Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft
File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json)
Hash identifier: OaQIUdiqfQ4RpsULcfFri6rRX7NamSOQk6QfL1U6Pzc=
Subject key identifier: AA:D7:9D:C9:53:41:AE:A2:6A:4E:59:CB:63:CF:39:9A:B4:4E:63:53
Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC
Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC
Certificate serial: 2064A2A6350222D0D2B9E7F50F76B53E2E5C33B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft
Manifest number: 98
Signing time: Wed 29 Jan 2025 08:50:58 +0000
Manifest this update: Wed 29 Jan 2025 08:45:58 +0000
Manifest next update: Sat 01 Feb 2025 18:49:58 +0000
Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: ddKvOUO2TDIjo7BHEyi8TdTTBpOlPNC6bLdZJf37XZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:64:a2:a6:35:02:22:d0:d2:b9:e7:f5:0f:76:b5:3e:2e:5c:33:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC
Validity
Not Before: Jan 29 08:45:58 2025 GMT
Not After : Feb 1 18:49:58 2025 GMT
Subject: CN=AAD79DC95341AEA26A4E59CB63CF399AB44E6353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:b2:6c:a3:38:5b:57:7c:b0:4d:85:38:a6:
60:eb:cb:70:76:9d:ad:c7:98:9e:e6:bd:ae:be:de:
43:05:c6:50:63:fe:df:ad:e9:b4:05:8e:ae:0c:85:
0e:bc:79:d8:bf:4c:68:9a:bb:6e:29:ee:c4:25:f3:
ca:5e:f0:c6:77:05:b0:8b:c4:b9:3f:a9:69:84:7d:
74:fa:a2:97:0a:1b:0f:64:fa:b9:54:c6:16:4a:8d:
40:ba:73:e9:8a:23:2c:4b:85:c9:bd:4f:0d:71:0b:
85:de:89:a5:6a:b1:3a:c9:3f:c5:a1:a6:11:7b:11:
37:81:12:f7:d2:0c:4d:fb:66:12:99:9a:77:44:dd:
ad:0b:86:72:c9:1d:70:ff:dc:36:e1:83:2e:2f:26:
ec:b5:30:c8:f9:dc:89:5a:1b:af:9c:ab:e6:e2:a9:
2e:53:d1:e6:58:8b:a4:be:74:83:38:41:cf:50:68:
74:ce:1c:95:9f:54:b5:59:fd:86:08:2a:98:bc:7f:
d7:ea:f4:86:a6:a7:71:da:aa:53:23:f2:ed:9e:e5:
47:94:fd:9d:b7:57:16:cd:df:eb:99:9e:3d:3c:58:
e7:dc:86:a7:67:8f:01:2f:a4:1a:af:18:46:e7:6f:
83:2c:9b:b6:b6:b5:0d:db:d7:07:fb:bb:f5:e6:2a:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:9D:C9:53:41:AE:A2:6A:4E:59:CB:63:CF:39:9A:B4:4E:63:53
X509v3 Authority Key Identifier:
keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:69:de:5a:44:ba:07:7b:b9:91:08:da:7e:44:a6:48:70:eb:
de:ca:2c:df:e4:62:12:80:02:1a:c4:fe:d7:59:0a:e0:41:aa:
2e:c6:e8:25:85:40:c7:af:ee:3b:75:a5:a1:cb:0c:02:8b:26:
43:d2:41:29:a9:0b:99:49:15:df:99:a0:47:91:da:ff:02:a0:
97:00:ee:ef:ae:27:b8:8e:24:46:97:61:fb:a6:e4:e3:6f:d0:
61:dc:5e:3f:f4:b7:be:56:fd:86:42:4f:a8:5c:fd:f8:fb:e8:
31:27:bd:84:41:e5:fa:fa:08:77:f4:72:4d:24:cf:bb:81:4e:
85:52:2b:90:cf:8e:ca:4f:67:7b:08:3a:e6:f6:9b:c6:1d:21:
bd:99:b5:04:47:52:0f:40:15:90:4f:ee:53:45:9f:a1:54:d8:
73:34:d2:42:70:7c:45:49:85:ba:a8:4b:db:e5:1e:be:6a:6b:
99:a9:2c:fa:68:7c:04:2c:de:40:76:9f:46:3d:c5:e8:aa:8b:
98:80:72:f6:01:67:2d:ac:65:70:b4:d3:e6:5a:d9:4c:91:8b:
ff:f9:b2:ef:70:8e:f4:2f:7e:97:b2:49:76:6b:ba:ba:dc:44:
a1:49:4a:70:50:07:1f:fe:5b:c3:31:be:52:63:23:d5:29:12:
54:9c:fe:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIGSipjUCItDSuef1D3a1Pi5cM7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE
NkQ3RjRBQzAeFw0yNTAxMjkwODQ1NThaFw0yNTAyMDExODQ5NThaMDMxMTAvBgNV
BAMTKEFBRDc5REM5NTM0MUFFQTI2QTRFNTlDQjYzQ0YzOTlBQjQ0RTYzNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKbJsozhbV3ywTYU4pmDry3B2
na3HmJ7mva6+3kMFxlBj/t+t6bQFjq4MhQ68edi/TGiau24p7sQl88pe8MZ3BbCL
xLk/qWmEfXT6opcKGw9k+rlUxhZKjUC6c+mKIyxLhcm9Tw1xC4XeiaVqsTrJP8Wh
phF7ETeBEvfSDE37ZhKZmndE3a0LhnLJHXD/3Dbhgy4vJuy1MMj53IlaG6+cq+bi
qS5T0eZYi6S+dIM4Qc9QaHTOHJWfVLVZ/YYIKpi8f9fq9Iamp3HaqlMj8u2e5UeU
/Z23VxbN3+uZnj08WOfchqdnjwEvpBqvGEbnb4Msm7a2tQ3b1wf7u/XmKoqfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqtedyVNBrqJqTlnLY885mrROY1MwHwYDVR0j
BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0
NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3
RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2
NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB
NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALlp3lpEugd7uZEI2n5Epkhw697KLN/kYhKA
AhrE/tdZCuBBqi7G6CWFQMev7jt1paHLDAKLJkPSQSmpC5lJFd+ZoEeR2v8CoJcA
7u+uJ7iOJEaXYfum5ONv0GHcXj/0t75W/YZCT6hc/fj76DEnvYRB5fr6CHf0ck0k
z7uBToVSK5DPjspPZ3sIOub2m8YdIb2ZtQRHUg9AFZBP7lNFn6FU2HM00kJwfEVJ
hbqoS9vlHr5qa5mpLPpofAQs3kB2n0Y9xeiqi5iAcvYBZy2sZXC00+Za2UyRi//5
su9wjvQvfpeySXZrurrcRKFJSnBQBx/+W8MxvlJjI9UpElSc/j4=
-----END CERTIFICATE-----
Generated at Thu May 1 18:01:16 2025 by rpki-client