Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json)
Hash identifier: NFQCQolXnNxkfWY4cqIlrRnGvilt6HeijJ9sJrKX7Lo=
Subject key identifier: 06:34:75:B6:E6:3E:5D:49:51:A8:94:B5:C6:CF:19:7D:18:A3:82:50
Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32
Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232
Certificate serial: 3315A3081A73DFA384323A524AA2AD3755828FF1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
Manifest number: 0405
Signing time: Fri 28 Mar 2025 23:02:27 +0000
Manifest this update: Fri 28 Mar 2025 22:57:27 +0000
Manifest next update: Tue 01 Apr 2025 01:25:27 +0000
Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE=)
2: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: tGDIot5BJhpAdVZPxnIJkPBKijIG5jXNZ4Yxu949qQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:15:a3:08:1a:73:df:a3:84:32:3a:52:4a:a2:ad:37:55:82:8f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232
Validity
Not Before: Mar 28 22:57:27 2025 GMT
Not After : Apr 1 01:25:27 2025 GMT
Subject: CN=063475B6E63E5D4951A894B5C6CF197D18A38250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:27:fc:fe:1f:ea:62:41:5c:96:14:38:9b:
8f:b4:2c:09:58:9a:d3:4e:1b:aa:52:eb:a7:73:7d:
8f:69:15:f8:69:87:99:71:38:cd:2e:34:39:70:80:
a9:37:3d:c3:c0:2c:86:59:9a:42:b2:3c:65:5d:f4:
e0:a4:5f:83:0c:74:05:e0:e0:52:d2:b4:6d:7d:3e:
22:94:ab:40:29:43:7f:e3:c6:46:f1:a9:57:4a:b8:
85:68:f1:57:a7:17:ce:73:20:63:89:7f:c8:8e:54:
ab:dc:1f:b8:bd:e1:67:f1:fe:b6:c9:dc:81:58:39:
6d:29:f7:81:22:e5:d9:6d:20:2c:43:b6:5f:84:d6:
42:a9:3b:4d:6b:57:c6:d8:89:37:70:33:90:e5:0d:
ac:61:79:3c:92:65:f1:a1:d5:03:d1:90:b1:fd:b1:
a2:d6:5a:48:96:72:5c:c4:51:07:13:57:11:80:d8:
43:8d:6f:5c:a8:49:f6:1b:8c:74:90:e1:e4:d6:97:
44:20:ad:87:2b:8b:9d:32:a6:5d:0a:77:c8:a0:7e:
e1:19:41:52:6c:2e:11:36:bb:f6:f3:06:bb:43:c3:
99:c8:f0:71:2b:88:52:39:af:a6:2f:91:1d:50:11:
1d:3b:58:f5:4f:2b:a9:b6:35:f0:9b:78:e3:6c:dd:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:34:75:B6:E6:3E:5D:49:51:A8:94:B5:C6:CF:19:7D:18:A3:82:50
X509v3 Authority Key Identifier:
keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b8:7d:55:47:1f:93:f2:9d:7f:b3:60:48:f0:b5:bd:49:f5:
3a:32:0d:36:b8:d4:97:d9:6c:82:cc:40:78:30:da:f2:05:85:
ce:c3:93:8d:52:4a:75:2f:98:51:57:cd:1e:01:8e:47:2a:e8:
53:59:eb:7e:14:ec:1b:60:37:0b:57:b7:4c:40:a6:e3:4c:24:
f1:b7:cb:da:87:aa:b9:0a:d2:d5:aa:59:8f:f3:27:b1:48:ec:
da:f5:1f:a3:d0:6f:33:43:b5:5e:f6:e2:cf:13:95:5f:42:5d:
e8:80:f3:ed:aa:2c:ac:0d:4f:1b:d1:c9:60:df:37:33:a3:f6:
94:e9:c5:f3:ad:eb:62:ad:5a:05:34:41:4e:85:52:5f:a1:d4:
37:1a:95:4b:bf:da:f3:e5:1b:91:e6:f9:96:24:f7:cc:0d:ba:
57:fe:c4:f8:df:da:95:ec:2e:1f:6d:2b:95:1d:a0:42:d7:fb:
4b:31:32:95:f7:10:87:42:b7:a7:17:5c:5b:c1:a0:ca:10:60:
39:5a:72:b6:2a:0b:6f:36:fe:02:f1:f9:34:09:36:25:33:cb:
8a:86:6a:dd:ac:89:92:3c:04:3f:f0:54:ac:55:78:3a:d7:c5:
f5:7b:06:00:c6:ca:ba:b3:08:bd:df:8f:8e:ff:06:31:69:f6:
89:07:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:57 2025 by rpki-client