
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json)
Hash identifier: mgPDWvRiQwfDq1ZqRFkefEy2wag8NiGidXUH/aL3D14=
Subject key identifier: 97:0C:D0:0C:25:4E:C2:58:15:5D:E9:FB:A7:BC:A4:C7:C9:25:2D:03
Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7
Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
Certificate serial: 2251D54308B752E5C749E135FF7E1370CDD6231C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
Manifest number: 0289
Signing time: Fri 31 Jan 2025 09:50:02 +0000
Manifest this update: Fri 31 Jan 2025 09:45:02 +0000
Manifest next update: Mon 03 Feb 2025 14:27:02 +0000
Files and hashes: 1: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: zEdFyRpVufjcAF6i1P6tMfdtD/kkAlqv40dF1QuwMQY=)
2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: a7PTXgKIuAxPVgmOfgSfIiexn0wfFohzIh28xEr3Sns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:51:d5:43:08:b7:52:e5:c7:49:e1:35:ff:7e:13:70:cd:d6:23:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
Validity
Not Before: Jan 31 09:45:02 2025 GMT
Not After : Feb 3 14:27:02 2025 GMT
Subject: CN=970CD00C254EC258155DE9FBA7BCA4C7C9252D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:42:2e:06:ab:3a:0c:9f:3a:8a:f8:a7:d7:
1c:10:57:c8:2c:08:10:69:61:43:e0:d6:1c:58:1f:
66:19:03:72:d8:1b:13:e0:7b:46:27:27:4d:f6:76:
98:90:12:c3:22:f9:e5:df:54:a8:35:97:97:bb:bf:
46:fd:13:61:37:c7:76:81:b4:80:76:44:5a:d1:78:
61:6e:77:94:1d:93:11:78:c9:2e:6d:fa:0a:d4:fb:
e3:25:2d:4f:e2:52:14:a2:98:bb:5d:8f:dc:dd:c0:
cc:ff:25:b5:ad:2e:96:c0:35:7d:58:93:54:45:45:
bc:c1:0d:19:ae:3b:94:74:d2:80:0b:6c:c9:22:74:
5b:d4:d8:26:1b:e5:c4:a5:64:c3:a3:6c:4c:88:c0:
d4:27:f9:bf:80:78:fa:4e:b4:e2:9f:c2:df:e2:13:
16:f8:67:5b:13:43:13:c8:b0:5b:c0:dc:7b:2e:5e:
9e:d1:3f:2b:a5:ae:56:54:f7:ff:48:b6:54:10:1f:
3d:c0:f6:f7:06:60:e5:36:ac:62:d4:99:d3:c0:97:
3a:b9:c5:f4:b1:94:4a:a4:01:bc:65:f9:28:db:91:
6b:03:d3:e7:af:92:9f:87:2c:dd:dd:2f:70:50:ac:
82:bd:a2:60:e6:8c:e1:a3:38:ac:3f:06:d7:0e:0d:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:D0:0C:25:4E:C2:58:15:5D:E9:FB:A7:BC:A4:C7:C9:25:2D:03
X509v3 Authority Key Identifier:
keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d5:c9:d1:57:07:05:2b:a0:74:04:33:17:95:2b:ad:66:8e:
53:16:99:f7:da:0a:36:ea:77:a1:e6:5f:f8:81:dd:63:cb:af:
6d:bb:49:14:a5:8f:47:8d:f7:41:cd:03:fa:df:b3:7b:7a:0f:
fa:09:7b:9e:26:7c:60:d4:4c:d2:37:df:98:b1:68:2e:4b:62:
83:e4:cb:34:e1:0b:2d:14:a5:24:44:de:ef:e7:a2:33:ae:d8:
03:01:4e:6e:65:11:44:4d:20:92:26:0b:3c:d7:b4:49:ad:34:
1e:eb:c7:29:84:a0:49:37:34:4b:85:7b:a8:66:70:87:5d:77:
84:d3:76:4e:ba:0d:c5:68:16:cc:cc:4c:da:68:50:06:92:16:
6c:63:f1:da:3c:c5:20:46:22:a4:9b:2a:71:5a:2b:de:bd:a2:
7f:b9:6a:dc:55:79:d9:5f:c2:7a:41:0a:23:86:b6:bf:ec:bb:
37:1b:b5:aa:89:30:48:a1:f7:5d:87:8f:b9:23:0c:6f:4f:24:
08:8f:8b:7a:ee:1c:cf:9c:f4:c2:41:db:76:0e:37:44:c3:3b:
38:d1:3a:a8:27:73:15:66:45:57:5f:17:6e:a5:4e:91:64:bf:
73:bd:1d:39:57:28:d5:14:9d:8a:ab:be:5b:f6:1a:f2:90:4e:
23:22:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:06 2025 by rpki-client