Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft
File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json)
Hash identifier: +lbZ+Xe4dfxGARfHFbvQam+QK3TlDic4PmJ7SN+vayM=
Subject key identifier: 36:D3:54:56:AA:BC:E4:FC:DD:37:BC:F5:D6:31:80:8B:EE:F4:F6:B6
Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48
Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248
Certificate serial: 0EC1FF7FD03E2E6A8CE37540193B059C1B2AC549
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft
Manifest number: A2
Signing time: Thu 27 Mar 2025 22:02:17 +0000
Manifest this update: Thu 27 Mar 2025 21:57:17 +0000
Manifest next update: Mon 31 Mar 2025 00:51:17 +0000
Files and hashes: 1: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=)
2: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=)
3: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: 3Brtla0TjScD5Yz85kH3HFR8M58iwHAtRfOV8Tb5jJw=)
4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c1:ff:7f:d0:3e:2e:6a:8c:e3:75:40:19:3b:05:9c:1b:2a:c5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248
Validity
Not Before: Mar 27 21:57:17 2025 GMT
Not After : Mar 31 00:51:17 2025 GMT
Subject: CN=36D35456AABCE4FCDD37BCF5D631808BEEF4F6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:af:e0:29:91:df:19:a9:f0:8d:ec:18:b1:
ba:92:b8:0e:a1:62:f8:5e:73:64:44:86:ec:52:bf:
f0:ab:bc:3e:fc:b3:ba:0b:bd:57:ec:c4:41:04:c8:
71:94:92:8e:b9:31:8b:18:6e:4b:d4:bb:83:7d:58:
91:a3:5b:c8:ef:57:50:6f:d5:8b:32:fe:7c:02:74:
55:23:57:cb:cf:d5:47:87:67:8b:bb:88:2a:70:4a:
cc:8d:b6:ad:e8:fb:12:f0:da:26:90:33:be:88:20:
00:8a:36:4d:18:c1:e5:28:92:50:f2:b4:e2:5f:b2:
42:e2:a4:f0:da:95:c2:3b:61:0a:a7:09:e4:72:8f:
d0:0d:19:1e:4d:22:7e:28:aa:8c:c0:f6:08:3e:10:
e0:59:c6:b0:96:82:1f:50:2b:f3:22:00:39:56:e9:
83:73:4a:d8:aa:32:d7:2b:8e:ed:b1:11:1b:fe:d8:
51:07:df:73:cc:22:30:6f:92:70:c2:f7:f9:c4:84:
7a:31:8a:2a:fa:00:bc:ed:9a:a6:24:a5:b9:d9:77:
7f:ef:c3:9d:b3:72:2a:82:f6:c8:e5:ee:6c:6a:b0:
ee:86:e9:e5:8a:6f:7e:0b:d0:b5:6c:98:45:c7:07:
41:20:bf:a3:c6:49:5e:57:28:8e:bf:fd:78:84:62:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:54:56:AA:BC:E4:FC:DD:37:BC:F5:D6:31:80:8B:EE:F4:F6:B6
X509v3 Authority Key Identifier:
keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1a:4b:c6:c0:1b:25:6c:0f:f3:6e:e9:cf:b8:06:9a:6b:a6:
37:0d:d0:b0:a6:5b:87:0c:29:a4:1c:af:e9:62:86:88:5a:ee:
6b:88:5e:e2:5c:ac:0a:ee:d0:fa:87:db:5f:f7:ee:5e:21:bd:
da:40:89:03:2c:e9:47:a2:45:fd:1a:e3:bd:11:6b:30:a8:22:
2a:a5:7a:fb:0d:93:d6:2e:1b:e1:70:d2:85:1b:ae:ff:21:a6:
af:7e:ed:52:de:9c:8a:ef:f1:a6:d2:39:72:2c:2b:59:0e:5a:
05:8d:79:d2:46:f4:b8:b8:15:8e:65:77:fd:bd:52:34:0f:e8:
04:f5:b3:3f:11:76:92:60:ce:c3:32:79:a4:94:38:61:75:ef:
ab:a4:c9:78:38:10:b3:4f:14:38:6e:c6:23:93:24:ac:b9:23:
f3:da:3d:a6:71:dc:7d:36:da:a5:17:3b:88:3b:74:28:f6:17:
37:6a:55:6f:af:67:11:1f:0f:cc:93:8a:cb:10:23:ab:22:5a:
d7:04:19:62:f6:a1:af:7d:a3:cb:96:df:d8:6d:1e:bd:5c:1b:
b9:e6:bc:1b:39:09:66:ed:05:d1:c4:60:54:3a:01:fb:71:47:
0d:db:af:b3:d1:15:b3:e7:36:b5:17:c7:ea:ca:14:85:37:1a:
94:31:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:21:00 2025 by rpki-client