Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft
File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json)
Hash identifier: E9ynT5wehl+zez0nHDe4iEKiBuLS18xfOaooDmjYcJ4=
Subject key identifier: 03:28:EB:39:82:B1:03:D7:BF:C1:93:11:81:6E:0C:1F:17:5D:25:57
Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4
Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4
Certificate serial: 2106AC2CD7E5384F50F464613F4D747382B6AE82
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft
Manifest number: 71
Signing time: Wed 29 Jan 2025 23:01:44 +0000
Manifest this update: Wed 29 Jan 2025 22:56:44 +0000
Manifest next update: Sun 02 Feb 2025 03:29:44 +0000
Files and hashes: 1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: 5CfjcXtLTU928clrFBKxM6H670OdT6Gdjw9Im74JIaI=)
2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: 06Cec8xVPiYb0c70fqAa/HVAsGAHQ3+T6hqXoF+BqVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:06:ac:2c:d7:e5:38:4f:50:f4:64:61:3f:4d:74:73:82:b6:ae:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4
Validity
Not Before: Jan 29 22:56:44 2025 GMT
Not After : Feb 2 03:29:44 2025 GMT
Subject: CN=0328EB3982B103D7BFC19311816E0C1F175D2557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:98:09:18:b8:14:3c:ca:f4:05:e0:41:aa:
85:09:8a:61:5e:06:e5:2d:51:ea:b1:36:c1:0b:54:
80:12:1c:bc:54:28:45:71:41:36:6b:e7:60:4a:c0:
33:da:04:87:3d:9d:c0:28:4a:85:50:7e:77:f9:5b:
88:5a:a9:da:f7:6e:db:e9:39:a6:14:68:85:3b:cb:
c7:24:2e:05:cb:b2:f7:aa:8e:63:52:0b:a4:4e:e0:
d1:c7:01:9d:12:38:4d:9d:a4:c9:d8:25:b4:dc:ea:
0e:d0:f1:a8:e3:18:db:fb:80:96:b0:68:0a:f3:f7:
a1:0e:28:58:c9:c9:1c:04:44:94:eb:eb:34:ad:10:
fd:ea:62:41:08:e8:42:66:15:9e:bf:8f:8e:eb:39:
5b:c6:c9:e5:c2:ed:45:09:b6:42:48:c7:1e:e3:9c:
c6:12:28:5f:f1:d7:9c:ec:59:29:75:07:d8:7c:10:
ec:1e:cf:3e:76:d9:e8:fb:e8:1f:ac:0b:05:ba:81:
09:a2:1a:8d:69:b7:33:35:fe:fd:e8:c3:dc:17:a9:
c3:1e:b6:67:83:9c:1e:d7:91:c1:e7:ab:50:82:6e:
12:d7:e8:31:31:04:1a:41:a6:89:ce:10:9a:ae:e7:
e3:72:e7:f1:6e:44:bc:4a:42:19:a3:eb:4a:9c:7b:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:EB:39:82:B1:03:D7:BF:C1:93:11:81:6E:0C:1F:17:5D:25:57
X509v3 Authority Key Identifier:
keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8d:77:a1:00:7b:54:ba:c0:fd:b8:67:8b:41:f1:01:d8:9f:
9e:30:e0:ef:47:9d:52:67:97:ca:f4:bf:01:df:0e:b3:dd:3b:
ea:53:36:92:b2:a0:13:cb:4c:50:fb:69:0f:f8:b1:af:e5:94:
41:71:58:19:c3:19:72:f0:71:4e:09:ab:9a:65:4c:5e:73:c6:
b9:df:01:18:45:39:43:75:4a:55:e7:43:b0:1a:40:d7:bc:cf:
14:4b:99:4f:d8:73:41:82:10:6c:92:d7:73:91:9f:38:c0:bb:
0f:7e:ff:82:69:11:64:14:5a:b6:e5:50:33:a6:47:4f:68:42:
d7:9f:f1:a1:df:c7:a3:4e:66:a5:fe:37:b2:99:80:a8:3e:93:
b9:7e:50:77:e3:2f:d1:87:4c:1a:c1:da:07:d6:cc:98:f5:13:
ac:23:64:73:a2:03:09:57:f6:d3:95:79:9a:a2:ac:0a:82:ab:
08:15:ad:0c:f8:ea:22:f3:f4:45:e4:33:f7:db:5b:65:b0:22:
fd:63:2d:ee:be:e2:aa:cb:2d:c3:88:1f:80:78:4d:f8:9e:96:
0c:30:48:8f:61:74:6d:ea:96:f2:64:7e:0c:1e:79:98:9f:8b:
d4:9e:53:93:7a:9b:af:f9:3f:55:63:28:6f:08:ed:fb:7d:90:
c1:b7:a5:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIQasLNflOE9Q9GRhP010c4K2roIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy
MTA2RjFCNDAeFw0yNTAxMjkyMjU2NDRaFw0yNTAyMDIwMzI5NDRaMDMxMTAvBgNV
BAMTKDAzMjhFQjM5ODJCMTAzRDdCRkMxOTMxMTgxNkUwQzFGMTc1RDI1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTJgJGLgUPMr0BeBBqoUJimFe
BuUtUeqxNsELVIASHLxUKEVxQTZr52BKwDPaBIc9ncAoSoVQfnf5W4haqdr3btvp
OaYUaIU7y8ckLgXLsveqjmNSC6RO4NHHAZ0SOE2dpMnYJbTc6g7Q8ajjGNv7gJaw
aArz96EOKFjJyRwERJTr6zStEP3qYkEI6EJmFZ6/j47rOVvGyeXC7UUJtkJIxx7j
nMYSKF/x15zsWSl1B9h8EOwezz522ej76B+sCwW6gQmiGo1ptzM1/v3ow9wXqcMe
tmeDnB7XkcHnq1CCbhLX6DExBBpBponOEJqu5+Ny5/FuRLxKQhmj60qcewn9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAyjrOYKxA9e/wZMRgW4MHxddJVcwHwYDVR0j
BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw
RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2
RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl
YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0
MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+Nd6EAe1S6wP24Z4tB8QHYn54w4O9HnVJn
l8r0vwHfDrPdO+pTNpKyoBPLTFD7aQ/4sa/llEFxWBnDGXLwcU4Jq5plTF5zxrnf
ARhFOUN1SlXnQ7AaQNe8zxRLmU/Yc0GCEGyS13ORnzjAuw9+/4JpEWQUWrblUDOm
R09oQtef8aHfx6NOZqX+N7KZgKg+k7l+UHfjL9GHTBrB2gfWzJj1E6wjZHOiAwlX
9tOVeZqirAqCqwgVrQz46iLz9EXkM/fbW2WwIv1jLe6+4qrLLcOIH4B4Tfielgww
SI9hdG3qlvJkfgweeZifi9SeU5N6m6/5P1VjKG8I7ft9kMG3pa0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:21 2025 by rpki-client