Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft
File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json)
Hash identifier: LGAi44YCCSEA6UC/0le6WvBN6HUPL5e7CX7T4t8SE0k=
Subject key identifier: DF:75:74:25:E4:39:0D:F9:8D:3F:97:E6:6A:5B:C8:F4:85:29:B0:0D
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 2D12DDBAEF73691BD130AEA42BE6A32C28D9A487
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft
Manifest number: D1
Signing time: Wed 29 Jan 2025 20:21:48 +0000
Manifest this update: Wed 29 Jan 2025 20:16:48 +0000
Manifest next update: Sat 01 Feb 2025 22:24:48 +0000
Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: jnOn8Y9u9L4/uKAvzjrGPdZ4kjf9MAOfe/CsOrB7Q7c=)
2: AS23693.roa (hash: 5HlJn3Dvgch+mBeDaZ3dX97A1G5eMj//UlIcz/+00Z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:12:dd:ba:ef:73:69:1b:d1:30:ae:a4:2b:e6:a3:2c:28:d9:a4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Jan 29 20:16:48 2025 GMT
Not After : Feb 1 22:24:48 2025 GMT
Subject: CN=DF757425E4390DF98D3F97E66A5BC8F48529B00D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:8a:ee:70:e5:d6:95:72:78:7e:d3:ce:91:
ee:c6:f5:ae:c3:5d:4b:d7:5e:0f:06:56:72:cc:61:
a4:8d:2c:b4:d1:c7:b1:99:76:08:d2:a2:10:a7:f3:
5a:15:03:8a:49:11:6f:4f:83:72:a1:23:71:30:a4:
5a:36:1f:6d:34:8f:b3:ce:98:3b:56:c0:2d:f8:dc:
be:be:f1:a6:ab:68:f2:97:e1:2e:74:21:bd:3d:68:
03:c2:d2:f0:b0:8a:bb:22:47:16:a2:3d:8b:87:6f:
e8:23:3b:6c:8d:a4:32:f0:57:23:3d:9d:6c:25:67:
c3:cb:36:a9:98:38:de:bc:1f:4e:df:f4:a4:7a:3d:
2a:36:06:d9:01:62:a1:66:05:0f:9d:5c:1d:83:aa:
6b:0b:74:64:58:4f:4a:7f:60:57:57:7d:82:1b:e6:
93:79:c2:5d:c9:61:6f:65:7c:a1:af:df:5f:e2:e3:
4e:d3:b1:c4:de:bf:4f:60:a4:9a:ea:c1:20:75:88:
1d:df:89:17:4a:73:39:85:e6:c3:e1:9e:36:f3:fc:
d3:59:77:05:7b:a4:09:59:5e:8d:b7:b9:f9:8f:2c:
03:58:a0:a3:54:2b:5d:4a:7b:1a:27:e4:50:c0:dc:
da:99:bb:57:27:a4:8b:b4:eb:9e:4c:14:3b:9b:96:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:74:25:E4:39:0D:F9:8D:3F:97:E6:6A:5B:C8:F4:85:29:B0:0D
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:a4:7b:c1:ec:8a:be:76:15:6c:2a:35:c9:ff:df:38:bf:
56:f2:6b:e5:2f:ee:98:c4:10:b4:cb:6a:cf:88:23:47:c5:ec:
e2:1b:30:e2:66:14:92:bd:ff:b4:2e:e0:fd:91:ab:b0:94:e8:
5f:b5:88:d7:fb:8d:01:d4:7d:ca:b3:c0:5c:83:c6:88:80:f8:
40:4f:8b:ef:ad:53:08:3d:2b:c0:2b:f5:48:8a:34:72:db:87:
08:89:73:d8:e7:3e:26:10:3d:da:51:fd:84:89:e3:5f:32:f4:
80:1b:21:b5:cb:ef:a7:bf:bb:3b:c8:ae:36:f6:e9:4d:f2:eb:
b4:9c:70:3a:db:c4:8b:ec:ba:61:1d:71:3b:4c:68:85:3f:a5:
18:71:8e:89:cf:1b:6e:33:bf:f0:7c:c8:95:4d:05:98:4e:d2:
84:4e:16:37:df:1c:16:ba:72:b5:23:75:24:6e:27:72:72:ce:
68:64:9f:e8:89:6c:17:4c:a0:b6:15:67:9c:2b:10:4b:2c:38:
4b:d6:44:a9:59:4d:61:d1:65:f0:b3:74:88:48:af:31:62:f1:
4f:89:db:54:1e:c9:2f:93:81:c9:ba:90:fb:ff:6a:d2:3e:21:
57:c5:9d:57:80:ed:36:96:91:8f:91:e0:17:60:7a:b3:ff:8a:
72:0b:15:a6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULRLduu9zaRvRMK6kK+ajLCjZpIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNTAxMjkyMDE2NDhaFw0yNTAyMDEyMjI0NDhaMDMxMTAvBgNV
BAMTKERGNzU3NDI1RTQzOTBERjk4RDNGOTdFNjZBNUJDOEY0ODUyOUIwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPorucOXWlXJ4ftPOke7G9a7D
XUvXXg8GVnLMYaSNLLTRx7GZdgjSohCn81oVA4pJEW9Pg3KhI3EwpFo2H200j7PO
mDtWwC343L6+8aaraPKX4S50Ib09aAPC0vCwirsiRxaiPYuHb+gjO2yNpDLwVyM9
nWwlZ8PLNqmYON68H07f9KR6PSo2BtkBYqFmBQ+dXB2DqmsLdGRYT0p/YFdXfYIb
5pN5wl3JYW9lfKGv31/i407TscTev09gpJrqwSB1iB3fiRdKczmF5sPhnjbz/NNZ
dwV7pAlZXo23ufmPLANYoKNUK11Kexon5FDA3NqZu1cnpIu0655MFDublkHJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU33V0JeQ5DfmNP5fmalvI9IUpsA0wHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1
MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3
QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACqrpHvB7Iq+dhVsKjXJ/984v1bya+Uv7pjE
ELTLas+II0fF7OIbMOJmFJK9/7Qu4P2Rq7CU6F+1iNf7jQHUfcqzwFyDxoiA+EBP
i++tUwg9K8Ar9UiKNHLbhwiJc9jnPiYQPdpR/YSJ418y9IAbIbXL76e/uzvIrjb2
6U3y67SccDrbxIvsumEdcTtMaIU/pRhxjonPG24zv/B8yJVNBZhO0oROFjffHBa6
crUjdSRuJ3Jyzmhkn+iJbBdMoLYVZ5wrEEssOEvWRKlZTWHRZfCzdIhIrzFi8U+J
21QeyS+Tgcm6kPv/atI+IVfFnVeA7TaWkY+R4BdgerP/inILFaY=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:44 2025 by rpki-client