Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft
File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json)
Hash identifier: SV+FWHcGMAILpPOZAU8t4eJfxHAiy38mf1pT+9lIQSE=
Subject key identifier: 65:E7:DB:4D:D4:D5:3D:A1:F4:E8:6C:0C:CA:E8:73:8A:86:E0:32:03
Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Certificate serial: 385A7D2F44FAE46027B8DF69ADE31D3E97CFF965
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft
Manifest number: 01C8
Signing time: Thu 27 Mar 2025 11:31:50 +0000
Manifest this update: Thu 27 Mar 2025 11:26:50 +0000
Manifest next update: Sun 30 Mar 2025 21:49:50 +0000
Files and hashes: 1: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: y0IC1wewy1NTZC1WvVqvRnWg597FE/H/DcwR9g+OaRM=)
2: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: JXSrGK7IthRcPT43OnmnwLxt2W4XxzUSsMb9NmcqC6g=)
3: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: CYRCxIMfYw8kr5hwucdBgVETX9ccYUsB+pGv5wRWbVU=)
4: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: vH/AHPKtlG2C1g0YKzqe62eHzdCNjomBrQRdxjjmNr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:5a:7d:2f:44:fa:e4:60:27:b8:df:69:ad:e3:1d:3e:97:cf:f9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Validity
Not Before: Mar 27 11:26:50 2025 GMT
Not After : Mar 30 21:49:50 2025 GMT
Subject: CN=65E7DB4DD4D53DA1F4E86C0CCAE8738A86E03203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:9e:4d:bd:3d:2d:7f:cc:e1:56:e7:13:dc:
a7:c2:9f:ff:bc:0c:b5:6e:68:97:74:06:8b:b0:c6:
8f:3b:e5:b8:e5:ad:71:e7:12:a5:e4:d8:c1:eb:c1:
92:ea:a3:8a:e4:19:56:10:da:93:64:64:bd:a3:96:
bc:d1:03:e2:7e:18:77:13:a5:68:e2:da:f6:69:99:
15:49:b6:59:97:38:af:9b:31:98:5a:16:99:25:39:
7d:05:f9:e3:0b:5e:66:9b:6e:5e:70:46:33:92:7f:
d8:75:b9:9e:5f:c4:45:f2:35:57:ff:be:b1:21:96:
a6:fd:da:30:a5:8e:f7:2a:eb:48:d1:ef:16:c4:ab:
df:42:20:2f:f0:f8:4c:e5:da:14:e7:43:44:3a:d8:
c0:21:ab:db:73:56:37:ab:7c:b7:d0:42:d9:6c:25:
b6:87:f6:3d:97:6b:90:f2:0a:10:dd:97:d9:1d:ec:
08:bc:95:a4:59:be:20:40:05:d2:60:5d:92:29:7f:
70:ce:5e:64:a4:20:82:a8:da:dc:b6:01:0f:99:7f:
9f:e0:3e:ec:d1:42:60:ac:83:23:21:bb:5a:a4:8a:
41:b6:b7:c4:f2:d3:a7:76:02:10:5c:5c:f1:37:ef:
62:c0:55:8b:fd:4b:02:5d:1f:6a:36:8f:a7:cd:94:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:DB:4D:D4:D5:3D:A1:F4:E8:6C:0C:CA:E8:73:8A:86:E0:32:03
X509v3 Authority Key Identifier:
keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f0:70:a1:ed:4c:0d:aa:80:da:51:a5:59:47:75:50:a5:d7:
cc:31:cb:15:2f:de:e5:ec:c6:ed:75:a2:72:cb:21:a2:30:59:
2a:68:1c:d1:17:88:60:da:65:35:2b:43:13:07:89:80:35:66:
5d:06:a2:c9:e3:79:75:95:ea:85:5e:2e:51:84:9d:f1:e0:74:
f2:e8:e8:ca:fa:1b:46:04:6a:6d:2b:bc:f8:c1:23:22:b4:ac:
96:98:3d:32:86:7b:12:a1:a3:ad:0b:47:12:b9:4c:15:06:e7:
80:c1:f3:60:9f:ab:5c:fe:0e:08:9a:7f:f8:4f:8b:ef:b2:02:
60:b6:00:46:91:fc:00:06:56:0e:c2:08:a4:1d:44:dc:23:b9:
82:c0:eb:2f:5e:4a:f6:0b:f0:2b:92:4f:b7:78:e4:37:c8:47:
2a:64:67:86:78:55:4b:b7:47:d5:01:7e:21:21:7d:cc:b2:71:
99:b8:fe:ab:03:57:63:64:5b:e3:be:0e:27:b2:bb:cb:49:d8:
04:4b:29:f8:bd:37:8c:33:db:e2:18:a1:e2:b4:58:11:1a:b5:
fe:49:30:d3:a8:db:c0:1c:f3:03:9d:1a:0b:7b:9e:a7:bf:6b:
46:2f:f2:5d:1b:32:cb:4d:e9:b1:6f:41:8c:19:78:b3:c2:df:
1b:60:7e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:30 2025 by rpki-client