Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json)
Hash identifier: KUTySsnSYH8it9HtV5SEhb9UGXl7lfKrgBQ4yXD9g+8=
Subject key identifier: 22:2B:77:6F:08:FD:1C:75:39:E9:3E:A9:4D:62:D5:B5:06:08:D1:CF
Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77
Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
Certificate serial: 3043C1B77D803509EDC9E6CFDAED3A8A8DE49369
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
Manifest number: 0186
Signing time: Fri 28 Mar 2025 06:31:42 +0000
Manifest this update: Fri 28 Mar 2025 06:26:42 +0000
Manifest next update: Mon 31 Mar 2025 16:12:42 +0000
Files and hashes: 1: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: c6BbZqskhId1bW3l6aSuRQLjcbQNOmGBaOGbC28FTXg=)
2: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: s6BDY5Tp1l+SEkitrVyC8xZ6sSEj4LqfnvesosiQDtY=)
3: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZsYKQLKtHkVTslRdGYlW0kXwJ9gapNRm2k1uNrTnTX0=)
4: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: FkjuZkviekb7VaMyMmuCMchrVU1yZ527lgE1cprIhiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:43:c1:b7:7d:80:35:09:ed:c9:e6:cf:da:ed:3a:8a:8d:e4:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
Validity
Not Before: Mar 28 06:26:42 2025 GMT
Not After : Mar 31 16:12:42 2025 GMT
Subject: CN=222B776F08FD1C7539E93EA94D62D5B50608D1CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:06:58:16:8e:e2:16:55:2a:10:85:9b:e4:
75:06:1c:aa:39:66:60:ea:3f:07:ad:fd:73:b9:7c:
5c:f2:fd:14:4f:82:1c:5f:d2:da:1b:92:c8:b9:09:
e0:93:53:1a:45:c7:5f:f1:6e:e9:c1:8e:78:8e:b7:
ca:dc:43:bd:fe:7e:fb:11:54:98:7f:52:d4:85:ed:
ad:93:c0:15:d1:2c:9a:c1:2c:12:f4:12:2a:a6:87:
0b:eb:05:3c:00:7b:2b:72:e5:3c:63:cc:a4:cf:a3:
ac:83:79:91:86:f4:ce:d0:d1:3d:f3:b7:2f:f1:7b:
89:b0:01:50:f1:a6:f7:09:cb:b7:85:db:84:84:fe:
68:d5:63:46:ae:0c:82:87:ec:34:7b:0a:bc:74:84:
2b:ac:e4:95:99:15:f0:d9:8e:92:a6:42:87:39:54:
b8:31:04:a5:04:a4:1f:af:3f:11:b2:6f:31:79:15:
e9:fd:cf:09:1b:75:15:aa:af:c4:63:6b:09:d6:34:
46:75:69:67:d0:37:4d:33:20:b9:e2:0b:ad:30:1a:
06:8c:40:54:a7:ac:57:03:a3:4d:7b:83:3d:b4:77:
b2:07:7e:8c:2f:cb:a5:c7:3c:57:16:13:4f:2b:5b:
03:78:40:20:14:32:04:04:78:c8:6d:84:51:c2:f0:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:77:6F:08:FD:1C:75:39:E9:3E:A9:4D:62:D5:B5:06:08:D1:CF
X509v3 Authority Key Identifier:
keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:1b:0b:58:f7:7f:e4:45:1c:0c:9e:73:f7:44:75:8a:bc:
bd:7c:59:f9:fb:33:c0:6b:54:5f:12:cd:25:94:05:d6:fc:7e:
94:86:ef:75:d3:69:e5:ac:f2:3f:02:ff:35:e0:b1:3a:7a:ab:
9c:28:ef:43:9e:d3:a0:24:06:b4:ec:c0:ac:dc:86:cc:79:b6:
f5:39:61:f9:d7:9d:61:83:8b:61:91:83:fa:94:83:92:90:1f:
04:d4:62:ee:02:13:3d:06:b2:b1:15:0a:0f:d1:bf:a3:31:5b:
1e:b1:87:ef:bc:a2:9b:aa:b6:98:87:00:f3:8a:8e:2d:8f:80:
34:17:42:43:b6:cc:c7:12:02:59:f4:0b:bd:0c:89:0e:62:7a:
2d:f7:93:a8:86:53:e7:6c:b1:be:18:26:e9:c0:09:1f:07:8a:
fd:ad:9f:f9:ae:6b:34:c4:22:ea:04:2b:a5:a1:ad:1f:d1:39:
b6:c5:c6:a1:9d:48:31:82:73:b8:0c:05:a0:a1:73:da:67:16:
bd:9c:83:07:7d:24:95:3a:7d:35:f8:f0:9e:b6:64:a6:09:47:
e6:c3:ea:77:43:e4:3e:30:89:f9:ed:8c:f6:db:5d:eb:38:64:
13:89:53:b4:fe:01:9b:49:f9:0e:70:5d:28:a7:df:d7:a1:ca:
bc:82:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:13 2025 by rpki-client