Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft
File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json)
Hash identifier: k2tPVbPLRouRysBzPAkcnPloDK4sEyKtoOY5udOQQgk=
Subject key identifier: C2:F0:1C:1D:93:BA:2F:0B:DB:D2:00:FD:43:51:02:4F:FC:EF:51:56
Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50
Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50
Certificate serial: 58A329863BBD15778DA427272B937C8B8C8E7661
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft
Manifest number: 0326
Signing time: Wed 29 Jan 2025 16:10:58 +0000
Manifest this update: Wed 29 Jan 2025 16:05:58 +0000
Manifest next update: Sat 01 Feb 2025 23:25:58 +0000
Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: Cdzx+c96bcJf40T0jQGX+DuQNbFxMPDftx2W8hLOUxM=)
2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: /+6rFR/CtKXLMWpUolSLlOIypFPDbHoqQJ6CX1X4V1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a3:29:86:3b:bd:15:77:8d:a4:27:27:2b:93:7c:8b:8c:8e:76:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50
Validity
Not Before: Jan 29 16:05:58 2025 GMT
Not After : Feb 1 23:25:58 2025 GMT
Subject: CN=C2F01C1D93BA2F0BDBD200FD4351024FFCEF5156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:53:54:78:2d:fb:a5:74:fa:02:0a:96:17:
b6:b8:18:19:25:a0:23:5a:d8:f0:7c:0b:49:8d:0e:
8e:b5:05:75:7b:5e:98:8b:73:4a:dc:11:cc:89:d8:
5b:d9:26:39:ac:a4:81:5f:30:9d:3a:57:6b:52:38:
90:58:04:0b:62:86:99:3c:40:f6:f9:d9:63:08:53:
c2:40:c8:4b:68:35:88:68:60:f2:3f:45:84:43:c9:
d4:33:8b:c3:e3:76:07:05:ea:12:55:18:ca:e5:4c:
be:e5:a4:3b:20:37:d1:41:5e:66:6c:43:6c:3f:53:
20:50:e6:2b:f2:89:bf:14:49:9f:c7:06:16:19:72:
1b:32:00:11:04:8a:f5:61:4b:56:ca:c1:08:4a:d4:
58:d7:a9:20:56:01:30:62:b9:2b:bb:70:2e:2d:4d:
4c:2d:b0:70:3e:9b:df:e8:ac:53:4c:49:68:d2:1d:
ce:f5:60:55:5b:55:f3:0d:d1:85:84:bb:ef:e2:4d:
9b:9f:44:0e:bb:d1:40:77:7a:87:4e:42:c2:61:26:
95:44:41:71:a9:86:23:06:39:8b:e7:1d:e0:82:7b:
67:e0:40:2a:ce:39:97:d3:79:67:45:23:2a:75:7a:
c0:25:c6:b1:17:ce:5a:a9:88:ee:8d:03:f5:c4:98:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:1C:1D:93:BA:2F:0B:DB:D2:00:FD:43:51:02:4F:FC:EF:51:56
X509v3 Authority Key Identifier:
keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:68:2b:f0:e7:a2:39:59:a5:5f:d1:e0:6e:80:fa:65:0b:bb:
e8:7a:24:0f:4c:82:c9:eb:4f:14:8f:95:61:bb:56:8a:ba:4f:
a7:1a:09:88:8e:8e:ba:24:8a:49:6a:8b:9e:f1:13:35:f8:57:
72:87:cd:66:96:16:e8:f1:0b:33:df:94:25:09:b1:7d:09:01:
67:6f:12:d5:61:12:ef:0d:f2:f4:b8:ff:1a:98:df:86:0e:93:
c5:a0:27:cb:db:00:86:99:12:e9:0f:8d:67:42:79:17:09:14:
08:2e:01:66:25:4f:26:fb:a1:0e:bf:2b:61:fd:dd:14:2b:59:
f8:95:af:68:7f:f9:73:29:e7:90:d8:67:3c:5a:77:12:e2:e8:
e6:3a:8c:3f:1f:b3:dd:c3:06:6b:7d:ed:59:43:98:f9:91:c9:
3f:b5:ee:fa:bc:64:8e:ae:3b:35:b8:63:8b:de:14:28:3c:ed:
21:c4:9f:ca:37:59:c5:b6:59:93:d3:99:ec:76:fd:60:3c:b8:
6c:05:d2:d9:58:0a:37:44:c6:a8:2a:ca:ae:19:31:cf:07:08:
14:f5:36:56:e4:ca:20:9a:88:c8:5a:c2:fb:34:32:32:9a:34:
33:fc:5f:e2:c3:5c:79:1c:5a:f9:53:b8:93:97:12:0f:71:3e:
e2:ce:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:16 2025 by rpki-client