Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json)
Hash identifier: TfJlJiIemUZNmovO9W9Oy2wmeZ9p8eJVGMuLS7xxppY=
Subject key identifier: 1E:1C:D0:99:49:29:D2:0E:19:AA:48:3B:10:98:7C:4D:79:2B:04:45
Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB
Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB
Certificate serial: 56CD86155DC7BE661D93F801019B933B0149339F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
Manifest number: 8D
Signing time: Fri 28 Mar 2025 14:00:59 +0000
Manifest this update: Fri 28 Mar 2025 13:55:59 +0000
Manifest next update: Mon 31 Mar 2025 23:34:59 +0000
Files and hashes: 1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: ABqsMeXfL8j7jSTQPe5p6pryIp+gFqsnjqoUXOdJcq8=)
2: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: X5G5RWh6s2+ND8ZRTY8f2+81IT3dn2iGadokbuIkqTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:cd:86:15:5d:c7:be:66:1d:93:f8:01:01:9b:93:3b:01:49:33:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB
Validity
Not Before: Mar 28 13:55:59 2025 GMT
Not After : Mar 31 23:34:59 2025 GMT
Subject: CN=1E1CD0994929D20E19AA483B10987C4D792B0445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:a3:fd:7c:18:6b:d2:31:52:bf:82:cf:54:
dc:df:92:1f:a6:77:60:85:22:d4:aa:5f:1e:55:e1:
70:b8:2e:b2:0c:c9:01:98:10:f9:1c:fd:b7:55:1c:
43:e8:fe:52:86:9e:56:82:25:ad:ef:0c:a7:b1:65:
73:9e:ce:c3:e5:ab:3f:67:85:d5:73:c8:8f:98:b2:
83:59:50:bc:15:e4:4a:fd:29:fe:2b:31:e3:56:3d:
d0:bd:40:a7:e4:6f:71:13:96:92:04:ef:a0:a1:fa:
cb:d6:6f:9a:fd:da:5e:8d:54:68:90:da:ce:2d:8d:
a6:30:69:7e:10:3c:be:ce:41:80:2b:51:94:46:f2:
99:68:9f:48:7b:40:74:3a:06:3c:e8:43:2c:ea:bc:
2b:c9:41:64:4a:39:6e:9d:80:1e:3f:ab:be:3c:24:
1b:81:92:68:af:ab:ba:d6:9c:30:a1:ea:f2:ed:3d:
52:c5:d0:0d:32:13:13:51:30:eb:ea:ba:03:e6:4d:
2b:26:66:af:34:84:a2:36:b1:50:32:4d:47:d0:81:
e8:14:fd:93:b6:f1:25:8e:97:31:81:57:9d:cf:91:
3b:25:fb:f8:74:a7:ce:d4:63:1f:5a:03:c4:7d:d1:
a0:af:42:9f:85:81:62:d4:aa:51:2f:f9:f5:4d:23:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:D0:99:49:29:D2:0E:19:AA:48:3B:10:98:7C:4D:79:2B:04:45
X509v3 Authority Key Identifier:
keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f7:9e:4a:03:b0:57:14:e6:bc:60:be:ef:33:0a:ed:3b:81:
ee:20:1c:a7:61:81:d2:97:d1:84:4f:94:e6:46:e4:27:ba:69:
2d:02:2e:85:94:3d:73:fa:54:e4:92:e2:47:05:20:b1:eb:cc:
ad:fb:df:1a:6e:ab:2e:22:3c:d7:e8:7c:9e:02:0f:fb:04:33:
e2:b3:40:45:e2:dd:f6:2e:b0:a8:1f:a7:75:65:44:c8:86:d6:
9d:f6:97:34:ea:26:b7:3c:05:b0:ca:1e:ce:f5:59:35:01:d5:
47:a8:7e:f9:b1:da:7d:50:ea:7e:63:3d:da:a3:32:8d:2e:08:
9f:0c:57:75:76:84:d4:7c:9d:f5:54:dd:7b:38:f8:40:95:c7:
60:e3:92:79:d4:8a:2e:c5:d3:92:60:cc:a4:81:c0:dc:f9:6c:
11:c1:9c:ac:43:c1:30:9f:ba:8b:f3:31:9e:52:e5:fa:7e:ee:
fe:d4:72:5e:ae:26:61:ad:0f:ba:27:08:61:20:ee:62:5a:5e:
b0:02:a1:56:b2:e2:c0:fd:f2:e6:b8:bb:9f:be:53:4d:79:51:
33:89:b7:24:e5:c4:6b:b7:36:2d:2a:75:9a:0f:55:1a:29:ed:
f0:e8:0c:29:ca:c8:05:b0:a7:a2:f7:cc:f7:15:35:5c:66:f6:
b2:fb:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:41:49 2025 by rpki-client