
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json)
Hash identifier: HH0QRV9f/e+5qpDMD6XFGptucABtN9Vxl2v2rJBRb1M=
Subject key identifier: BD:4A:FA:B9:84:A9:58:56:A1:A2:E0:B7:60:AE:26:E8:D6:DE:AC:D6
Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F
Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
Certificate serial: 386701E8C9E4405D45D792088F653C757D62044C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
Manifest number: 0185
Signing time: Wed 29 Jan 2025 16:31:55 +0000
Manifest this update: Wed 29 Jan 2025 16:26:55 +0000
Manifest next update: Sun 02 Feb 2025 03:02:55 +0000
Files and hashes: 1: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: MewgEFV8/Gf2xWiAF3HMTn3UuwwnwcLIAP9RU1oUnnE=)
2: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: 48+L1G8c0vPJ3Xwh9g6Jvkl9utn16OoluFEE7IOJhNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:67:01:e8:c9:e4:40:5d:45:d7:92:08:8f:65:3c:75:7d:62:04:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
Validity
Not Before: Jan 29 16:26:55 2025 GMT
Not After : Feb 2 03:02:55 2025 GMT
Subject: CN=BD4AFAB984A95856A1A2E0B760AE26E8D6DEACD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:dc:3e:fa:e0:02:c0:b5:ba:56:31:cb:5b:
bf:3c:1e:43:c5:1c:00:d0:15:7c:b8:07:a9:f5:8c:
61:0a:15:9e:1e:fb:eb:43:a4:b6:77:35:60:6f:29:
b6:f4:ed:21:1d:1b:ca:ea:70:54:39:5e:b2:a5:14:
54:ad:2b:95:18:2c:77:2c:19:50:12:bb:71:3b:32:
74:60:8f:d2:a0:c3:6a:fa:11:b1:f3:c9:cb:d3:3f:
28:84:bc:4b:19:83:5a:ce:0d:73:1f:68:b0:82:05:
1b:93:b7:55:cc:48:89:ad:fb:ba:3b:03:81:71:97:
8e:a7:c3:53:81:ed:38:e6:2a:ba:13:b2:85:22:aa:
08:ee:be:63:59:e1:80:3b:b8:7b:b5:cd:70:13:55:
af:0b:40:eb:27:05:d2:74:57:0f:01:78:c7:a9:f1:
ae:ec:64:5a:26:c8:0f:8c:11:1a:95:c1:f7:13:da:
1c:00:b8:3d:e9:f2:a6:c6:c0:d7:06:c0:42:97:8b:
35:1a:d1:92:18:22:c4:06:8a:eb:a8:9f:72:9e:14:
67:16:41:de:16:a4:3a:de:32:d7:7d:c2:41:5a:b8:
98:3a:e5:8a:be:23:be:b2:a7:d9:05:48:da:33:68:
3e:57:ea:98:27:93:95:01:44:78:f2:94:0e:58:c3:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4A:FA:B9:84:A9:58:56:A1:A2:E0:B7:60:AE:26:E8:D6:DE:AC:D6
X509v3 Authority Key Identifier:
keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d8:4f:1d:2d:55:18:7d:ea:42:01:75:2c:25:4a:01:5d:d0:
86:6a:63:a7:ef:91:cd:0c:68:5e:58:fa:22:2e:37:c3:76:1e:
59:d4:4c:bc:ed:4e:24:79:b5:b1:93:2b:ac:07:d0:dd:53:91:
ed:9b:bf:2f:55:16:d2:07:9c:85:24:e6:cc:c3:11:f7:b8:b8:
47:c8:c2:79:f1:44:1c:4b:b2:66:b5:16:82:1c:47:a2:c2:86:
14:26:c9:b8:bc:2b:dc:bf:14:83:d7:52:7f:fc:9b:44:f5:5e:
9f:0a:7b:71:df:38:6c:30:99:6d:08:61:4e:a5:ba:19:09:e4:
f3:d0:21:07:04:11:4b:d2:60:ac:c9:5b:6a:07:3c:6e:e5:38:
21:ac:4d:92:37:af:1f:51:9e:29:53:5a:12:ed:bd:a1:73:9d:
8f:02:4f:d9:e6:ad:8f:db:31:f7:d4:88:6f:0f:33:a5:fb:20:
65:e2:42:87:91:f0:59:04:10:b0:cf:8c:5b:f3:c8:18:9d:f8:
6d:b4:ac:da:0a:79:4a:95:0e:fe:eb:d3:af:22:91:8a:e5:32:
85:b2:82:23:d6:9b:a8:8f:bf:3a:07:d7:59:10:7e:2d:22:4c:
3d:6e:3a:55:8b:44:30:1e:bf:1d:86:16:ae:45:45:c8:e5:c7:
6f:9f:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:46 2025 by rpki-client