Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
File: D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json)
Hash identifier: dgEwP9IPPhEVbMT8IRhkkIBygwjVSO0a7cKBfC8O9Fs=
Subject key identifier: E0:BF:DF:44:9E:AC:E6:E1:EB:42:E0:F0:5B:42:26:85:5F:24:79:9E
Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268
Certificate serial: 5A22CE2C0A30C2EC4ACD9A5669E71963E820D8CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
Manifest number: 024D
Signing time: Wed 29 Jan 2025 18:10:00 +0000
Manifest this update: Wed 29 Jan 2025 18:05:00 +0000
Manifest next update: Sun 02 Feb 2025 05:44:00 +0000
Files and hashes: 1: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: tnf/GCsy9lw1oZwIPWKRQWBhtFL7fOo3qWpSNYZGRdE=)
2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: GzPhe/FHAzKWcFGzhJ3yzciMVW730zuvH2EeYtfsJ1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:22:ce:2c:0a:30:c2:ec:4a:cd:9a:56:69:e7:19:63:e8:20:d8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268
Validity
Not Before: Jan 29 18:05:00 2025 GMT
Not After : Feb 2 05:44:00 2025 GMT
Subject: CN=E0BFDF449EACE6E1EB42E0F05B4226855F24799E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:08:75:de:c0:d6:13:41:a6:8e:82:2d:ae:
d0:ab:46:70:cd:80:e3:1f:a8:1c:81:7a:6c:98:41:
73:12:e4:12:f2:78:42:68:86:75:92:7c:3a:60:fc:
cc:5c:54:df:8c:40:ca:75:cf:78:9d:df:fe:98:1d:
7a:e4:ae:89:2c:fa:3c:c5:6c:ca:9c:7b:fb:f3:4e:
ad:04:a9:7c:ed:6e:45:06:cf:f7:76:8a:72:f0:c8:
f0:a8:7d:18:58:1b:5e:47:88:dc:a1:5e:7d:c4:3c:
70:a5:34:cd:e5:07:3d:dd:b1:8c:a4:6f:68:31:ef:
0e:6e:0b:d4:13:13:02:dc:da:1b:83:87:a9:2e:bc:
f0:f9:e0:91:fe:50:05:57:05:04:0e:3b:48:42:62:
13:b6:9a:c2:c0:f3:96:8a:e9:6a:ea:44:a2:e1:d8:
69:ed:0e:3c:b0:02:35:cb:2d:69:cc:5d:e9:c5:ea:
86:c9:45:d6:22:43:b3:36:d9:20:e3:31:e7:28:ef:
e2:ea:d6:29:0f:a4:78:b1:01:fe:f3:db:ce:e1:16:
1b:2e:d3:84:ae:5f:e8:56:8e:70:4b:cf:30:4f:e2:
7a:f9:d4:cc:5f:89:4b:d6:94:54:c8:8c:ed:be:6d:
b5:1a:84:33:11:98:0d:c9:db:1b:84:75:70:1c:b2:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BF:DF:44:9E:AC:E6:E1:EB:42:E0:F0:5B:42:26:85:5F:24:79:9E
X509v3 Authority Key Identifier:
keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3f:bf:c8:21:a3:5a:e2:30:f5:06:7d:8b:c5:9c:49:e3:08:
0e:cf:b5:b2:1b:37:ab:9d:2f:e3:46:1d:dc:08:45:98:cd:88:
38:7d:0c:33:3b:e1:3e:5c:fc:c6:b4:18:03:b8:f8:57:df:d2:
5d:95:cd:9c:e4:bf:39:fa:35:f0:a0:d1:87:fa:d2:3c:d9:70:
c5:4a:43:4e:fb:c7:61:42:95:4d:f3:c2:d9:a3:f5:30:fa:24:
eb:6c:72:ff:a5:e4:6d:f1:0c:f2:af:21:e5:6a:12:06:5e:e7:
ec:89:11:01:02:f3:00:13:05:24:a1:4e:d6:29:0b:6e:29:49:
e1:ab:fc:1f:b0:1e:be:4f:72:1a:c2:bf:c9:90:61:32:55:e4:
f1:9f:66:d8:b2:30:49:df:0a:c9:ca:a9:f7:bd:e4:f0:10:8a:
d5:0b:f7:e1:9f:46:dd:25:19:7e:a2:ba:d9:4b:27:57:5e:10:
ba:b0:fc:7e:24:e7:d6:3a:5c:0b:4b:92:84:d8:89:fc:38:3f:
6a:42:9f:01:e4:3d:be:d6:99:c8:41:62:04:d1:2d:f6:92:53:
26:bd:dd:ac:6a:d8:78:89:da:50:ab:e6:51:02:5c:b8:4c:b9:
93:37:31:94:32:bb:c6:ed:59:99:0f:b0:29:77:b8:f2:28:1d:
a5:ad:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:51 2025 by rpki-client