Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json)
Hash identifier: k3Uz8MAGkFp1h8YW/eilJg5LMt85t4pXbIR7nieUg9Y=
Subject key identifier: E9:A6:4B:67:09:CE:A5:69:89:87:E0:25:87:F9:9D:D2:08:4D:9F:45
Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29
Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929
Certificate serial: 441C55FE937442FDE6CCBDE1875752DC33B78E2A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
Manifest number: 016D
Signing time: Wed 29 Jan 2025 23:31:35 +0000
Manifest this update: Wed 29 Jan 2025 23:26:35 +0000
Manifest next update: Sun 02 Feb 2025 01:10:35 +0000
Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: Bh5UQzXOvpe19Ghzo1XcLBqmDrRw6pYlN9c8YIgpv1Y=)
2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1c:55:fe:93:74:42:fd:e6:cc:bd:e1:87:57:52:dc:33:b7:8e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929
Validity
Not Before: Jan 29 23:26:35 2025 GMT
Not After : Feb 2 01:10:35 2025 GMT
Subject: CN=E9A64B6709CEA5698987E02587F99DD2084D9F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:29:31:bc:5d:a4:6c:63:a1:d2:71:30:77:
81:42:36:e9:a6:97:8f:a5:35:24:89:f4:7b:5c:3e:
28:6a:99:f3:86:65:70:ca:e7:18:07:ee:8d:85:54:
75:59:f8:7a:e5:89:20:8f:8b:4c:4a:70:e7:da:00:
01:44:86:3d:0b:92:10:11:a2:ed:84:7c:4f:5f:b2:
29:7c:72:b0:1c:51:d7:af:91:2f:d3:51:a8:b4:f4:
b4:76:5a:f5:7b:22:1c:9f:71:ea:51:6b:df:8e:80:
e4:3f:cd:83:6b:fd:68:a9:0d:e1:a2:6e:78:5c:a2:
c6:52:e2:ab:84:17:14:f9:68:a7:c3:fd:d1:fc:a7:
4c:e7:89:fc:23:73:e7:27:ae:60:ee:0c:00:f0:80:
57:7a:40:1b:39:3e:31:1c:f5:8a:dd:65:80:ed:d1:
3c:4f:0c:03:21:db:60:e7:2e:58:02:6f:96:db:71:
3a:08:e9:bd:4c:3a:98:1f:8d:c7:61:e9:41:92:e0:
71:e6:38:eb:7e:3c:95:44:0a:89:00:0c:8f:29:d1:
ed:19:55:b2:a1:55:7b:73:10:dc:d9:00:8f:43:00:
e4:e2:0b:d6:eb:f8:66:06:12:14:c2:e7:90:a5:fc:
04:57:a2:1f:65:9a:f7:43:1b:ef:5f:6f:7a:e5:68:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:4B:67:09:CE:A5:69:89:87:E0:25:87:F9:9D:D2:08:4D:9F:45
X509v3 Authority Key Identifier:
keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:60:7a:98:be:ec:6b:27:08:99:b2:85:70:b8:39:ad:97:54:
76:b2:d3:48:18:02:79:12:e3:66:d7:d1:f4:df:55:18:65:4f:
67:f6:6d:11:d2:08:47:7f:26:8a:17:6f:11:a8:80:e5:e1:cc:
29:08:1d:74:8b:31:a1:b0:70:e7:24:a3:0d:1e:ad:17:80:43:
f1:83:32:bb:0f:0d:e3:c9:c7:4e:64:d3:d9:42:7b:a0:33:41:
fe:a5:44:47:3f:4f:e6:da:76:fb:c2:a4:c5:60:a1:1a:45:5c:
d6:11:79:43:a1:88:01:22:1b:ec:c1:4d:97:73:c5:84:4c:22:
83:8d:9c:0d:94:6e:62:24:d8:d2:9d:cb:a6:88:93:19:b6:4c:
9a:3b:dc:c8:a2:24:30:aa:5d:7d:ef:ff:fe:8a:71:0d:e4:fc:
51:1e:35:22:2a:aa:39:80:0f:1c:68:09:b9:a0:a2:42:74:84:
99:63:18:28:de:c2:12:ba:62:4a:49:20:cf:ae:45:84:1f:d4:
1c:6a:83:30:d7:1d:6c:84:76:cc:1d:39:d1:73:73:28:90:67:
6e:1e:09:d2:dc:74:64:fa:17:fb:e4:5e:c1:a6:d0:9b:d5:12:
12:4c:c7:5a:65:49:62:96:3b:02:d1:5d:4c:70:11:07:db:3c:
0b:bf:d2:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURBxV/pN0Qv3mzL3hh1dS3DO3jiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE
MEM5QzkyOTAeFw0yNTAxMjkyMzI2MzVaFw0yNTAyMDIwMTEwMzVaMDMxMTAvBgNV
BAMTKEU5QTY0QjY3MDlDRUE1Njk4OTg3RTAyNTg3Rjk5REQyMDg0RDlGNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+CkxvF2kbGOh0nEwd4FCNumm
l4+lNSSJ9HtcPihqmfOGZXDK5xgH7o2FVHVZ+HrliSCPi0xKcOfaAAFEhj0LkhAR
ou2EfE9fsil8crAcUdevkS/TUai09LR2WvV7IhyfcepRa9+OgOQ/zYNr/WipDeGi
bnhcosZS4quEFxT5aKfD/dH8p0znifwjc+cnrmDuDADwgFd6QBs5PjEc9YrdZYDt
0TxPDAMh22DnLlgCb5bbcToI6b1MOpgfjcdh6UGS4HHmOOt+PJVECokADI8p0e0Z
VbKhVXtzENzZAI9DAOTiC9br+GYGEhTC55Cl/ARXoh9lmvdDG+9fb3rlaL1RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6aZLZwnOpWmJh+Alh/md0ghNn0UwHwYDVR0j
BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx
NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5
QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1
ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD
MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADRgepi+7GsnCJmyhXC4Oa2XVHay00gYAnkS
42bX0fTfVRhlT2f2bRHSCEd/JooXbxGogOXhzCkIHXSLMaGwcOckow0erReAQ/GD
MrsPDePJx05k09lCe6AzQf6lREc/T+badvvCpMVgoRpFXNYReUOhiAEiG+zBTZdz
xYRMIoONnA2UbmIk2NKdy6aIkxm2TJo73MiiJDCqXX3v//6KcQ3k/FEeNSIqqjmA
DxxoCbmgokJ0hJljGCjewhK6YkpJIM+uRYQf1BxqgzDXHWyEdswdOdFzcyiQZ24e
CdLcdGT6F/vkXsGm0JvVEhJMx1plSWKWOwLRXUxwEQfbPAu/0gA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:53 2025 by rpki-client