Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json)
Hash identifier: YcfEl+asILzLLtRpQgMzhH941Xr7l6sbXefgoqt0J6g=
Subject key identifier: 23:26:0F:58:3F:0B:78:BA:4F:3C:C4:0F:E4:DB:19:B3:16:24:BA:31
Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276
Certificate serial: 66BEFCC51F340B48E3C488517ACEBDF114059504
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
Manifest number: 01CE
Signing time: Thu 27 Mar 2025 11:02:01 +0000
Manifest this update: Thu 27 Mar 2025 10:57:01 +0000
Manifest next update: Sun 30 Mar 2025 19:34:01 +0000
Files and hashes: 1: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: Kg+qUGiJOCWlU9CEF9sF6UHMuGBLyiUY1zk9iK+p//c=)
2: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: hrD8YJ/Z5FOjBoOP0hlrkW2s5KOaDLRBaGtPW6F1/8c=)
3: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:be:fc:c5:1f:34:0b:48:e3:c4:88:51:7a:ce:bd:f1:14:05:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276
Validity
Not Before: Mar 27 10:57:01 2025 GMT
Not After : Mar 30 19:34:01 2025 GMT
Subject: CN=23260F583F0B78BA4F3CC40FE4DB19B31624BA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:05:5f:3d:a4:97:b2:08:94:ef:80:4e:67:
50:c8:62:32:1c:6f:e4:36:e8:c0:4e:cb:81:17:f9:
19:30:8d:96:7a:e8:d5:49:56:e1:77:08:56:42:47:
3f:56:79:84:d1:55:e5:6f:a5:f4:a8:e5:9a:f3:37:
56:2d:97:fc:b7:9d:45:17:8f:4e:d2:54:5c:c9:b3:
a6:4e:21:b9:1e:6a:5a:75:cc:31:92:d8:31:12:6f:
d6:c7:30:a3:bf:fb:84:1f:d7:47:20:63:a2:4c:60:
33:e2:ab:5e:c3:3d:78:29:36:e7:e4:4a:9b:41:06:
26:8f:ad:2b:58:f2:7c:41:43:29:b1:de:b0:e9:3b:
b8:dd:05:58:d9:fc:fc:28:72:10:74:de:a2:34:a2:
cf:dd:f3:42:3c:59:0d:c9:60:a0:b5:fd:ee:8c:85:
c4:e7:a2:0a:f2:d0:a8:44:5c:30:bb:8a:35:6a:07:
6a:a3:eb:98:34:b3:25:3b:e4:a6:41:2f:4a:70:2d:
41:73:8e:1d:8d:1e:24:64:dd:43:18:65:84:d0:d6:
49:80:bd:fd:88:69:24:3c:2b:38:6a:6a:ec:0d:e8:
47:4a:db:aa:f1:d2:bb:6c:3c:bb:8f:15:43:9c:3d:
14:81:a4:51:ef:d8:b3:3b:50:23:1e:dd:b8:7e:ee:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:0F:58:3F:0B:78:BA:4F:3C:C4:0F:E4:DB:19:B3:16:24:BA:31
X509v3 Authority Key Identifier:
keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:67:50:3c:33:bb:51:d7:d9:2d:9c:6a:b5:2a:47:19:37:b5:
25:03:c0:17:7d:88:73:d8:f1:ee:34:2c:5c:0a:0c:80:95:5a:
44:9b:de:1a:fc:24:32:5c:b6:00:12:3d:af:0f:55:56:6d:b3:
fc:f0:c4:0f:93:46:e5:22:6c:1c:80:b3:e2:2c:9c:82:d7:61:
d9:18:93:90:c4:01:e5:7e:f4:fb:af:e4:f6:b1:51:ae:fb:fc:
88:b9:f1:c0:a2:cc:d3:41:c6:03:42:fa:43:64:55:c4:fd:76:
7f:dc:a1:f0:ef:2a:4b:11:0d:ea:36:ef:bf:7a:16:35:db:9b:
70:01:5d:d8:81:a5:39:89:67:8a:96:9d:34:aa:9f:3f:bf:11:
6c:98:50:ac:ad:0f:89:61:43:bd:ce:29:cd:f2:8f:39:35:1f:
1e:39:37:0f:d5:7b:4a:df:0b:94:93:64:72:22:5e:09:bb:57:
bd:97:a7:04:9d:a3:01:91:4c:f2:8f:37:c2:b5:b9:da:77:e0:
55:f8:a0:c8:5e:8a:41:92:bb:44:e2:a7:3f:37:de:10:b3:99:
3c:3c:db:87:23:ae:91:04:e0:31:67:0b:70:4f:84:30:af:e9:
8b:4b:09:85:87:f4:0a:49:03:1d:3f:e1:9b:fa:91:e2:d1:c2:
3c:f3:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:22 2025 by rpki-client