Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json)
Hash identifier: qgNOSVlOCd6PuX5NgSFEjCZIu0GP7p4c//y17mYM060=
Subject key identifier: 11:90:25:2F:33:06:8B:F4:BF:EB:D4:7A:A2:10:9C:13:0F:DC:9A:21
Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2
Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
Certificate serial: 518911494BF5AB6893A67CAF23B3131F5189C454
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
Manifest number: 04BF
Signing time: Fri 28 Mar 2025 10:01:54 +0000
Manifest this update: Fri 28 Mar 2025 09:56:54 +0000
Manifest next update: Mon 31 Mar 2025 16:52:54 +0000
Files and hashes: 1: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: qkC57DuPNpJ9VWP4uRvnhV59M0Mfjwgsy0KiWhAodQI=)
2: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: diSJtF4pncDv3TYDAQkVNDujeOW0TndNL50eRWU9t2k=)
3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: neCvjYj4OGxzsARs2VAX0fQB/pQLEakmCBDGYrtFesk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:89:11:49:4b:f5:ab:68:93:a6:7c:af:23:b3:13:1f:51:89:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
Validity
Not Before: Mar 28 09:56:54 2025 GMT
Not After : Mar 31 16:52:54 2025 GMT
Subject: CN=1190252F33068BF4BFEBD47AA2109C130FDC9A21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:40:1a:9a:60:59:27:4b:e4:97:61:6f:d5:
94:4d:dd:5b:09:e9:0a:3b:af:79:e4:f0:d2:09:17:
9a:2d:f4:16:dd:c2:ee:8e:7f:22:54:8e:b6:05:c6:
ce:d4:fc:53:77:81:8e:76:d5:2c:89:c4:d9:3d:7b:
47:ba:85:ed:09:4b:b0:5f:86:8c:9d:5e:60:65:dd:
98:4e:34:24:ac:81:fd:8d:5d:7a:93:5d:29:be:dd:
c0:47:ab:60:33:af:09:43:1a:15:cf:4c:2d:bd:a2:
10:8c:04:93:40:93:f6:3b:a3:55:1c:44:a3:52:fb:
e4:aa:10:1c:c1:e2:e0:d6:c5:22:fb:4d:aa:59:a2:
41:76:81:15:16:2a:48:06:c6:7d:70:45:63:67:3a:
94:36:49:9a:25:44:75:32:76:a7:18:e6:02:6b:a9:
b7:98:0a:b7:61:bc:ef:2a:90:d9:e1:2e:c8:c1:6f:
0a:cb:18:34:da:5c:3c:ab:d5:fe:a9:bc:d0:f8:2e:
1c:08:d7:b0:99:da:07:62:85:dd:61:c1:f8:ee:bd:
57:1a:3c:74:fc:3f:42:e3:1f:3e:80:5c:97:0d:49:
2e:9c:ea:57:7e:04:17:04:0e:7b:21:65:70:d8:95:
cd:84:31:85:87:ff:88:07:2c:c7:41:6d:59:34:79:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:25:2F:33:06:8B:F4:BF:EB:D4:7A:A2:10:9C:13:0F:DC:9A:21
X509v3 Authority Key Identifier:
keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:d4:ed:f0:72:45:71:8c:66:7f:f4:e1:c5:4e:a7:98:6b:
ce:9e:8c:61:eb:8b:96:14:78:95:bf:f2:4c:82:04:7d:db:79:
03:6b:5b:b7:67:b5:45:6e:f3:0d:e6:37:03:e6:74:49:28:4b:
5a:db:7b:71:6e:69:4d:18:4f:20:84:62:b7:c8:34:bf:2e:90:
21:8e:0d:1f:c3:03:1f:e6:53:f0:f5:7e:72:65:74:48:01:b8:
e2:f3:c7:79:fd:02:ad:40:67:34:aa:63:3d:be:8f:b8:05:50:
df:6e:31:d6:46:4c:36:dd:b8:e9:70:73:68:7e:94:12:6d:cd:
43:30:f4:12:d8:df:7d:d4:fc:4e:b6:c0:1b:c2:16:77:4d:89:
ec:c8:e3:83:4b:5a:1c:48:75:a6:9e:89:a0:d8:22:3b:1a:56:
87:85:97:f5:7b:8c:45:3a:db:9e:81:7e:35:e1:7b:5b:48:cf:
ee:61:8d:fc:2c:64:2e:ab:68:32:e2:e9:d2:48:84:ff:f3:5a:
a6:41:28:db:5d:7d:c0:0d:9c:33:df:cd:10:5e:85:3e:28:7c:
ed:b4:79:de:28:09:88:c3:d2:c2:51:bb:61:1a:2b:6e:14:cf:
29:95:d9:cb:6b:f2:04:ff:d5:91:31:c5:c4:32:ae:b0:ed:56:
32:de:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:23:00 2025 by rpki-client