Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json)
Hash identifier: Tcsj/1GDdNXr804JQnFDeQ8h2G3LibIi4fLqhqyqIY8=
Subject key identifier: BB:10:1A:B8:4F:91:6F:EF:84:13:08:84:BF:F1:9F:F9:13:08:97:94
Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA
Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA
Certificate serial: 4B9555C462931018612A4DE540BB6CDBD804D0AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
Manifest number: 0192
Signing time: Sat 29 Mar 2025 00:31:20 +0000
Manifest this update: Sat 29 Mar 2025 00:26:20 +0000
Manifest next update: Tue 01 Apr 2025 08:20:20 +0000
Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: DKPit0bPORk3+QLh0pzGYwFBstc0d1uu4ixPVYgNKyk=)
2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: yfirY/IdmmUBXQP+agxLPC5R2mzKmb/7B1nbgYo1Od4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:95:55:c4:62:93:10:18:61:2a:4d:e5:40:bb:6c:db:d8:04:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA
Validity
Not Before: Mar 29 00:26:20 2025 GMT
Not After : Apr 1 08:20:20 2025 GMT
Subject: CN=BB101AB84F916FEF84130884BFF19FF913089794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:6c:38:f0:08:e2:2b:69:33:ad:5d:30:6d:
4f:f8:ba:83:2b:c7:cd:c0:7c:81:4c:87:65:a9:b5:
a4:73:0b:85:55:db:2b:f7:85:2a:06:b2:36:34:b7:
cc:0f:9b:db:fc:f5:71:14:22:18:3d:45:2a:7f:8a:
1a:32:c3:4c:29:da:5c:e1:97:c4:0f:12:31:a5:ae:
48:67:1b:74:fe:78:68:10:f7:84:3f:93:42:97:8a:
62:0b:3f:10:25:d1:b2:19:3b:e1:ce:26:c0:fd:c9:
f5:b5:44:45:02:c9:8a:bd:6d:87:18:bf:88:0b:07:
28:1d:a6:fc:d7:36:1e:47:7b:51:56:40:16:ba:8a:
18:13:0e:76:bd:2c:71:8d:4e:3a:05:93:f3:b0:48:
94:5a:6b:46:5d:e3:ba:c3:e6:64:8d:17:19:e2:21:
52:72:be:62:94:a1:6a:55:b9:44:ad:f3:76:c0:47:
e7:15:8c:20:fe:ad:5a:3e:18:bb:12:20:76:ee:71:
e2:c0:4c:c3:71:15:a3:10:f5:da:52:2c:98:63:92:
67:38:d4:e0:76:dc:d0:dd:e7:e5:79:2f:7d:e0:47:
da:f1:1a:cc:f9:d2:a9:6f:f4:72:d5:db:0a:18:ce:
eb:ab:03:bb:f2:e1:a9:9c:36:5b:64:16:86:e4:36:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:1A:B8:4F:91:6F:EF:84:13:08:84:BF:F1:9F:F9:13:08:97:94
X509v3 Authority Key Identifier:
keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9d:a6:79:a1:5c:67:44:e0:0e:58:24:ee:66:f4:e7:14:4c:
39:e3:f3:d0:b5:90:4a:94:1d:a4:71:d7:23:39:ae:8e:cb:6a:
4f:74:86:75:e7:27:b0:a7:24:69:6f:d3:22:5d:5f:83:aa:42:
f6:f4:51:6b:cd:32:6d:c7:b8:b2:e2:e8:94:c2:c4:c8:4d:eb:
fb:2e:e5:b4:26:d9:7c:3b:db:cc:0c:1c:c1:4e:b2:2e:04:fd:
26:fd:9a:f6:e4:26:3a:c4:4e:23:a5:6a:9a:31:55:fb:29:5b:
17:41:6b:b6:de:b6:7c:71:92:ea:9c:c0:f7:7a:8c:1c:97:63:
cc:61:02:1c:05:b6:dd:20:05:71:1e:74:32:9d:77:db:87:2e:
82:25:60:27:1d:19:e4:9d:00:1c:ab:1c:4d:71:c3:d4:d2:ab:
40:4b:f0:c4:5b:50:60:04:87:a1:fe:87:2e:f2:83:30:0b:8f:
cb:31:3d:86:de:72:1b:4b:9e:44:71:b9:d8:07:38:74:01:79:
f9:e8:d4:e6:d4:0f:69:c1:b1:e4:92:3c:a1:a4:a3:01:c0:38:
b3:4c:ae:2f:0c:80:05:85:fa:5c:ff:7c:2b:5c:ba:03:fe:3b:
94:ed:71:4a:ac:5f:65:05:b5:79:a6:36:e2:f4:41:30:30:d1:
70:a0:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:37:11 2025 by rpki-client