Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft
File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json)
Hash identifier: MOo0L+Tjc8UPyRXCxbpXYWPuZqVBpEr6HENE66M8NNI=
Subject key identifier: 2A:E8:9D:52:43:70:39:D9:D7:58:E4:A9:93:33:00:88:D9:96:06:00
Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A
Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A
Certificate serial: 100A12F49612023130E12B8C6071C54C6D785C36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft
Manifest number: 32
Signing time: Thu 30 Jan 2025 13:12:04 +0000
Manifest this update: Thu 30 Jan 2025 13:07:04 +0000
Manifest next update: Sun 02 Feb 2025 23:40:04 +0000
Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: +dbD0rs3Y/pvyY1KT2EnkDsSRcooV6kN4rxGM7nz4uk=)
2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: ebv5717pdfrOCM6UKJpRU8pwWSSBsU7X9vMbWD9pgi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0a:12:f4:96:12:02:31:30:e1:2b:8c:60:71:c5:4c:6d:78:5c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A
Validity
Not Before: Jan 30 13:07:04 2025 GMT
Not After : Feb 2 23:40:04 2025 GMT
Subject: CN=2AE89D52437039D9D758E4A993330088D9960600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:46:1c:5d:67:d7:cb:01:7a:e0:fe:f1:85:8b:
5c:48:9e:78:04:71:dd:37:b4:1c:b8:24:0a:c2:d3:
f6:b7:6f:ab:a2:24:d0:90:c7:62:aa:21:0a:f6:6f:
5e:94:0a:d1:73:2b:15:cd:db:77:72:78:7d:e0:40:
f8:72:d9:00:e0:9d:55:2d:22:04:46:da:b4:33:4e:
92:80:b9:e2:ba:81:9f:2b:8b:77:2a:a8:32:20:66:
dc:a8:dd:58:e8:d7:ab:e4:bd:87:2f:d4:4f:84:d9:
7f:0a:7d:50:46:4a:ad:c8:b0:14:ae:e6:71:be:00:
b4:f7:c0:f3:3c:11:37:c6:5d:c5:a1:f5:76:1f:36:
59:87:6c:b5:4c:bf:4d:f4:61:50:78:63:05:49:b4:
7f:5f:ad:40:5a:9c:c1:0b:68:e6:a8:2b:c6:0f:c8:
7e:3d:7d:4f:be:3b:16:af:dc:67:a6:19:77:7b:1f:
32:e7:35:ca:8c:d4:aa:8b:22:27:51:44:ce:4c:ba:
2a:9a:9c:9a:83:94:9d:78:78:e5:e5:cc:9c:7a:06:
40:3d:59:27:38:94:98:23:06:25:4a:a0:5c:d7:59:
5a:d9:2f:e9:21:c3:d9:44:17:bd:b4:3b:cf:45:63:
2f:37:b6:5d:9a:50:dd:2b:41:89:05:a4:4b:70:fe:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E8:9D:52:43:70:39:D9:D7:58:E4:A9:93:33:00:88:D9:96:06:00
X509v3 Authority Key Identifier:
keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d6:e5:1b:51:01:95:6e:a1:73:da:cc:0f:91:1b:67:5e:c2:
51:04:88:73:5f:17:8f:68:c6:32:9f:49:84:38:00:30:c4:38:
e7:9f:72:63:d0:a5:8b:d7:95:f9:5f:54:ee:74:34:59:a4:36:
02:8e:cd:f7:bb:81:ac:81:26:12:e8:67:fd:2e:90:ba:75:e5:
a5:24:6b:40:0a:88:f9:13:3e:85:85:ec:66:20:02:a4:68:93:
18:7a:63:44:60:c0:14:14:a2:46:c6:b1:c8:99:e2:65:ad:30:
8a:55:85:e7:2c:81:83:f0:d9:ff:ff:96:23:a2:3b:62:db:b7:
aa:60:73:be:1a:f3:6b:0d:f4:84:2b:93:86:cb:d4:28:83:45:
18:ae:9e:d8:0a:92:61:75:48:31:c6:4f:94:bb:98:03:be:32:
47:fd:10:0f:56:d7:38:58:f4:e8:64:87:b0:74:ed:2c:0f:d5:
c9:dc:11:84:73:26:e7:ff:4b:ae:e5:e8:9c:88:c4:18:1e:d8:
dd:1a:1f:e5:09:b8:98:80:05:17:78:d9:9e:88:dc:25:35:91:
0d:45:31:bf:3f:44:73:10:d0:08:5d:e9:31:31:7c:1f:db:fa:
49:45:49:6c:a0:4e:db:6c:50:58:65:85:70:9e:ad:4d:fc:66:
d0:28:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:28 2025 by rpki-client