Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft
File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json)
Hash identifier: sAU823QGMk4kWEgcmd4QYJQTlbG21oQa9o3mT06Rie0=
Subject key identifier: 63:EE:31:4B:62:E5:5E:0A:1F:EC:6C:50:2C:9C:79:13:4D:80:85:56
Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Certificate serial: 30A89AAF49F891C63EF635210DD249637639A5BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft
Manifest number: 0427
Signing time: Thu 30 Jan 2025 15:31:34 +0000
Manifest this update: Thu 30 Jan 2025 15:26:34 +0000
Manifest next update: Sun 02 Feb 2025 23:32:34 +0000
Files and hashes: 1: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: HGlDA4/8VVAgy1tfZNlAnPXlJMICAK8Z05H6MVK5yJM=)
2: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: ER3zI0mjsrSB8R4HZkJhx/3Ne819PRF6wjOIn51Ijqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a8:9a:af:49:f8:91:c6:3e:f6:35:21:0d:d2:49:63:76:39:a5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Validity
Not Before: Jan 30 15:26:34 2025 GMT
Not After : Feb 2 23:32:34 2025 GMT
Subject: CN=63EE314B62E55E0A1FEC6C502C9C79134D808556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:59:6a:9e:47:d2:d4:a6:71:40:cf:42:6e:
97:79:3f:43:f5:fc:5a:39:d5:72:3d:6c:af:f1:60:
a6:a9:43:65:ae:4b:42:70:6b:bc:5a:31:3b:72:fc:
6b:ce:bb:56:22:63:a2:63:7d:8a:f0:98:25:42:70:
ec:e8:12:8e:9a:52:8b:b2:9b:8f:38:4b:a3:56:d6:
db:6b:4f:ee:c3:93:a1:0d:d5:60:fa:f0:b8:3d:f5:
17:62:cc:fd:ea:a8:19:32:5a:70:0f:ee:63:c6:04:
60:8f:2b:ce:4f:5a:c1:f8:cb:57:8c:7c:5f:6e:1b:
ab:9c:73:05:ef:fb:1f:4e:3a:4b:dd:80:a8:50:ea:
8b:e3:0c:06:d9:e4:5b:96:82:7c:a7:63:75:29:e7:
07:95:ad:3d:ad:a8:d6:4b:96:02:8c:ad:02:6a:9f:
ce:64:fd:34:f5:7a:ca:23:54:f4:7f:74:c2:2a:6b:
ce:4d:4e:98:6b:f5:5b:d1:83:33:82:48:62:3f:d1:
d4:79:46:a9:48:97:5d:4e:18:7e:bf:a3:d7:de:4b:
3a:38:57:30:ab:5a:40:0d:f1:01:40:af:be:ca:c9:
9f:ad:17:7f:4d:52:62:eb:06:e9:f3:88:b7:1d:bb:
d0:c8:6e:af:c9:e5:a1:10:d9:e8:7e:c7:7e:34:ce:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:31:4B:62:E5:5E:0A:1F:EC:6C:50:2C:9C:79:13:4D:80:85:56
X509v3 Authority Key Identifier:
keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:51:0c:57:e2:1b:b6:c5:c2:d2:1f:b9:6f:6e:30:dc:0c:
43:f9:70:cb:42:c4:fd:43:6d:4d:35:08:7e:0d:a0:17:aa:91:
1c:23:95:39:92:ba:ca:f4:2c:0e:ca:c6:8b:95:26:77:cc:26:
94:8b:7b:2c:40:1d:80:22:22:13:7a:dc:dd:69:1c:79:2d:53:
d4:d1:c9:ba:50:a8:52:4a:f2:5c:b6:fb:d0:94:72:b1:53:5f:
d1:1c:4e:a3:84:4d:08:20:1b:10:2e:32:05:b3:e8:6f:b7:f5:
2f:ad:73:d3:33:15:ac:9c:38:ed:ae:76:63:c6:a8:83:5a:a5:
71:f1:e2:03:f5:f3:da:94:5c:62:6a:a1:73:e1:50:f2:e3:81:
a4:55:bb:18:ad:bb:03:a9:15:0f:e8:a3:b3:d0:c0:67:97:0f:
b1:67:d1:8c:d0:e4:6c:e2:28:0e:03:dc:95:4f:ed:4c:51:a9:
36:5a:a3:42:9c:86:58:8a:a7:c4:be:35:9f:8a:28:f2:72:39:
78:d5:f8:c6:77:22:19:e0:6c:03:c8:6b:50:db:9a:c0:94:76:
48:73:e2:86:a4:f9:f2:6e:9e:76:a7:b1:95:ce:34:f1:f4:f9:
23:85:f5:57:24:52:a6:32:32:88:3d:6b:1b:1a:7f:23:30:a7:
50:26:db:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMKiar0n4kcY+9jUhDdJJY3Y5pbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1
RTVGN0ZCQjAeFw0yNTAxMzAxNTI2MzRaFw0yNTAyMDIyMzMyMzRaMDMxMTAvBgNV
BAMTKDYzRUUzMTRCNjJFNTVFMEExRkVDNkM1MDJDOUM3OTEzNEQ4MDg1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuq1lqnkfS1KZxQM9Cbpd5P0P1
/Fo51XI9bK/xYKapQ2WuS0Jwa7xaMTty/GvOu1YiY6JjfYrwmCVCcOzoEo6aUouy
m484S6NW1ttrT+7Dk6EN1WD68Lg99RdizP3qqBkyWnAP7mPGBGCPK85PWsH4y1eM
fF9uG6uccwXv+x9OOkvdgKhQ6ovjDAbZ5FuWgnynY3Up5weVrT2tqNZLlgKMrQJq
n85k/TT1esojVPR/dMIqa85NTphr9VvRgzOCSGI/0dR5RqlIl11OGH6/o9feSzo4
VzCrWkAN8QFAr77KyZ+tF39NUmLrBunziLcdu9DIbq/J5aEQ2eh+x340zjfNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUY+4xS2LlXgof7GxQLJx5E02AhVYwHwYDVR0j
BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0
MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG
N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1
MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw
OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAITSUQxX4hu2xcLSH7lvbjDcDEP5cMtCxP1D
bU01CH4NoBeqkRwjlTmSusr0LA7KxouVJnfMJpSLeyxAHYAiIhN63N1pHHktU9TR
ybpQqFJK8ly2+9CUcrFTX9EcTqOETQggGxAuMgWz6G+39S+tc9MzFaycOO2udmPG
qINapXHx4gP189qUXGJqoXPhUPLjgaRVuxituwOpFQ/oo7PQwGeXD7Fn0YzQ5Gzi
KA4D3JVP7UxRqTZao0KchliKp8S+NZ+KKPJyOXjV+MZ3IhngbAPIa1DbmsCUdkhz
4oak+fJunnansZXONPH0+SOF9VckUqYyMog9axsafyMwp1Am2ys=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:15 2025 by rpki-client