Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json)
Hash identifier: HnHx6xdzrNntLtSGwWixszdkTicmet8832nDECsUuCU=
Subject key identifier: 7F:96:FC:C4:BE:90:15:8E:42:CE:E2:9C:51:93:D2:9D:BB:CB:58:C0
Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19
Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19
Certificate serial: 530067E8B84C1F4114A2EE688F2C416E15A10431
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
Manifest number: 0156
Signing time: Wed 29 Jan 2025 13:20:39 +0000
Manifest this update: Wed 29 Jan 2025 13:15:39 +0000
Manifest next update: Sat 01 Feb 2025 22:00:39 +0000
Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: Dtxf3Tj5nUNX6aiIq/sGIBagqE3AL8f2X9c6a5tPROM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:00:67:e8:b8:4c:1f:41:14:a2:ee:68:8f:2c:41:6e:15:a1:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19
Validity
Not Before: Jan 29 13:15:39 2025 GMT
Not After : Feb 1 22:00:39 2025 GMT
Subject: CN=7F96FCC4BE90158E42CEE29C5193D29DBBCB58C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:a3:2c:7d:3a:e5:51:89:4c:c4:29:17:4d:
45:3e:05:ee:ac:96:44:1d:61:bf:6e:39:e1:81:17:
ef:2d:7b:1f:ca:c1:cc:5f:f4:f0:5d:b9:c3:56:6e:
d0:6e:cd:c8:de:31:f8:c8:41:a7:b4:a5:95:22:d3:
41:2d:a7:e0:de:53:0a:6f:de:e1:05:13:9e:3c:dc:
f5:5f:4c:36:48:92:39:44:cb:ef:50:b5:58:7b:89:
09:3f:2d:a2:f5:81:a1:3a:8d:80:99:a8:4f:a1:8e:
86:9f:fb:07:59:96:06:5d:d5:00:ae:3b:8d:5e:c6:
92:3b:e5:1c:ff:d0:4f:27:4b:e7:3a:e5:dd:fd:15:
66:62:6d:a7:29:96:70:da:54:6a:55:38:d3:22:ff:
4d:3e:4c:8c:7a:47:02:c9:46:2a:bc:1b:52:f2:10:
ed:4d:b5:e4:90:d0:7e:6e:d8:e1:5b:9d:d3:b1:a4:
de:51:9d:08:fd:a8:49:95:33:04:75:7b:82:b2:0e:
80:87:c7:fd:75:9d:1b:9f:bf:48:bb:3a:6b:03:ac:
2d:6c:f8:b0:20:b7:b5:db:e6:b1:8b:25:a9:72:d5:
77:45:bd:57:2d:af:2d:51:07:b5:87:93:55:7d:99:
82:21:8c:96:25:95:e2:f7:a1:4d:38:a7:02:f3:e5:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:96:FC:C4:BE:90:15:8E:42:CE:E2:9C:51:93:D2:9D:BB:CB:58:C0
X509v3 Authority Key Identifier:
keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:43:55:23:52:87:7e:05:6d:57:1c:48:d2:a5:5c:0f:6c:b2:
3e:3c:f2:4a:af:28:39:fa:88:bf:8b:5a:f6:c8:f0:c8:03:32:
29:68:0e:a3:2b:ff:df:6f:49:8b:00:09:56:b4:a3:a5:d6:7f:
a5:e8:3b:79:7b:0f:c2:e8:0b:33:0c:cd:e6:50:61:c1:13:03:
9c:09:b3:a8:45:4a:ce:97:a3:1e:5f:9a:49:36:13:3d:99:82:
ba:8f:09:31:28:dd:62:2e:48:93:1d:db:cc:67:1e:76:c2:a3:
4c:fb:8d:93:ea:0a:57:7b:c7:8d:89:c1:a3:a5:de:a6:5c:7f:
1a:b2:25:76:4c:25:4b:1f:49:91:7f:c4:b6:e6:81:d9:68:73:
17:ff:4f:4a:b8:12:45:48:2a:2a:e9:01:3a:d2:b4:a1:db:76:
39:d7:6b:92:7f:ff:f6:d8:98:06:d5:27:a6:ab:0c:3d:00:96:
93:33:d0:c9:e5:2c:e3:82:88:7c:c6:a9:10:ac:26:f5:da:08:
da:40:17:e1:fb:2d:70:28:91:89:b7:47:3a:ae:a7:fe:98:f2:
40:1c:a8:96:78:49:5e:11:11:89:56:60:69:2b:af:e2:3a:6d:
4c:28:52:3a:b8:6f:04:23:ee:42:42:7a:a0:35:db:8d:d7:91:
8a:18:64:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:50 2025 by rpki-client