Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json)
Hash identifier: 4aXVtofTyHx2Pn9R++qy1vUOAZj/avLRT9LPvR9CTL4=
Subject key identifier: 09:54:47:36:66:FA:9A:50:3D:63:E7:D5:95:71:E2:65:BF:C7:40:BE
Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD
Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
Certificate serial: 5F7220CF6AEB6318138A1FF29C799EFBCFF7B41B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
Manifest number: CA
Signing time: Sat 29 Mar 2025 02:40:00 +0000
Manifest this update: Sat 29 Mar 2025 02:35:00 +0000
Manifest next update: Tue 01 Apr 2025 06:53:00 +0000
Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: LJqj41DPIYT1XUxln+g9aR89Yjdsp3hvnQJB8ehV2Z0=)
2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 8HeVkgm+CVYOJ+iLevkSP38oQ5T0Ub4BqXq+xOD70Ck=)
3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: FeggXCLXcgHSF8N14AAD1IKcFyaO/k5xFgL/JhRM1c4=)
4: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: dXYK07JOQ+KBlU4T9hDZRBbbBHReWrXvBSzyWGEmO1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:72:20:cf:6a:eb:63:18:13:8a:1f:f2:9c:79:9e:fb:cf:f7:b4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
Validity
Not Before: Mar 29 02:35:00 2025 GMT
Not After : Apr 1 06:53:00 2025 GMT
Subject: CN=0954473666FA9A503D63E7D59571E265BFC740BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:06:27:b8:c6:5c:1b:53:3e:6f:ac:12:24:
82:3a:0d:db:55:53:d4:aa:ee:77:32:c3:3a:c7:d4:
45:c6:32:a9:5b:f9:ef:80:90:5e:a0:38:e9:a6:04:
08:d8:55:22:50:13:60:46:33:54:b1:c2:31:e8:1a:
20:bf:cb:e3:5b:c3:8e:a7:e8:24:ce:9f:22:8d:c0:
01:4a:d4:15:9f:b9:aa:66:c0:f1:86:31:6d:83:98:
6b:84:9a:d6:33:02:60:da:77:06:9b:d9:9e:ea:9d:
6f:2e:87:38:07:f1:55:69:5c:67:5c:ef:ad:22:92:
37:fd:c2:ca:c4:20:d4:da:53:ba:5f:26:0c:42:29:
81:33:25:02:50:d1:c3:ca:a1:7c:8a:fa:4b:7f:20:
4a:53:24:94:82:d7:ba:f5:51:96:ee:1c:e4:19:84:
cd:7a:d2:f3:59:06:11:d4:12:42:69:81:82:e1:59:
b8:aa:bb:a8:58:03:50:40:ff:91:2a:c6:49:2a:77:
51:ba:d1:ca:d4:bb:ab:8f:c2:92:5b:02:46:8e:a4:
9e:e8:36:47:7a:4b:c4:ac:a0:24:4a:de:2c:49:30:
1b:c9:8b:f1:99:d1:ad:61:b7:7a:fe:fc:81:b5:51:
fb:ec:ef:ab:35:8d:b0:6e:b5:43:2a:22:7e:d2:c8:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:47:36:66:FA:9A:50:3D:63:E7:D5:95:71:E2:65:BF:C7:40:BE
X509v3 Authority Key Identifier:
keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:32:45:af:b2:d7:fe:65:e4:e9:6c:4a:3c:9e:44:f7:8d:80:
84:b6:1d:00:33:ba:56:24:e5:83:b3:74:de:52:ed:08:e4:f7:
99:b5:e5:08:f5:0d:ad:d2:52:e6:df:3d:32:39:f8:0f:8c:8f:
5d:5a:fd:15:7b:b0:d7:a9:cf:c0:dc:35:47:e1:f0:bd:a2:16:
d0:9a:df:16:8d:40:34:d1:64:e6:54:ae:30:6a:1a:30:8f:bb:
92:32:d2:eb:b1:9f:6a:67:33:c0:60:a3:fb:35:83:fb:38:bb:
3a:61:db:de:82:ef:d9:8e:c5:31:9b:ce:3a:c0:62:cd:4e:11:
43:c5:3e:8e:da:ed:82:1e:48:a5:9d:1c:1e:e8:f1:62:02:16:
f7:cb:8f:20:a6:0e:96:13:c2:b5:62:4d:84:9e:52:6c:a5:ce:
83:a5:d5:71:8a:2a:44:29:7f:25:cd:bc:8c:72:20:5d:73:7a:
71:f1:fc:ea:bd:87:ac:09:f7:84:44:da:c9:c8:18:cf:48:1d:
a3:f3:30:e5:c5:f4:d5:98:80:ef:b5:bc:e6:6b:ee:53:d0:98:
a5:f7:db:6c:b2:41:76:c7:49:ac:58:4a:12:dc:75:1e:69:a4:
07:34:db:e1:b4:8b:27:23:a7:01:02:d7:87:8f:f3:97:c9:dd:
42:e5:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:02:49 2025 by rpki-client