Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft
File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json)
Hash identifier: lemrm01AoindXwoIg783nMj/Id7zzTS9tkytMsLeZ+s=
Subject key identifier: 52:6A:44:A1:ED:EF:02:43:E8:5F:3E:81:75:43:3E:42:C0:58:5F:BC
Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB
Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB
Certificate serial: 3D6150A11CA3343BCE8655643B0EBB1893F0E743
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft
Manifest number: 017F
Signing time: Thu 30 Jan 2025 13:22:00 +0000
Manifest this update: Thu 30 Jan 2025 13:17:00 +0000
Manifest next update: Sun 02 Feb 2025 16:40:00 +0000
Files and hashes: 1: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: NlXE9FrrAtFZK7z4LzLiEbvQNBrh8XMzyI/0/b33wnA=)
2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: XE/brTNn9JtlPYNJFE9OluoH8MvpLDlsMKNBNlNadoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:61:50:a1:1c:a3:34:3b:ce:86:55:64:3b:0e:bb:18:93:f0:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB
Validity
Not Before: Jan 30 13:17:00 2025 GMT
Not After : Feb 2 16:40:00 2025 GMT
Subject: CN=526A44A1EDEF0243E85F3E8175433E42C0585FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:70:f4:86:e7:63:69:2c:79:19:50:2c:60:
b6:6c:69:da:11:f1:82:46:db:4d:80:c4:07:3b:e8:
d2:2d:14:69:ec:7b:31:9b:e3:81:2b:a3:39:f8:73:
0a:5b:54:18:44:f3:70:9b:0f:de:39:42:e0:e7:9f:
2e:c9:2d:30:f4:41:2d:2a:16:ed:de:ca:4f:4f:30:
04:69:39:57:07:95:65:1c:cf:b3:d2:f6:20:fe:46:
ae:f4:70:82:d4:9e:da:02:2e:1b:ed:cd:f0:27:88:
1c:27:6c:b3:cd:e5:12:88:ec:bb:32:21:22:b5:d1:
44:84:23:a4:17:fa:f9:7c:69:51:b6:62:ae:92:5e:
d6:ab:74:a7:a2:0d:d2:96:7b:27:59:26:e3:1d:b0:
df:ef:b3:fe:09:8f:f2:e3:74:cc:d7:ed:a0:b6:01:
9d:8e:ca:34:ca:71:32:a5:a2:d0:b9:90:e3:c9:32:
3e:6e:36:d0:85:49:53:ec:a8:e9:2d:bb:94:bd:a8:
8c:f5:4f:3e:c9:c6:02:99:96:bb:27:f3:39:5e:d7:
2f:96:d4:d2:10:56:6b:16:9a:92:e3:00:86:9a:d5:
91:93:3e:eb:22:8e:99:b5:33:52:6c:cf:72:9d:ff:
8d:be:b1:9e:3d:e7:bc:b4:66:84:9b:cc:df:40:0e:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:44:A1:ED:EF:02:43:E8:5F:3E:81:75:43:3E:42:C0:58:5F:BC
X509v3 Authority Key Identifier:
keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:61:f9:af:db:28:cd:9b:aa:84:3c:bf:ca:96:b5:0d:d2:1b:
9d:00:69:71:a0:08:9a:32:a0:06:ca:96:ff:91:3c:01:93:83:
20:48:76:84:c4:ce:ba:8b:ec:66:7d:14:ce:3e:16:30:c7:aa:
54:0a:e7:08:fd:83:d5:fe:44:4d:d0:6d:79:69:04:9e:b6:72:
f9:b7:0a:07:57:dc:79:24:52:41:44:bd:90:9c:93:29:cb:b2:
b1:2f:a4:c2:19:f3:52:c8:69:99:ac:a6:00:0e:3f:cb:cb:49:
41:47:41:86:d2:ad:61:bc:6b:56:b4:65:4d:03:ad:9e:d6:70:
47:12:c9:85:0c:83:18:44:18:ce:02:20:63:84:ec:ea:87:2f:
c5:5d:44:17:b3:d6:66:7d:ad:a5:6e:43:52:e2:91:30:8d:08:
87:96:7b:44:8f:10:0e:97:14:6e:c2:28:b0:10:f2:9a:e1:03:
51:d9:0b:51:45:8f:ee:db:47:b9:43:a7:88:ff:86:79:08:98:
6e:ad:b6:8d:b2:7f:1a:b7:3d:a2:60:4c:92:de:f5:ef:74:a5:
15:9b:ee:67:88:e7:66:81:c7:a3:1a:a4:3d:b9:c2:62:15:bb:
46:35:3d:bd:3d:b0:ea:76:51:69:3c:41:48:84:6c:5b:a3:6d:
b4:aa:61:71
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPWFQoRyjNDvOhlVkOw67GJPw50MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF
MEIwQURDQjAeFw0yNTAxMzAxMzE3MDBaFw0yNTAyMDIxNjQwMDBaMDMxMTAvBgNV
BAMTKDUyNkE0NEExRURFRjAyNDNFODVGM0U4MTc1NDMzRTQyQzA1ODVGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPXD0hudjaSx5GVAsYLZsadoR
8YJG202AxAc76NItFGnsezGb44Erozn4cwpbVBhE83CbD945QuDnny7JLTD0QS0q
Fu3eyk9PMARpOVcHlWUcz7PS9iD+Rq70cILUntoCLhvtzfAniBwnbLPN5RKI7Lsy
ISK10USEI6QX+vl8aVG2Yq6SXtardKeiDdKWeydZJuMdsN/vs/4Jj/LjdMzX7aC2
AZ2OyjTKcTKlotC5kOPJMj5uNtCFSVPsqOktu5S9qIz1Tz7JxgKZlrsn8zle1y+W
1NIQVmsWmpLjAIaa1ZGTPusijpm1M1Jsz3Kd/42+sZ4957y0ZoSbzN9ADhtRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUmpEoe3vAkPoXz6BdUM+QsBYX7wwHwYDVR0j
BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw
OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw
QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz
NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB
MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIdh+a/bKM2bqoQ8v8qWtQ3SG50AaXGgCJoy
oAbKlv+RPAGTgyBIdoTEzrqL7GZ9FM4+FjDHqlQK5wj9g9X+RE3QbXlpBJ62cvm3
CgdX3HkkUkFEvZCckynLsrEvpMIZ81LIaZmspgAOP8vLSUFHQYbSrWG8a1a0ZU0D
rZ7WcEcSyYUMgxhEGM4CIGOE7OqHL8VdRBez1mZ9raVuQ1LikTCNCIeWe0SPEA6X
FG7CKLAQ8prhA1HZC1FFj+7bR7lDp4j/hnkImG6tto2yfxq3PaJgTJLe9e90pRWb
7meI52aBx6MapD25wmIVu0Y1Pb09sOp2UWk8QUiEbFujbbSqYXE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:11 2025 by rpki-client