Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft
File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json)
Hash identifier: Jfq1LZY73CvAlX2bJj7fy9VujtrukVTSmJaXDy57jYg=
Subject key identifier: 55:B8:B7:D8:68:9D:8B:80:8E:B4:A5:56:9D:ED:61:2E:15:44:66:A3
Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B
Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B
Certificate serial: 0F7C66AAF4AE76F340B44E915EF948480566D2F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft
Manifest number: 67
Signing time: Wed 29 Jan 2025 11:01:55 +0000
Manifest this update: Wed 29 Jan 2025 10:56:55 +0000
Manifest next update: Sat 01 Feb 2025 20:36:55 +0000
Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: E4x3i1yHo4QsY7gVWVHKF10GYV56vU5fKeZhgpv30Uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7c:66:aa:f4:ae:76:f3:40:b4:4e:91:5e:f9:48:48:05:66:d2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B
Validity
Not Before: Jan 29 10:56:55 2025 GMT
Not After : Feb 1 20:36:55 2025 GMT
Subject: CN=55B8B7D8689D8B808EB4A5569DED612E154466A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:58:22:fd:ee:0b:bd:d5:5b:12:17:e8:a0:
b3:e6:44:bd:4a:be:dd:ca:33:47:26:38:a7:ff:ff:
7a:23:d5:56:5c:da:4c:c7:bf:b5:ba:ae:e0:94:e2:
02:aa:fd:40:99:ac:9a:e2:2c:9a:00:8c:fb:fe:fd:
03:0d:df:ad:43:60:00:1d:53:1b:01:ca:9f:a5:df:
b4:f0:d9:c9:e5:05:b3:2e:aa:eb:e9:a9:a0:04:5a:
ad:c7:04:b6:2c:c5:f0:a0:c7:76:78:20:b5:f6:93:
d6:bd:8a:66:d9:8b:91:0d:62:13:0e:f5:31:f6:5c:
32:1d:9b:1b:56:30:d8:ad:d7:66:24:18:47:95:14:
f7:41:5e:91:3c:e2:0c:50:ca:21:5d:0d:cb:33:22:
0f:65:74:7e:b8:2c:04:63:d2:0d:a6:e7:06:87:0f:
b0:7b:a1:ca:cc:2d:f8:11:d4:1a:b0:00:d8:6e:da:
aa:d1:1e:11:5d:fa:76:c1:ae:3d:21:6a:83:1d:c3:
3d:50:10:1b:e4:c2:46:00:15:ba:3e:d5:b0:87:94:
fd:53:47:8e:3c:68:2d:9e:95:06:21:08:8f:50:81:
3a:03:c4:ec:88:76:fb:34:42:4e:90:6e:73:96:0f:
f5:d1:79:9f:3e:ce:47:40:73:b8:bc:f4:de:79:0d:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B8:B7:D8:68:9D:8B:80:8E:B4:A5:56:9D:ED:61:2E:15:44:66:A3
X509v3 Authority Key Identifier:
keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:64:89:c7:57:e3:bc:0a:be:bd:4c:2e:e4:33:f7:fc:a7:
7a:ea:b3:a1:7f:2a:8e:ac:07:92:3a:d3:60:6e:da:c6:53:7f:
c3:29:b9:b0:e5:6e:73:24:2c:ff:4e:24:83:2d:e3:57:ac:45:
a7:6d:82:e0:09:83:d7:12:99:e3:61:45:de:39:57:04:51:cb:
6a:ae:34:1d:98:03:86:cc:77:6e:80:ac:8e:78:02:19:fd:22:
03:0e:a0:d6:67:e8:0e:3d:14:cd:88:47:df:e2:52:c0:42:1b:
04:d9:f3:8b:b5:0e:20:63:5f:f1:65:19:2b:92:88:b0:a3:1c:
a6:b9:71:05:5a:37:64:7b:9d:15:41:de:b2:a9:10:0f:43:bf:
9a:04:75:60:67:08:38:3a:f3:a5:9e:51:06:34:5f:54:c2:16:
d4:a4:11:80:7f:d2:50:ab:fe:36:a5:ff:98:f9:61:0f:83:30:
7d:5a:da:bf:42:d3:76:38:6c:ad:14:50:d6:14:dd:fa:2d:b3:
98:d3:61:b4:33:86:ee:06:e8:27:d7:e2:ce:db:31:d4:f2:2c:
d2:39:02:91:05:68:b3:88:8b:de:01:2d:e5:55:2e:5d:ef:c1:
6f:bb:15:86:0c:d8:2c:34:3f:02:f5:24:fa:8b:fc:31:52:09:
90:27:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:33 2025 by rpki-client