Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json)
Hash identifier: GH9Nk+oCBJbqZTcv2AF4/mJALmvbQr567ktHus2jo8U=
Subject key identifier: 1F:CF:C3:6D:04:A0:5D:C4:3F:40:8E:54:54:06:B2:58:9C:39:D1:B2
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial: 234F7528D71ECDAA32AD53085A09215044AF3F67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
Manifest number: 01CE
Signing time: Sat 29 Mar 2025 04:02:07 +0000
Manifest this update: Sat 29 Mar 2025 03:57:07 +0000
Manifest next update: Tue 01 Apr 2025 06:56:07 +0000
Files and hashes: 1: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=)
2: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=)
3: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=)
4: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: 3Fbz4Wy4yIXHiG6cFoiHAvwg+S9pJfyP1yqJZUq+FXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4f:75:28:d7:1e:cd:aa:32:ad:53:08:5a:09:21:50:44:af:3f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Validity
Not Before: Mar 29 03:57:07 2025 GMT
Not After : Apr 1 06:56:07 2025 GMT
Subject: CN=1FCFC36D04A05DC43F408E545406B2589C39D1B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:ce:1a:98:86:04:5e:b0:49:c7:6d:28:63:
c0:ef:3a:17:48:56:10:c9:ad:45:ee:f6:1a:30:9b:
4c:70:1d:5e:5b:fd:4b:0c:ed:71:93:53:90:b2:4c:
6b:27:b8:c1:b6:82:5a:4b:f8:07:2e:fd:df:96:5d:
d8:0e:60:09:5d:2a:b5:2f:cc:0e:fb:3d:93:ea:bd:
5d:0b:ae:e1:54:5a:86:07:ad:33:5c:dd:81:6b:b2:
d8:5d:59:cc:50:ea:11:6c:3e:f3:a6:71:88:51:9d:
79:90:ac:6a:e8:46:51:56:c7:0d:2b:13:0c:f3:24:
ff:d1:34:cd:f3:19:4a:5f:c6:43:7a:53:49:81:42:
ae:d1:42:60:e0:6d:66:bc:a6:59:aa:a6:30:d1:3a:
d8:a7:3c:38:c1:e7:53:11:aa:1e:eb:dd:50:43:21:
f8:cd:77:97:bd:6f:a3:1b:88:b3:46:15:ef:24:71:
53:85:ee:9d:ff:dd:f6:d2:a3:bb:ff:30:ff:18:20:
4b:f7:3e:46:66:58:cc:1b:6c:3e:cf:8f:36:30:0c:
99:2d:d4:25:99:37:19:cb:c1:81:ac:d8:2c:cb:5f:
98:f9:80:01:c9:7b:81:39:c1:7e:d7:47:ae:27:7e:
87:34:91:fd:e0:41:36:73:50:7d:7f:27:d9:4f:5a:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CF:C3:6D:04:A0:5D:C4:3F:40:8E:54:54:06:B2:58:9C:39:D1:B2
X509v3 Authority Key Identifier:
keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:da:9a:08:0d:14:01:3d:8e:9d:e2:25:42:be:ca:d1:20:9b:
52:4a:93:fe:e7:88:46:d3:73:34:fa:55:aa:a3:dc:d3:4b:19:
ba:f5:6b:a6:46:14:21:dd:52:7b:dd:92:bb:b1:51:67:3d:75:
ee:ef:74:f7:d0:d4:1d:96:b4:4e:dd:cc:8b:1f:55:0c:73:23:
3f:86:f3:a1:44:00:db:ea:54:23:b9:38:16:0a:a0:9b:03:f5:
8e:9f:5b:02:1f:49:0f:99:f2:78:a4:7c:91:2a:df:7a:fc:86:
6b:ae:a1:b6:82:85:bc:04:a8:5b:e3:a5:03:09:90:6e:92:20:
54:58:cb:12:f6:04:80:9e:b2:81:aa:6c:3a:2b:ce:37:6f:34:
f8:26:6f:56:98:57:39:3e:8f:47:8c:97:0f:c9:07:cf:74:13:
71:27:46:60:91:92:9a:29:94:15:ea:e3:a7:b9:82:8b:6c:09:
91:f7:b2:c6:bf:2d:2a:a6:93:3e:e3:a9:e1:6e:01:98:96:5a:
8e:50:ac:87:52:61:71:39:93:a1:1d:33:cb:ec:7b:9e:d3:0e:
f0:69:bc:3a:50:3d:1c:8a:7c:0f:03:bb:da:6a:f9:e4:e8:f8:
01:83:6a:66:a8:35:05:47:e3:0e:5c:ce:7a:e5:61:1b:4e:ef:
b0:20:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:59 2025 by rpki-client