
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json)
Hash identifier: 3E65nsw/pWHw4fFVZHwu3BsV+xM5Apz13SmSjs5POEI=
Subject key identifier: 15:1F:3E:04:11:62:60:E7:4B:E9:26:7C:D2:AE:E7:0D:2F:6A:5C:B2
Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F
Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F
Certificate serial: 3BE1168FD9F1498FD7313BF145A6FA5B4F1FDE1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
Manifest number: 90
Signing time: Thu 30 Jan 2025 09:40:49 +0000
Manifest this update: Thu 30 Jan 2025 09:35:49 +0000
Manifest next update: Sun 02 Feb 2025 15:08:49 +0000
Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: FdkJ+fWGP5HvGl21FYj0D/VpK3x5vDFR6Q2sKenYSNo=)
2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: yk8Rr8VaeRXOtlZu93aAP8+HhUVuO5D/2Rz8Q6wQmZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e1:16:8f:d9:f1:49:8f:d7:31:3b:f1:45:a6:fa:5b:4f:1f:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F
Validity
Not Before: Jan 30 09:35:49 2025 GMT
Not After : Feb 2 15:08:49 2025 GMT
Subject: CN=151F3E04116260E74BE9267CD2AEE70D2F6A5CB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:9e:0e:cc:c4:e1:38:2a:2a:69:04:78:08:
54:b5:4b:b1:e7:e4:6b:29:70:47:ee:4f:e9:1f:e3:
93:d3:9b:65:80:6d:31:f1:81:1b:d1:53:35:90:54:
41:74:09:1c:68:4e:ba:42:32:b8:6f:f5:8e:f1:43:
6e:36:f2:44:71:6a:69:79:ba:66:dd:65:09:c0:19:
25:29:47:e1:3c:3b:3d:0f:7b:19:2b:3c:59:a2:5d:
63:38:bf:6e:1e:00:69:34:a4:ba:ca:a3:da:d6:29:
f5:08:01:8b:93:01:ec:41:04:b4:f9:a3:77:25:88:
5e:67:a0:a0:67:32:68:77:e9:2c:8f:ff:06:e1:a5:
87:a0:11:b0:0f:9a:6b:08:d4:4a:4b:76:a0:11:5e:
d8:58:15:83:80:25:31:82:78:4a:2f:79:ea:b2:3b:
92:d3:2f:fe:2c:49:59:1e:dc:fb:76:0a:0b:e4:f8:
c2:c6:d3:be:34:84:12:12:39:e5:9c:04:dd:0c:5c:
11:74:4e:00:60:ad:33:90:43:5b:90:b9:eb:dc:16:
7f:b0:80:b2:6e:9f:1f:71:e4:de:22:85:39:3b:24:
b1:28:ff:72:d1:39:46:43:88:7d:e8:6c:0a:a6:b1:
e4:48:9e:d6:e8:e2:09:77:c1:99:1d:f6:ef:d3:cf:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:3E:04:11:62:60:E7:4B:E9:26:7C:D2:AE:E7:0D:2F:6A:5C:B2
X509v3 Authority Key Identifier:
keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:26:a5:e5:0b:1c:79:20:c8:e9:f0:e3:47:98:68:6d:a9:41:
e6:4c:f0:6a:07:2d:d3:d1:45:b4:91:61:a3:ef:b9:94:d1:5c:
bb:a1:2b:db:f8:ec:43:95:65:46:42:1a:76:72:b4:c1:ae:33:
2b:7a:03:09:49:b6:eb:9f:c1:79:78:3c:2e:d2:81:5d:0b:6c:
89:8c:ee:13:04:a1:22:ec:73:39:9f:44:5b:2a:9c:b1:86:d9:
0a:c2:16:a3:8b:59:7f:c2:47:6b:2f:52:45:d4:2c:d1:5f:4c:
da:28:72:bb:28:10:c7:10:44:1a:fd:f1:d8:db:dd:f1:a6:42:
d8:f3:dd:1b:14:b3:40:82:f3:40:15:95:89:14:61:98:19:c1:
c7:c9:02:51:56:63:b2:32:83:c2:59:d1:a5:3c:51:d9:00:50:
45:54:d8:64:6d:28:d0:51:bc:91:72:e7:da:97:4a:52:06:21:
6d:fa:1e:8a:40:90:8c:bf:5c:6a:13:5e:b1:e1:a0:a0:2e:2a:
68:d0:8c:2e:d0:c3:1b:2b:cd:1a:91:97:bf:fc:07:b7:82:a5:
3f:d5:54:b0:b9:94:66:69:b3:5f:af:e1:3a:87:00:3a:a7:a3:
e5:3c:16:c2:af:19:27:62:7e:73:5c:82:13:29:ee:96:77:9e:
4c:4a:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:48 2025 by rpki-client