Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json)
Hash identifier: 5YAQiPKDYRopswTmCBTABh73YUwm3axAAitd4euLd60=
Subject key identifier: DA:11:34:59:ED:9E:28:43:DF:02:E6:B3:3E:FE:A2:19:9A:CE:20:99
Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Certificate serial: 34DC778ED72447E5EF62F0FEB686977CE8DE46FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
Manifest number: 0195
Signing time: Sat 29 Mar 2025 02:31:49 +0000
Manifest this update: Sat 29 Mar 2025 02:26:49 +0000
Manifest next update: Tue 01 Apr 2025 04:22:49 +0000
Files and hashes: 1: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: dLwOMSUA63p+6j4h97z1inkkgekl9JAqcjoIPUwxxSU=)
2: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: zlcqvXi587wSr/o8I+yN+EXScv0fIyPxOx7WTfCRPMY=)
3: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: NBBnufRmfAThhqRXGPzYNoxmY2YbRxjo1w9qKSYkkeE=)
4: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: BVmIMDJVUtj9I7W/AuR4BzIyxzfVxkHrxZNfZSGN+Zs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:dc:77:8e:d7:24:47:e5:ef:62:f0:fe:b6:86:97:7c:e8:de:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Validity
Not Before: Mar 29 02:26:49 2025 GMT
Not After : Apr 1 04:22:49 2025 GMT
Subject: CN=DA113459ED9E2843DF02E6B33EFEA2199ACE2099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:3a:d8:0b:c2:2a:31:8d:d7:fd:84:ee:b4:
78:96:e3:97:d8:8f:fa:b6:08:b4:b9:d4:29:e0:28:
00:f4:cd:3f:63:4a:d1:55:6f:16:0d:42:f7:58:bc:
27:8c:6f:4d:02:af:b6:71:bc:c7:2c:dc:c3:0f:d0:
9c:45:08:cc:6a:fc:bc:d6:ad:c1:ef:38:ff:d2:51:
8e:0f:1d:52:2f:8f:da:9b:01:6f:6b:9e:15:5d:03:
88:77:9f:74:55:91:a9:3b:59:de:1d:2f:83:29:91:
57:93:2f:52:2c:2e:04:fe:42:e3:f8:7c:d1:41:09:
5e:a8:86:43:20:86:8f:48:fe:7e:e2:ea:74:ef:d3:
70:b7:7b:e5:2c:4b:b7:24:e7:d8:82:47:1e:ea:f9:
00:1d:c6:93:e3:cd:3b:0d:f5:da:d6:64:1b:ad:64:
89:8c:3e:c3:f9:15:bf:df:f0:b5:76:41:8a:bc:fb:
71:bb:1b:61:4f:41:cc:48:de:07:6c:35:60:cf:f5:
da:9e:23:07:83:9e:03:cf:92:c2:ef:c5:28:ce:30:
d9:7b:03:c5:ff:0f:76:5d:64:11:a6:ed:6a:54:72:
12:51:db:29:7c:3a:5e:4b:49:cf:87:3c:e8:49:ec:
98:57:46:d0:dd:99:6b:cf:69:d1:63:bc:d1:c0:fa:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:11:34:59:ED:9E:28:43:DF:02:E6:B3:3E:FE:A2:19:9A:CE:20:99
X509v3 Authority Key Identifier:
keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c8:b5:f7:79:16:1f:31:23:16:3b:90:10:d9:77:74:77:e7:
58:63:21:43:d9:5e:0c:61:d1:97:2b:8b:e9:ed:f8:82:ae:22:
d4:cf:9e:b3:a2:a6:f6:c8:bd:27:aa:e0:63:f8:9a:15:93:2f:
a3:e3:bd:4a:c7:89:7d:cd:7a:7e:0f:fb:e5:79:7f:68:07:78:
f4:43:f7:f1:10:da:6e:bc:72:98:a6:ea:42:f6:dc:6b:64:cd:
8e:dc:5a:61:d1:8d:0f:0d:27:b0:25:d2:c6:e0:22:84:b0:bd:
99:00:79:15:eb:27:d4:bc:f2:fc:fc:70:74:89:50:04:43:35:
04:2d:5a:53:64:b3:39:2c:bc:8b:be:8c:47:8b:02:2b:ae:ee:
a3:10:88:88:76:61:f2:75:b6:6a:07:44:4f:f6:30:cc:80:40:
dc:9b:ea:88:d8:a6:d4:7f:da:6d:00:a5:95:0c:45:0b:c5:d5:
fc:b6:bd:f4:03:00:97:f2:e0:01:b2:69:52:2e:61:48:16:1e:
30:cd:73:9b:fe:de:c4:8a:ad:c3:7a:77:6e:03:e5:4a:64:2b:
2a:c5:e0:cb:e4:96:8c:9b:cb:7f:7f:b4:bf:49:5c:dc:9a:b3:
02:02:80:2a:b5:12:db:d0:cf:29:10:cb:f7:05:3d:03:5b:32:
1a:e4:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:32 2025 by rpki-client