Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft
File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json)
Hash identifier: +t5r3P2PMoFSVkIUbn6i1rapC9U0e79HO/XWFABNDKI=
Subject key identifier: 01:33:08:5D:9E:F7:05:2C:84:39:D7:82:B6:3F:27:2B:59:80:35:36
Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA
Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA
Certificate serial: 6DBA1D0D081E3E503AE22E484F86E3BACB7C8B9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft
Manifest number: 9F
Signing time: Fri 28 Mar 2025 10:40:36 +0000
Manifest this update: Fri 28 Mar 2025 10:35:36 +0000
Manifest next update: Mon 31 Mar 2025 19:12:36 +0000
Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: 4tsEPwSQ6xljr+1MIJC49XfPA1B++N1snpTnRhMhu68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ba:1d:0d:08:1e:3e:50:3a:e2:2e:48:4f:86:e3:ba:cb:7c:8b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA
Validity
Not Before: Mar 28 10:35:36 2025 GMT
Not After : Mar 31 19:12:36 2025 GMT
Subject: CN=0133085D9EF7052C8439D782B63F272B59803536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:8b:57:61:20:1b:33:eb:d2:2c:26:fa:9b:
d0:52:cb:e9:98:82:b2:91:4e:00:88:a8:18:20:c0:
59:7d:b9:8f:97:5c:98:1b:66:eb:56:8e:a1:e9:07:
2e:7d:68:6c:6e:4c:b9:5d:ce:f4:2d:2f:d6:b0:bf:
68:24:d8:ee:0d:60:12:33:c5:95:83:5f:52:36:dc:
6a:a2:49:92:3a:eb:8a:8c:01:55:a1:27:81:c9:4b:
eb:66:c4:90:4a:f1:1a:56:03:71:b9:ed:d1:37:b6:
bc:92:68:9d:7b:22:ea:54:08:3a:8b:07:37:90:47:
41:4b:dc:38:14:80:47:79:9c:08:27:f4:07:b0:73:
f7:01:8f:4f:8a:9c:e7:32:fe:30:84:f2:86:e8:79:
d0:68:2b:2b:1f:76:39:47:23:98:ff:f9:04:a5:cf:
07:19:78:80:98:4b:4c:2d:53:0b:9b:ae:d0:7e:20:
46:29:6c:21:9b:4a:a5:5a:8e:cd:17:96:aa:b9:b9:
f5:0c:e5:09:cf:ff:7f:cf:98:9a:18:e4:5c:79:83:
c2:ad:e0:3d:e2:a8:a7:83:6c:fa:38:46:56:37:37:
da:43:84:65:95:5b:84:a6:31:69:f6:13:7f:0d:95:
5d:06:15:92:79:57:10:7a:53:a4:55:a0:25:c3:e3:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:33:08:5D:9E:F7:05:2C:84:39:D7:82:B6:3F:27:2B:59:80:35:36
X509v3 Authority Key Identifier:
keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:91:34:90:e3:ac:61:f9:67:21:92:e6:35:07:e1:e5:d5:1f:
3c:d6:8a:6c:05:e3:35:bc:e6:0f:7c:21:1c:33:9e:4e:42:88:
0d:51:39:5f:d8:cb:a0:b2:d9:2f:da:7f:7e:30:06:c3:23:0e:
60:c3:9a:01:51:89:55:f7:df:d6:f6:4a:c9:ae:8b:a0:fe:5b:
9f:50:2b:a4:39:e9:b5:b1:10:6b:16:03:45:8b:66:8b:da:9e:
7e:c8:c2:15:7a:4d:5b:ee:c4:3f:4b:ad:b0:bc:3b:ce:01:d8:
02:dd:dc:c5:e9:2b:cb:0e:ad:2d:af:97:a8:be:49:57:fa:7b:
ff:5a:f9:c4:18:6e:6f:a3:70:79:0c:9c:99:1e:87:d9:b6:11:
c7:4b:7b:32:d9:83:69:e3:9a:7d:4f:93:60:25:e1:79:8f:4d:
f8:09:39:36:7d:27:0c:a0:8f:1e:c4:d2:76:da:ed:e7:1e:25:
b0:d8:cb:ff:b5:5f:5f:af:f2:4f:58:8e:57:86:cb:02:a4:18:
28:fa:53:6c:6b:0f:b5:9e:c6:2e:0a:12:1e:1c:59:e2:51:49:
b6:fd:67:b8:dc:d4:a5:9a:fc:31:3c:c6:fb:fb:22:49:cd:1b:
ba:87:2e:86:3c:0d:58:11:4b:70:33:b5:3c:c0:d9:82:e8:5b:
89:8f:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:48:19 2025 by rpki-client