Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json)
Hash identifier: QydeNtFHU05vpJXoqvmI24tIrMStJg0UjpTqhItZ2LE=
Subject key identifier: 3E:1F:5B:97:05:10:52:05:26:07:68:9B:1D:9C:F7:7B:76:F8:4D:D8
Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43
Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
Certificate serial: 42977D569E5383A751C0189976883875F13B2C5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
Manifest number: 58
Signing time: Fri 28 Mar 2025 08:31:23 +0000
Manifest this update: Fri 28 Mar 2025 08:26:23 +0000
Manifest next update: Mon 31 Mar 2025 19:44:23 +0000
Files and hashes: 1: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=)
2: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=)
3: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: wkPKluPZplWYEfTjROlnGifzF5c06k9A1Vz7uUPP7eo=)
4: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=)
5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:97:7d:56:9e:53:83:a7:51:c0:18:99:76:88:38:75:f1:3b:2c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
Validity
Not Before: Mar 28 08:26:23 2025 GMT
Not After : Mar 31 19:44:23 2025 GMT
Subject: CN=3E1F5B97051052052607689B1D9CF77B76F84DD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:1e:c0:08:51:b2:15:d9:38:05:da:5c:75:
b3:53:83:2a:39:20:a7:15:c8:24:e9:d9:43:4a:7b:
36:f4:ab:19:0a:b2:4e:72:85:f9:58:0d:6f:ea:06:
19:8a:83:76:8a:3d:8b:80:3f:d3:e4:e9:05:d3:24:
6f:08:41:c7:04:29:a7:47:e9:a3:5c:7f:56:a5:c8:
21:a0:a6:9e:18:6e:4f:27:c3:c4:fd:66:9b:f4:81:
22:7e:c0:50:f4:74:fb:16:17:86:75:10:20:3f:80:
ca:d0:f1:4a:14:02:89:ab:50:3c:59:2b:ff:3f:cd:
1d:b1:d9:e6:20:c2:54:a3:a9:86:23:24:7d:fd:89:
0b:5c:ab:47:14:75:8c:c9:7c:13:2c:26:e8:44:95:
28:61:f1:1e:05:85:42:2d:b7:69:06:c0:cd:14:cb:
29:1b:0c:79:29:6d:6a:cd:22:d1:b6:d7:94:92:13:
30:88:53:91:3c:68:c5:98:c7:00:58:c2:6f:bf:83:
16:89:35:3a:5a:11:cc:3d:75:04:fb:94:65:6c:c1:
a5:40:aa:77:82:70:87:c4:fa:56:bf:b9:ca:96:23:
19:bb:3c:af:db:bf:af:e0:8d:dc:92:1b:d8:1d:9b:
c4:e8:cd:50:1b:18:eb:45:72:99:d5:0f:a2:33:6d:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:5B:97:05:10:52:05:26:07:68:9B:1D:9C:F7:7B:76:F8:4D:D8
X509v3 Authority Key Identifier:
keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:5a:2f:a8:ed:96:43:07:24:c4:0d:eb:d2:c1:79:fc:af:97:
f8:5b:70:32:cc:c2:b8:00:9b:92:99:0f:49:06:3e:bf:c0:aa:
5d:85:70:ba:2c:6c:e9:60:41:f6:a9:26:0f:e7:e7:b1:32:fc:
c5:db:a3:57:2f:76:33:4a:97:fd:15:ff:54:c9:72:bf:fc:86:
7a:80:34:b4:e9:cb:55:94:cb:68:64:14:14:8a:d8:27:86:28:
96:04:ea:b0:54:27:5f:2b:22:07:09:77:c5:fb:b2:1e:df:6d:
a5:0b:5d:ac:79:71:ad:b9:44:36:e6:1d:60:a4:6e:99:dd:89:
83:4e:81:10:25:cc:48:fb:7e:c4:74:30:39:af:a1:56:e1:39:
4a:5f:c2:e5:d7:ae:6c:0d:95:9d:36:b8:cb:09:b9:09:82:c3:
00:ae:78:e9:2b:e8:68:d3:b7:55:2d:16:2c:8e:bc:45:a8:a3:
48:37:b5:38:26:2b:cc:a1:a0:2a:b4:20:cc:fc:cb:3c:02:35:
bf:d3:a8:95:52:63:0c:fd:9c:5f:a0:67:a1:24:6e:45:fd:4e:
75:d0:15:03:b2:d0:76:2f:9d:97:65:1c:c9:21:5c:b0:a3:d3:
87:ed:44:da:bc:34:9c:be:aa:b9:05:cb:74:52:0d:f0:9a:33:
90:76:b4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:23 2025 by rpki-client