Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json)
Hash identifier: kcjTdGSzzcs2MKasABBWp0z58fGgB5M5rCmOeEFdLRw=
Subject key identifier: 18:01:0A:8F:2A:C8:21:4F:D1:B3:87:10:6E:78:7F:2C:75:63:A0:BE
Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70
Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70
Certificate serial: 6982AC60997CB29E7F40DD0C56ACA16C41B56409
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
Manifest number: DB
Signing time: Sat 29 Mar 2025 09:22:11 +0000
Manifest this update: Sat 29 Mar 2025 09:17:11 +0000
Manifest next update: Tue 01 Apr 2025 14:54:11 +0000
Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: 1slWvENpqjmgSHTS+p1dABZDRuYcuNHs/A40JAVkEzc=)
2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=)
3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:82:ac:60:99:7c:b2:9e:7f:40:dd:0c:56:ac:a1:6c:41:b5:64:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70
Validity
Not Before: Mar 29 09:17:11 2025 GMT
Not After : Apr 1 14:54:11 2025 GMT
Subject: CN=18010A8F2AC8214FD1B387106E787F2C7563A0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:4a:53:3a:ba:3a:4b:3c:e8:c4:91:e6:88:
d3:88:33:af:5c:2b:4f:e8:5d:05:e7:88:76:eb:10:
5b:17:ee:20:39:53:c2:9a:e2:3a:64:09:c5:04:3a:
83:7b:70:7c:ba:85:e2:b3:15:c5:d4:bd:fe:26:b2:
3e:5c:d2:11:67:0b:7c:e7:c1:d0:5b:2f:44:85:9e:
0d:99:16:ce:df:8a:d7:f1:0b:02:93:19:10:0e:b0:
6c:41:a8:97:12:6b:3b:7c:0c:72:b7:89:83:a0:f9:
c9:e8:01:43:19:cc:72:0e:f9:0a:cb:04:b9:27:04:
16:d2:7f:66:fe:15:e3:74:7f:80:6c:e3:f9:d1:67:
39:72:13:b8:92:ea:8a:c5:fb:7c:15:d3:d6:ec:48:
e4:70:2c:46:05:04:18:09:5e:19:81:38:a0:30:19:
32:46:e5:1b:f9:45:4e:72:18:34:ca:9d:fa:c9:5f:
bc:1b:2d:39:01:6c:89:dc:ce:a5:35:f5:a8:bf:79:
bd:9c:ef:d9:3b:90:c1:52:43:98:47:47:3b:a8:94:
24:e5:27:55:d5:99:40:57:28:b5:16:d6:c0:dd:1b:
6f:73:b2:f8:d8:9e:a2:05:a7:98:78:f6:a9:9a:eb:
2a:ad:24:ad:25:9e:9e:85:ea:ef:4e:c9:d9:cb:5a:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:01:0A:8F:2A:C8:21:4F:D1:B3:87:10:6E:78:7F:2C:75:63:A0:BE
X509v3 Authority Key Identifier:
keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:02:cd:4e:59:86:fa:9d:6a:46:7e:cc:09:41:f8:25:15:62:
4e:fa:03:14:0f:b1:e0:76:34:ec:50:41:89:6e:9e:88:bb:10:
c1:88:75:c9:db:63:7d:f6:35:fc:77:e3:78:c7:4a:9b:6f:bb:
e9:9f:a9:c8:77:ca:ba:59:86:7a:3d:16:2b:e3:c0:27:5a:0e:
bc:34:95:d4:24:48:05:e2:3b:52:55:fa:5b:53:ed:2a:ce:c5:
a6:34:52:d9:bb:5d:d0:67:4d:ec:93:e3:fa:5d:73:97:e0:15:
32:a3:f5:40:0d:7b:a1:84:12:9e:fe:6c:bf:61:ba:33:7b:d5:
0c:e5:d3:59:66:a2:e3:d4:7d:c2:f9:3a:0e:b9:65:0e:40:40:
0a:cb:78:f0:d1:66:42:76:8b:bb:85:70:2c:7a:f0:10:f6:27:
4e:5a:8a:7d:59:8e:4b:50:88:99:2d:4a:8b:f4:91:d9:58:5e:
00:e6:c9:ac:cd:0c:98:17:b6:16:03:ac:b7:3c:87:de:a0:20:
09:45:a3:c5:a4:d8:98:a6:9c:49:d6:03:86:65:26:ed:97:ee:
35:0a:22:4d:8b:bd:21:7d:0a:ed:05:8a:67:b1:ca:e8:c4:ff:
31:b2:51:68:f0:6a:a0:a5:0e:b0:8a:ec:51:65:5c:6e:b8:3b:
91:e5:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:07 2025 by rpki-client