Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json)
Hash identifier: qrL8sSggGjfY4Hv3FmlRtV510YwjTM/NIx4FFXDXBks=
Subject key identifier: 42:82:58:8F:CC:0B:B7:A2:C6:21:79:DF:9A:0B:17:E7:6E:3C:11:3D
Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90
Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990
Certificate serial: 342BB8C04AB436FFEFFDD93BA6582E0FE86C9275
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
Manifest number: A3
Signing time: Wed 29 Jan 2025 20:00:57 +0000
Manifest this update: Wed 29 Jan 2025 19:55:57 +0000
Manifest next update: Sun 02 Feb 2025 06:13:57 +0000
Files and hashes: 1: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=)
2: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: O5ACFmjMaVyXc6ixZ9LXUPdnAlJFk8Sfi5yvmpRUGa4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:2b:b8:c0:4a:b4:36:ff:ef:fd:d9:3b:a6:58:2e:0f:e8:6c:92:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990
Validity
Not Before: Jan 29 19:55:57 2025 GMT
Not After : Feb 2 06:13:57 2025 GMT
Subject: CN=4282588FCC0BB7A2C62179DF9A0B17E76E3C113D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:ec:8a:d8:9a:d2:63:85:2b:33:9d:16:13:
93:e9:a5:3f:db:62:42:2a:86:e6:e4:34:51:ee:c7:
98:5f:ad:bd:36:51:d0:45:f2:ee:fb:13:ce:23:77:
80:aa:78:80:5e:5d:c2:15:76:a3:50:c0:33:da:fd:
a3:05:b6:8c:96:c7:20:da:c9:c3:b5:78:c7:3e:05:
49:22:ca:71:1f:fa:f5:d7:e7:a1:76:3c:1b:bc:e9:
7b:e3:73:9e:5c:83:2d:8a:06:15:88:f1:0c:e8:1d:
5c:73:61:8d:b7:2e:d1:fd:61:db:66:4e:cf:de:1f:
26:21:9a:2e:74:38:67:11:cd:c0:d2:70:01:fc:bd:
1f:1c:03:5c:2c:4b:3d:2e:bb:0d:0c:23:64:70:4b:
dc:ec:46:36:a6:8e:e9:71:b1:45:37:27:bc:32:3e:
32:d1:21:60:ab:ad:36:ef:d8:b0:24:a8:50:fc:61:
85:ce:b8:d8:4e:8a:93:9a:b9:44:55:09:80:08:00:
1b:d5:b5:15:ea:1f:4d:d0:88:cc:cf:05:18:d1:99:
77:2a:5b:71:7d:44:8e:a9:62:07:c0:26:ac:fe:a6:
69:e1:40:28:af:7c:de:da:f5:91:a5:e9:7a:9f:d6:
1b:c8:e6:51:e8:28:a0:8b:27:ce:db:7f:31:72:3c:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:58:8F:CC:0B:B7:A2:C6:21:79:DF:9A:0B:17:E7:6E:3C:11:3D
X509v3 Authority Key Identifier:
keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0d:d0:ae:67:41:f2:cf:77:d6:75:97:c8:4e:76:10:4f:ba:
6c:26:e5:99:d3:4e:69:10:26:6f:df:ac:88:41:ba:43:28:9c:
33:86:fa:f4:cc:ba:20:5b:4e:f4:7b:7b:cb:6d:de:9a:f9:74:
ed:65:76:1e:c3:b3:61:b1:f0:4f:38:bb:08:ca:cc:7f:54:0f:
0e:2a:7c:57:81:94:f8:7a:50:94:b4:64:05:28:ea:e5:36:ea:
33:f5:6d:dd:3a:e6:3f:df:8b:94:d4:80:ca:91:23:21:ef:45:
62:b5:a0:ef:fa:ff:80:1e:a2:1c:39:63:e0:78:3c:c2:69:5b:
7f:e4:ee:11:3e:b1:1b:32:e5:ce:2e:08:7a:90:89:92:f8:7b:
34:28:89:31:32:65:5d:b3:7c:0d:c8:be:c0:c2:2d:77:d3:c2:
72:7c:db:92:8e:24:77:62:86:e2:82:94:df:c5:90:94:7e:7f:
46:68:3c:99:68:89:7c:dc:a2:78:3c:0a:f1:a2:2c:ca:40:a4:
31:74:c8:d9:2e:77:f8:1c:6d:a3:ca:36:c9:d5:0b:77:49:82:
f9:29:20:93:aa:51:4c:03:ec:4d:08:57:34:8a:7e:5d:82:2e:
f9:f8:9d:14:34:a4:a3:2f:a9:ef:7e:99:61:87:11:ee:ed:7f:
29:16:3d:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNCu4wEq0Nv/v/dk7plguD+hsknUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD
MEFBQjk5MDAeFw0yNTAxMjkxOTU1NTdaFw0yNTAyMDIwNjEzNTdaMDMxMTAvBgNV
BAMTKDQyODI1ODhGQ0MwQkI3QTJDNjIxNzlERjlBMEIxN0U3NkUzQzExM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXuyK2JrSY4UrM50WE5PppT/b
YkIqhubkNFHux5hfrb02UdBF8u77E84jd4CqeIBeXcIVdqNQwDPa/aMFtoyWxyDa
ycO1eMc+BUkiynEf+vXX56F2PBu86Xvjc55cgy2KBhWI8QzoHVxzYY23LtH9Ydtm
Ts/eHyYhmi50OGcRzcDScAH8vR8cA1wsSz0uuw0MI2RwS9zsRjamjulxsUU3J7wy
PjLRIWCrrTbv2LAkqFD8YYXOuNhOipOauURVCYAIABvVtRXqH03QiMzPBRjRmXcq
W3F9RI6pYgfAJqz+pmnhQCivfN7a9ZGl6Xqf1hvI5lHoKKCLJ87bfzFyPHLhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQoJYj8wLt6LGIXnfmgsX5248ET0wHwYDVR0j
BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF
MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB
Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj
ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy
RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADUN0K5nQfLPd9Z1l8hOdhBPumwm5ZnTTmkQ
Jm/frIhBukMonDOG+vTMuiBbTvR7e8tt3pr5dO1ldh7Ds2Gx8E84uwjKzH9UDw4q
fFeBlPh6UJS0ZAUo6uU26jP1bd065j/fi5TUgMqRIyHvRWK1oO/6/4Aeohw5Y+B4
PMJpW3/k7hE+sRsy5c4uCHqQiZL4ezQoiTEyZV2zfA3IvsDCLXfTwnJ825KOJHdi
huKClN/FkJR+f0ZoPJloiXzcong8CvGiLMpApDF0yNkud/gcbaPKNsnVC3dJgvkp
IJOqUUwD7E0IVzSKfl2CLvn4nRQ0pKMvqe9+mWGHEe7tfykWPXc=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:36 2025 by rpki-client