Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft
File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json)
Hash identifier: kXLWXEgpR1jIZLDAF12yBriIe0z9NL9anqnRyRZ92cg=
Subject key identifier: E0:64:AA:9A:36:A4:60:C9:02:9F:26:F8:CA:DE:11:C9:0F:D2:AE:7E
Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8
Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8
Certificate serial: 417FC7B8E741E2F6A8051A0153B5FD1F5B877FFE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft
Manifest number: D9
Signing time: Thu 27 Mar 2025 12:01:30 +0000
Manifest this update: Thu 27 Mar 2025 11:56:30 +0000
Manifest next update: Sun 30 Mar 2025 20:52:30 +0000
Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=)
2: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: nWlc3aT6vikqeFekENR1e0qr3pvAydyvQywshUBUtDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7f:c7:b8:e7:41:e2:f6:a8:05:1a:01:53:b5:fd:1f:5b:87:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8
Validity
Not Before: Mar 27 11:56:30 2025 GMT
Not After : Mar 30 20:52:30 2025 GMT
Subject: CN=E064AA9A36A460C9029F26F8CADE11C90FD2AE7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:78:0d:d4:83:84:8c:fe:a6:3a:fa:9e:9a:
54:11:d5:2e:9b:08:a7:3e:1c:b1:ff:0f:22:05:33:
7b:20:bc:31:3b:0e:2b:53:44:ce:3f:a1:02:1d:a0:
40:d5:d5:3d:a5:c2:30:b8:49:7b:f5:7e:7b:e8:32:
3d:31:9d:29:20:0a:ff:cf:30:a1:c9:73:03:ec:8f:
ed:e9:ce:bb:49:98:4f:62:f3:d0:8a:7f:4b:1a:62:
48:60:71:cb:4a:7b:8c:ec:25:0b:cf:2d:68:0f:3c:
f0:c7:8b:39:f3:cd:c7:e1:87:fe:95:49:34:c8:dc:
72:f2:9d:86:84:61:4b:52:6f:cd:ff:d4:48:74:bf:
ab:32:76:d9:ec:70:96:a9:cc:34:e3:ab:1b:cd:0b:
81:06:4f:a7:6a:75:c0:c3:ff:00:1c:b4:86:6a:65:
6e:e2:76:48:8f:5d:1f:64:54:de:d3:e3:0a:8f:85:
e2:4c:72:1d:02:3a:f2:58:b2:a0:a5:29:80:8f:bb:
ea:d4:24:30:7d:51:75:73:96:ea:3d:b5:96:43:dc:
79:7f:f2:8e:d2:9f:e8:cd:f4:bd:e6:86:9f:c3:43:
56:ee:6d:b7:a5:c3:10:63:41:06:69:d1:8d:0c:09:
82:b1:2f:2e:19:cf:de:4b:ae:d7:ac:74:54:c4:5b:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:AA:9A:36:A4:60:C9:02:9F:26:F8:CA:DE:11:C9:0F:D2:AE:7E
X509v3 Authority Key Identifier:
keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:07:05:fe:bc:5d:2f:50:6c:54:3f:05:43:92:58:3c:d9:60:
99:f2:3b:f2:d2:4a:4e:45:0c:4b:12:7c:16:53:f8:ac:f9:72:
19:2a:7e:89:cd:cb:09:03:a0:37:97:07:18:60:c3:a3:bd:fa:
a5:3e:23:21:84:f1:53:38:f0:cd:4c:8c:29:d3:63:ec:b2:bf:
37:ba:14:40:73:e2:fb:3a:a3:c3:fa:2f:5f:57:53:61:70:ed:
d9:82:59:4b:35:7b:d9:27:14:b9:56:3d:c9:77:9c:14:1d:47:
5a:37:97:df:54:44:2f:83:26:3b:b7:e0:d7:a6:49:66:58:e0:
22:5a:de:58:c5:2a:98:34:ef:17:87:62:47:95:1e:a8:e3:50:
41:e3:46:23:05:95:db:c2:76:9d:8d:a3:cf:75:ce:7b:69:1a:
d0:65:e8:c6:ce:f3:cd:6f:c4:2f:d2:2a:c7:94:b4:67:a7:98:
82:3a:ed:15:43:4e:cd:6a:73:a7:12:cb:8f:b2:d5:98:f1:ef:
a6:58:37:bd:c2:40:d7:76:06:0b:22:3b:3c:85:39:01:3f:b8:
a8:be:67:00:cb:fb:f8:d7:87:42:53:89:b0:2d:1c:2f:8c:60:
b8:58:ea:78:49:f7:c1:7b:a8:03:42:26:74:79:51:29:eb:38:
09:d1:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:26 2025 by rpki-client