
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft
File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft (raw, json)
Hash identifier: KIzJIqEBWzBpjZS8oTTSO3MPSrd3+phu5mSmIfZfC6k=
Subject key identifier: 4A:7C:FB:98:7F:E6:1A:CB:6D:83:25:E2:95:E2:AF:2B:6B:C9:13:23
Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69
Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069
Certificate serial: 378E5287EA2C65AA56C8B582EDACDCC4F4BE1587
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft
Manifest number: 56
Signing time: Thu 30 Jan 2025 07:01:41 +0000
Manifest this update: Thu 30 Jan 2025 06:56:41 +0000
Manifest next update: Sun 02 Feb 2025 12:35:41 +0000
Files and hashes: 1: 3136302e32322e31322e302f32342d3234203d3e20313532373935.roa (hash: c7u9a3tNo+sinKbXEOZIkxb5lpQ3V3xHWxLJ0wK62sQ=)
2: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl (hash: CgRjftW+ZIuoHDDT4mZ5IPwie7Sos0YNNTLdVlItNDM=)
3: 3136302e32322e31332e302f32342d3234203d3e20313532373935.roa (hash: 4zrjWTGjIfmRVD7KoG+5XB5sYDfQiVJOsTHraO00txU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8e:52:87:ea:2c:65:aa:56:c8:b5:82:ed:ac:dc:c4:f4:be:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069
Validity
Not Before: Jan 30 06:56:41 2025 GMT
Not After : Feb 2 12:35:41 2025 GMT
Subject: CN=4A7CFB987FE61ACB6D8325E295E2AF2B6BC91323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:c0:0e:63:40:c9:71:5d:75:51:8d:f9:15:
a9:f6:4f:a8:2a:a9:ab:92:a5:34:f8:37:7a:18:6f:
ef:43:f3:8e:90:c1:7d:50:0b:7a:a5:99:70:5f:0d:
d9:93:5b:5d:15:8b:71:66:e7:d5:e2:b3:de:2f:c8:
19:68:52:82:71:ec:75:53:01:d5:af:87:93:0b:5d:
73:6b:3a:cc:f5:23:30:60:9d:1a:06:ba:fb:64:77:
db:13:e5:ed:68:6a:cf:d3:b9:ac:3b:30:46:bb:58:
08:ee:80:69:d0:23:63:e8:3f:a7:27:cd:41:62:81:
d1:5d:db:09:79:e7:b4:62:c3:c5:04:f7:52:6f:8c:
02:0a:f1:c9:f1:58:ba:e1:43:3f:d1:86:f3:a1:a4:
78:94:19:11:8d:d4:c6:ba:41:90:ac:88:8e:d5:93:
e4:a3:49:52:86:36:07:4c:f5:c0:c3:06:d6:59:00:
6b:ae:0e:7d:8b:c3:5d:e2:59:e3:bc:3b:48:cd:6c:
bf:64:bb:0f:48:c4:09:94:21:f3:69:f2:5b:f5:3a:
a6:7e:7c:e2:c4:14:e6:f5:48:39:a4:6d:d9:90:03:
be:2b:dd:1c:d8:0b:c9:a5:63:3e:d8:75:0f:87:4b:
00:c8:b1:83:2c:93:9e:9c:92:31:d0:7e:79:3c:6b:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:FB:98:7F:E6:1A:CB:6D:83:25:E2:95:E2:AF:2B:6B:C9:13:23
X509v3 Authority Key Identifier:
keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:51:8d:2e:bc:75:ec:fc:80:59:53:95:68:0f:08:22:7a:
65:d5:73:a4:67:e2:ba:02:ec:32:01:0c:7f:61:49:53:9e:58:
d1:40:42:7e:e5:4c:b9:be:30:0a:2c:aa:05:64:b1:d3:56:29:
c1:84:33:25:d8:62:06:a6:a5:bd:f4:7c:73:a7:43:ae:52:48:
b7:cf:d1:a6:65:75:4d:15:44:a4:47:e4:1c:1d:ee:de:96:f0:
60:e4:3b:b0:74:5b:46:f7:62:18:05:cf:24:6e:fd:d0:b7:81:
d5:6e:0c:9e:8b:67:50:a4:0c:85:86:9f:c1:3c:41:72:7b:f6:
68:75:19:b7:5a:d2:59:66:ba:a6:a3:b1:75:80:30:bd:9f:c3:
ed:4d:9e:7d:13:7a:da:ed:89:37:4a:fb:7f:59:e6:e7:44:c2:
6c:43:b4:9d:c3:48:7b:bc:ce:6a:69:f7:25:e1:bd:52:fb:77:
fe:e3:2f:8f:2e:ee:87:8c:fb:a9:06:89:4f:4c:ed:b2:7c:1b:
e2:27:21:04:9e:4d:72:2e:08:d4:db:36:92:92:5d:3f:a8:12:
0d:6e:8b:b4:18:14:ca:35:3e:22:83:4e:c5:98:01:3d:0b:ac:
93:d1:3e:e3:c4:1a:f9:e4:10:bd:c2:9d:dc:58:3f:65:41:f4:
a8:e9:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:52 2025 by rpki-client