Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json)
Hash identifier: l37zTA7tLUyFAjqy3Se3XyJYGLSzsJLsJRBfUOEaO9Y=
Subject key identifier: B3:31:62:F1:44:62:12:8D:43:37:57:B2:E8:05:E7:ED:46:27:A8:69
Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4
Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4
Certificate serial: 33B88CC9DFC49808F2C612903957871E539F49C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
Manifest number: 01E3
Signing time: Sat 29 Mar 2025 06:40:44 +0000
Manifest this update: Sat 29 Mar 2025 06:35:44 +0000
Manifest next update: Tue 01 Apr 2025 13:16:44 +0000
Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: 0fU+cgX2w2Seah8SyqIL5rp6DTz7LSKW3s4WYXiC+fA=)
2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: QA5WUMXRl+eeLx6VgnnXFynUs31eiM/VO2ZioMxRA5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b8:8c:c9:df:c4:98:08:f2:c6:12:90:39:57:87:1e:53:9f:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4
Validity
Not Before: Mar 29 06:35:44 2025 GMT
Not After : Apr 1 13:16:44 2025 GMT
Subject: CN=B33162F14462128D433757B2E805E7ED4627A869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:3a:eb:62:8e:ae:9a:23:24:cd:ed:9b:49:
60:23:82:36:d8:2c:c6:5a:01:17:75:cd:be:06:09:
47:7f:c3:e2:50:36:5a:2e:c3:4e:a5:3e:db:a3:ac:
a8:5c:2c:3d:74:37:1f:2f:12:53:70:16:8c:97:87:
03:5e:72:1e:22:3d:da:87:57:15:d9:12:50:80:a2:
e9:3f:d2:1d:95:9d:bb:a3:76:1f:7d:41:98:8a:3f:
e7:d0:7b:68:de:d8:0d:bc:dd:35:de:55:22:c5:8b:
a2:cb:3e:52:db:99:26:87:d6:7c:c0:08:cc:be:85:
53:68:8c:68:5c:a1:f5:8e:90:32:ea:65:c6:5a:55:
5d:4e:41:04:12:8e:c9:70:a2:ec:25:1b:12:d5:e3:
44:3c:04:7b:c1:b6:10:90:84:11:37:eb:4c:58:1f:
55:0a:7b:4c:b4:f3:1c:61:5e:c9:24:e3:54:30:4b:
db:4c:c9:0c:64:b6:f6:57:5e:5a:ed:ed:73:68:9b:
71:24:69:ff:5b:bb:5c:d6:f1:ff:b9:66:df:50:0f:
92:82:e3:5d:99:32:ab:48:dc:52:98:af:76:05:f0:
c7:c4:2e:9b:ca:2d:0a:de:f3:aa:0e:69:71:13:d3:
f5:ad:29:c3:15:6a:39:7b:08:ad:44:fb:b3:3e:9b:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:62:F1:44:62:12:8D:43:37:57:B2:E8:05:E7:ED:46:27:A8:69
X509v3 Authority Key Identifier:
keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ac:7a:10:dd:53:a1:ed:ad:59:1b:53:c1:9f:52:4a:ab:98:
a7:95:86:96:d2:47:05:18:cb:8d:0a:6e:f9:26:8c:67:64:9a:
b7:6a:dc:aa:c1:0a:bc:e8:c8:d9:70:3a:e3:55:ec:8f:cf:ba:
54:32:0a:a2:97:1a:f3:b2:f7:f4:16:f8:83:7b:dc:7d:14:47:
99:09:3c:c8:27:80:6d:73:fc:81:9a:e5:3c:02:4c:40:fa:60:
15:7a:6e:24:06:b2:24:fd:5b:3a:64:98:d6:6c:35:7d:ef:8b:
4d:a3:a2:35:39:7b:17:92:7d:d7:06:d4:fd:6c:72:4d:fe:38:
1d:b2:ef:f7:da:87:67:f8:50:49:87:27:a5:eb:e0:88:5e:29:
ee:1a:44:d8:14:c7:f7:72:fc:2e:70:72:65:a4:22:ac:a5:cd:
f6:03:d9:7b:d4:cc:e3:1a:48:7b:8b:53:8d:d3:46:1d:92:5a:
7c:3f:d2:d4:28:a4:b9:83:5d:d3:5e:29:d0:02:34:26:7b:37:
21:5c:8c:d1:e9:39:a4:dc:77:53:41:54:f3:81:6b:1d:de:14:
4c:aa:3a:03:40:7d:0f:1a:93:cc:22:55:ea:72:bb:51:fa:e3:
a8:c0:99:62:27:a9:13:ce:d5:f2:2f:e9:ab:e2:8a:66:b0:bb:
b8:5a:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:51:21 2025 by rpki-client