Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json)
Hash identifier: /9Pu+3IX3tU4ifYOoaiUvbP5eIZpNtUxKfsrGR/AKTg=
Subject key identifier: EF:CB:F9:02:9E:3B:12:3A:AC:7D:9E:0E:98:59:5A:8D:10:04:39:0A
Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F
Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F
Certificate serial: 28E2E53619BF9AE85DECEFFC531623A06105F581
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
Manifest number: 0182
Signing time: Thu 27 Mar 2025 21:11:58 +0000
Manifest this update: Thu 27 Mar 2025 21:06:58 +0000
Manifest next update: Sun 30 Mar 2025 23:16:58 +0000
Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: jCIi6xnL0X9x7d8IEkHfah2DqG8/oNDacSJSk7YacN0=)
2: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: vQHXy5iRl2lmOZFZMZgSE4bQhtQQOQdoLJZ39WptCpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e2:e5:36:19:bf:9a:e8:5d:ec:ef:fc:53:16:23:a0:61:05:f5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F
Validity
Not Before: Mar 27 21:06:58 2025 GMT
Not After : Mar 30 23:16:58 2025 GMT
Subject: CN=EFCBF9029E3B123AAC7D9E0E98595A8D1004390A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:0a:af:ca:c3:7a:23:2a:d7:b9:0a:19:28:
19:89:af:fd:58:db:4f:7d:13:ef:30:40:a2:03:63:
f0:47:b1:4d:33:c2:80:6a:e7:20:28:62:70:b5:e7:
0d:da:c5:4a:e7:5c:48:6d:91:c4:13:56:65:1a:04:
b4:fc:c7:09:34:44:6c:8e:b2:a8:6a:73:a5:f6:44:
b2:f8:fd:0f:a4:a8:df:75:1f:20:91:cb:5b:5c:f5:
61:36:41:29:be:fc:79:99:9f:65:0e:55:c9:58:5d:
71:75:b4:98:cd:7e:fa:2b:b7:20:9a:17:af:74:d2:
ae:67:cd:0f:c3:94:90:23:f1:89:e5:9b:fc:49:f3:
ea:63:02:c8:82:10:1d:5c:47:c6:8f:e2:65:e7:7f:
e6:f4:55:3f:8f:6c:97:6a:80:c3:0e:f9:a8:b7:d1:
f5:01:4e:3b:a9:df:d9:22:fd:9c:f2:73:a1:8a:a2:
c7:00:5b:06:e8:21:97:2b:0e:d7:14:cd:54:4e:16:
f7:2e:e5:79:49:b2:02:10:fe:21:38:7f:f5:d4:7f:
e0:35:2c:94:9d:7b:90:99:a1:ff:97:dc:64:7f:7e:
fb:7e:04:ab:9e:86:06:a7:6f:a1:53:9b:e6:41:22:
4a:47:af:8f:44:49:db:9f:c2:31:bf:f4:f3:d4:0b:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:F9:02:9E:3B:12:3A:AC:7D:9E:0E:98:59:5A:8D:10:04:39:0A
X509v3 Authority Key Identifier:
keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8e:a7:4d:61:46:9d:da:da:22:89:87:1d:ef:5d:6f:53:ae:
10:03:97:2f:02:8d:0c:55:87:c2:fa:65:84:08:e2:e5:c8:85:
eb:b2:72:30:40:63:80:b1:90:55:75:61:94:9c:0d:68:18:79:
f1:38:8e:3a:84:a5:56:a0:9f:18:e8:95:57:07:3c:75:0e:84:
e0:3c:36:e1:d5:00:c1:7f:e4:6b:9a:ac:19:2c:a3:09:f5:71:
d1:14:a0:2c:60:cb:ab:b1:6c:92:9b:86:f0:9d:e1:8f:72:6a:
2c:90:c2:2a:52:89:cf:4c:c6:48:32:82:08:c0:b3:ff:c6:65:
df:d4:3f:9a:d5:ac:1a:d6:43:f1:83:68:f5:24:96:53:cc:bb:
09:de:a8:84:ab:b1:c6:d3:fa:c7:df:59:31:5c:f4:76:2d:13:
76:0b:09:eb:1e:b1:55:19:62:5d:bf:c8:a7:a6:76:39:e3:09:
e5:ad:58:e7:32:32:f5:20:6c:35:bf:fb:53:ae:ed:96:a5:0f:
e8:97:33:e1:43:12:c2:93:c3:06:9f:83:69:a8:46:22:65:d4:
86:82:5f:51:7e:8b:3f:86:30:4b:ec:ef:64:2a:8a:b7:2e:14:
bd:bb:f2:9f:46:32:3a:e7:f2:b3:6d:21:61:f0:b2:c0:e7:51:
c2:b4:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:39:07 2025 by rpki-client