Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json)
Hash identifier: M9+fr4osG+8XIJOFlE5VYTscQL31rt7QZ//kV3ub12A=
Subject key identifier: B6:64:7E:FE:93:EE:14:44:E8:C3:55:9D:08:47:65:8A:52:C8:FD:26
Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A
Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A
Certificate serial: 407FC479A02146CACCBF7632920583E6E2AAF800
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
Manifest number: E8
Signing time: Fri 28 Mar 2025 19:31:17 +0000
Manifest this update: Fri 28 Mar 2025 19:26:17 +0000
Manifest next update: Tue 01 Apr 2025 01:52:17 +0000
Files and hashes: 1: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: Q8ltLopR6HuZsRyteGlHRf+xPCw0c3X83BTJlQv9Ynw=)
2: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8=)
3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: g4rcVf7ze2gY12Fw+h+9x7JFApYwzpJ9iR8UsvjWBL0=)
4: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: I90vNVHR98Ns9EbFWsBOyXpypkK4ezCBsQ4Nw555WdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7f:c4:79:a0:21:46:ca:cc:bf:76:32:92:05:83:e6:e2:aa:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A
Validity
Not Before: Mar 28 19:26:17 2025 GMT
Not After : Apr 1 01:52:17 2025 GMT
Subject: CN=B6647EFE93EE1444E8C3559D0847658A52C8FD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:25:35:c2:17:a2:42:32:12:aa:bf:ea:f4:
82:9b:67:85:aa:86:48:cc:1c:70:5f:ea:ee:26:39:
b2:e7:f0:0e:e6:ea:79:e9:c9:49:6e:29:58:0f:08:
3f:bc:54:d0:99:51:e9:f2:fc:a4:13:99:35:47:ea:
ee:6c:5e:8e:96:09:2f:ca:1e:6b:b8:1c:6c:33:a0:
05:fd:26:7f:10:86:4a:91:f1:01:b1:8d:67:42:f8:
47:8e:3d:2e:9d:91:c0:74:72:be:71:43:84:f5:09:
51:38:5f:6d:0d:83:7e:1b:2b:41:43:5d:b3:6d:de:
6e:b5:4d:c2:07:c0:2e:55:4e:65:85:6b:a6:19:65:
33:4a:79:42:e0:47:8c:51:3f:93:5f:7a:41:d4:1b:
fd:2b:fd:6a:f4:4e:86:fc:9e:96:aa:ba:da:26:6e:
ec:c2:d2:c4:6c:bf:e2:bd:2d:dc:24:d8:67:00:58:
b5:f9:35:24:03:ac:91:90:b6:0f:40:d1:18:40:7b:
ef:12:6b:6b:c8:96:64:62:70:e8:51:1c:88:1f:20:
44:a0:b5:42:0a:02:95:d5:76:b8:95:f3:8f:91:68:
44:d4:14:51:76:c9:2d:05:74:fc:ff:50:e7:af:27:
fe:3a:ae:e7:5b:55:f2:23:d3:fc:1d:03:4a:c1:a3:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:64:7E:FE:93:EE:14:44:E8:C3:55:9D:08:47:65:8A:52:C8:FD:26
X509v3 Authority Key Identifier:
keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2f:30:72:b9:e2:da:24:13:4e:5a:67:10:c5:f6:bc:60:f9:
62:f5:82:d4:f1:88:5b:a3:27:ba:4b:51:b3:36:80:ec:5a:e2:
ae:a6:da:4c:37:4d:17:b1:8a:3e:14:21:90:42:df:0a:46:e0:
c0:52:2f:98:13:d2:12:e1:e5:94:26:4e:10:44:fd:84:cd:b8:
d6:dd:0c:2d:f6:69:be:e0:28:be:d9:82:76:2c:08:a4:d1:e2:
21:57:a7:8b:5e:98:e2:58:e6:76:6d:6e:5d:25:11:68:b2:2b:
7c:af:23:a4:1a:0b:f4:0a:23:2b:5d:c1:8e:ae:37:19:10:65:
3d:1b:01:1d:d6:2b:30:31:e7:aa:3f:64:b0:39:10:98:e6:fe:
ee:10:77:68:23:6e:7f:22:4f:96:eb:83:44:b2:56:e7:67:74:
a3:41:31:f2:db:d5:d4:e2:98:ca:9b:78:5f:4d:b2:3f:04:9c:
76:88:e0:28:f3:4a:45:01:10:9a:a1:c1:77:f0:39:bd:34:b8:
a2:45:d2:aa:a3:42:1a:d2:2d:5e:ff:93:f3:e8:c2:a8:d9:5f:
ce:ed:2a:6e:41:a1:e9:6f:f3:85:77:48:43:26:5f:73:2a:65:
35:8d:58:7e:fb:09:22:8b:be:12:85:51:5e:72:73:b3:21:df:
c7:08:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:09 2025 by rpki-client