6:68:ce:4c:89:e4:55:a8:47:bc:e3:6d:4f:c0:90:56:
04:38:bf:68:21:ed:de:ca:d2:20:8b:ee:21:ae:e1:69:2c:3b:
1e:3e:78:34:39:0d:12:f0:7d:bd:fa:22:6c:d9:10:d6:69:be:
7a:03:41:1b:3f:f0:bf:65:de:26:2a:f9:cc:0f:08:2c:6e:15:
69:dc:a3:6b:ea:3d:65:d6:db:42:55:01:f7:01:81:ce:c1:ae:
41:46:52:91:ed:c9:74:b2:7f:52:84:5f:2e:3a:8c:14:75:d5:
43:f6:a8:01:a1:73:fb:42:3a:14:92:4f:05:ac:cc:e3:46:6c:
a3:ea:54:d8:51:92:c9:f2:de:61:7a:65:f9:d9:15:c1:a4:43:
c5:1c:84:9e:94:aa:dc:9e:02:14:9b:9f:f5:db:21:c4:a2:cb:
ee:00:cd:e0:52:dc:3c:18:9a:82:12:63:71:08:90:17:d2:fc:
23:de:a5:c5:ad:61:7d:93:a4:4f:cf:de:89:14:ff:86:7e:db:
17:66:79:16:aa:70:19:18:ec:11:21:4d:3f:68:af:9d:bd:b3:
21:57:17:6a:6b:d9:de:78:49:90:98:32:ba:60:9c:18:24:8f:
b8:01:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:41:23 2025 by rpki-client