Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json)
Hash identifier: QyTTh6qVyPdcNpmhER2sMk6vxWqP/zUrBsNltMC2X7c=
Subject key identifier: 37:C3:2C:ED:F0:4A:9F:60:34:A5:D8:49:16:1F:08:70:BA:32:10:3A
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial: 6D0B2F43F99B6F87E58CCFD99DA0BF6E2B3D3022
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
Manifest number: 2B
Signing time: Fri 31 Jan 2025 15:01:35 +0000
Manifest this update: Fri 31 Jan 2025 14:56:35 +0000
Manifest next update: Mon 03 Feb 2025 17:31:35 +0000
Files and hashes: 1: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=)
2: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=)
3: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=)
4: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=)
5: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=)
6: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=)
7: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: 9NQX1gn2qOMCZlwtylftg8TJdaEbVFebhYpX2IBspvI=)
8: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0b:2f:43:f9:9b:6f:87:e5:8c:cf:d9:9d:a0:bf:6e:2b:3d:30:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Validity
Not Before: Jan 31 14:56:35 2025 GMT
Not After : Feb 3 17:31:35 2025 GMT
Subject: CN=37C32CEDF04A9F6034A5D849161F0870BA32103A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:6b:13:03:84:71:13:fd:6a:a8:67:29:26:
01:b9:7e:83:55:e6:b7:09:0d:16:cf:46:97:32:2b:
95:6b:e3:e2:8c:c0:20:c9:96:6f:cc:00:0a:9c:cf:
fb:fc:45:70:20:9b:c3:8e:53:aa:03:7c:9e:20:9d:
b1:7b:be:7f:f6:90:ff:49:1c:1b:27:df:b9:9f:e9:
21:02:af:13:0d:4d:28:38:3b:92:52:37:25:35:3f:
d1:75:05:1e:59:27:84:a2:2b:d9:6a:48:85:54:bf:
bc:45:eb:14:d8:a1:5a:8c:f2:0d:5a:47:f0:d7:69:
85:81:c3:58:69:ce:23:53:3c:48:4b:dc:6e:5d:f0:
87:f0:a3:87:47:4b:13:f8:8a:2f:31:26:82:af:0e:
c8:8f:8c:22:a3:70:11:86:ab:3f:1f:0e:86:94:79:
dd:0d:78:21:1d:13:0b:c7:4c:6a:18:fa:0a:bd:a5:
ec:a7:64:e9:49:1d:c8:84:f0:3f:f1:5b:a6:35:c1:
5b:6f:73:15:10:7f:0b:4c:dc:d1:81:91:13:c8:26:
0d:51:0c:24:b7:6f:dc:49:b6:a7:d5:31:84:eb:ed:
2c:0b:90:5f:42:2a:da:0b:13:e4:ff:ab:3d:8b:d1:
e2:5d:d2:70:d4:e1:1f:9d:5a:cb:6b:84:ea:78:20:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:2C:ED:F0:4A:9F:60:34:A5:D8:49:16:1F:08:70:BA:32:10:3A
X509v3 Authority Key Identifier:
keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:58:dd:00:83:a4:9a:f8:4c:c4:33:2d:39:47:3e:c5:08:
62:ed:15:71:83:0c:af:6d:03:b7:fe:17:3f:ac:4f:eb:56:c2:
7d:84:74:7b:7d:c3:3d:86:0c:ae:ae:3d:89:ef:57:2c:6a:cf:
23:07:19:a1:40:79:2b:7e:6d:38:4f:33:c1:af:65:60:58:d4:
c7:50:29:3a:f0:36:05:7a:52:76:b7:b4:1f:cb:a3:85:07:e0:
3c:a4:3f:05:92:a8:5f:72:62:9a:14:b5:9d:15:6c:56:99:9c:
b6:50:d5:47:d9:a7:e2:a0:9c:36:5b:2f:3f:a2:21:4d:c9:00:
3a:6f:22:06:9a:03:1d:20:c5:bf:c3:d4:ec:ab:e7:8f:25:0a:
90:99:d5:df:2b:35:f4:9c:21:7f:6e:d9:3c:7e:17:6e:50:8a:
6c:ef:f9:5f:2c:25:f5:80:f4:40:7c:2f:bd:a0:71:b7:b9:0a:
ed:57:2b:2a:d6:9a:df:1d:8e:d2:82:ce:bb:de:86:b8:cb:90:
19:a8:ac:1c:9f:d4:19:6b:01:3b:9d:c6:a5:65:65:74:f0:8c:
d1:39:42:5b:51:92:a3:b5:d9:ed:77:26:17:ee:46:1c:10:f8:
84:71:85:70:1a:3e:c4:3b:e9:c2:c3:de:7c:89:73:c7:a1:3b:
6d:ab:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:52 2025 by rpki-client