Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json)
Hash identifier: K2y+PZBDCPe9/2nliSzg5TSR2yuyrbE8DeLklWGaja8=
Subject key identifier: 57:8F:6E:9A:7D:74:70:B4:28:54:4C:B4:9B:DE:22:28:FA:08:6F:ED
Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Certificate serial: 6DEB42715000CB03283A39582F94D67C475A9A83
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
Manifest number: 67
Signing time: Thu 27 Mar 2025 11:20:01 +0000
Manifest this update: Thu 27 Mar 2025 11:15:01 +0000
Manifest next update: Sun 30 Mar 2025 12:26:01 +0000
Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: bGyqVnrpnl1BGhMmlv27rC0gAY1jQG7vDAPKyGywlH4=)
2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: Ga+yghCCzynYQRLXxC8Ud9CUE2ETMSKZ2vuWiIruJEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:eb:42:71:50:00:cb:03:28:3a:39:58:2f:94:d6:7c:47:5a:9a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Validity
Not Before: Mar 27 11:15:01 2025 GMT
Not After : Mar 30 12:26:01 2025 GMT
Subject: CN=578F6E9A7D7470B428544CB49BDE2228FA086FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:1e:c8:a2:9b:93:9b:c9:63:42:09:0e:2d:
60:d1:c4:94:9f:2d:91:46:ba:5a:76:ee:74:66:ac:
3e:88:bd:1d:5d:aa:f7:28:a4:2d:0f:a5:ec:cb:c3:
d1:70:7b:f8:26:c4:6e:fd:ca:b1:68:d2:8b:50:13:
81:48:e3:05:41:18:4a:94:9c:c6:38:c5:20:74:01:
3f:a6:68:24:45:b0:bf:15:84:90:31:85:3c:13:a7:
78:7b:5d:9a:6d:d9:7f:5b:40:d5:b2:9c:d9:20:02:
b6:b2:27:1f:8d:5b:bc:e6:15:ca:78:e4:d3:40:fb:
a8:2c:af:9f:29:91:46:f2:cd:af:69:91:37:33:20:
f0:2d:ce:ac:a9:82:2c:0f:0b:db:4d:5a:23:cb:82:
4e:b8:ab:cb:b2:57:81:44:57:a1:c0:e0:45:1b:21:
f4:4c:de:a8:72:f4:67:a2:a0:a8:6d:8b:cb:bf:0e:
57:c6:7a:74:69:e3:96:24:6d:0b:db:8d:4d:3a:64:
d8:82:9f:3a:40:2a:b2:08:d2:f3:0d:a6:53:89:07:
14:a8:46:04:64:3d:a9:6d:6f:a8:a3:bb:c0:e1:21:
fe:dd:3c:a5:c8:ec:a0:f5:11:f2:62:87:2e:02:ee:
bd:04:96:03:99:70:9f:67:2c:6c:36:5d:69:79:88:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:6E:9A:7D:74:70:B4:28:54:4C:B4:9B:DE:22:28:FA:08:6F:ED
X509v3 Authority Key Identifier:
keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:38:75:9e:6b:be:16:29:3b:1b:bd:3b:d0:69:32:c0:61:
b7:c6:73:c8:9f:18:a0:80:45:f3:a1:6e:84:b6:02:cc:64:dd:
86:43:95:46:20:2b:df:f2:5d:e0:79:51:e1:d6:ee:51:80:bc:
bc:91:be:1d:21:0e:59:6c:bd:ca:07:21:9f:87:a6:8f:12:39:
17:24:04:97:97:7d:df:68:3b:1d:22:fb:83:e4:80:b2:4e:59:
92:80:c4:ff:93:e3:3d:63:02:37:5a:65:d7:0a:57:ba:2e:4c:
25:ec:0d:22:ca:a7:0c:b1:e1:3c:d4:be:db:b9:46:c5:35:d0:
4f:26:9f:7b:dc:04:b4:55:12:62:65:11:64:73:ea:ee:2a:d6:
a3:e8:58:29:0d:f4:bb:0c:40:87:3f:11:57:da:4d:df:4e:dc:
c2:51:c2:1e:8c:26:3c:71:b7:2b:2b:b3:c5:d7:0f:93:af:46:
7d:09:2c:3d:81:5e:55:dd:1c:cd:2f:8a:ed:0c:fe:a8:50:42:
c3:4b:a7:3b:52:8a:de:90:be:bf:9f:b6:0f:70:57:4e:1c:e4:
74:1c:73:30:03:91:1e:2a:0a:9b:a2:9b:8b:4f:8b:ff:ac:b1:
60:b7:7c:34:be:fb:b6:6a:bb:69:fb:d6:74:7f:7f:0b:8a:6b:
28:62:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:08:42 2025 by rpki-client