Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json)
Hash identifier: mg/B/14EGN6cHgcM8XiJaiRdFpMACr5utDw+Ok7FMgA=
Subject key identifier: 58:06:C4:E9:4A:AC:AB:38:E7:0D:FE:03:1F:CF:C5:85:EB:60:EC:DB
Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Certificate serial: 594B0BBCC72114F7C8E9FC1352B7772563563FF2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
Manifest number: 0130
Signing time: Thu 30 Jan 2025 08:40:36 +0000
Manifest this update: Thu 30 Jan 2025 08:35:36 +0000
Manifest next update: Sun 02 Feb 2025 12:01:36 +0000
Files and hashes: 1: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: eZAYxd6L3gcawpUsNUZHcGMpLOHOcemzKRHwA+Jbass=)
2: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=)
3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4b:0b:bc:c7:21:14:f7:c8:e9:fc:13:52:b7:77:25:63:56:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Validity
Not Before: Jan 30 08:35:36 2025 GMT
Not After : Feb 2 12:01:36 2025 GMT
Subject: CN=5806C4E94AACAB38E70DFE031FCFC585EB60ECDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:06:a4:1a:e1:6f:5b:36:72:f5:20:21:02:
93:41:24:cf:bf:ee:70:9b:36:91:dd:86:86:1f:55:
1a:c6:5b:7f:1b:45:94:b3:18:de:98:68:52:61:10:
a1:5c:bd:d2:38:d8:fe:e0:c4:fe:64:45:54:ac:4a:
20:f3:a5:40:aa:08:12:03:bc:2d:52:b8:76:6c:99:
78:c7:9f:d9:3a:0a:15:2f:a5:90:67:89:f1:e5:51:
da:23:74:1c:4f:5f:24:94:26:2f:36:b5:26:ec:64:
a8:72:8f:2f:e9:0a:ea:5f:f6:63:b1:df:02:a8:74:
29:5e:2d:e7:86:c4:67:4d:3d:42:cd:43:b0:1f:81:
ad:df:cc:8f:57:a7:f9:1b:49:cd:d0:16:82:40:cc:
77:98:9b:37:98:6e:04:2b:13:da:06:17:89:44:10:
8d:cc:7b:d3:86:7a:22:73:4a:ab:9f:da:f4:c3:8e:
0f:60:4f:61:a3:94:e4:a4:43:47:a4:6a:39:08:0c:
77:7e:4f:a4:ad:e6:ca:1a:e6:6d:c1:4f:09:e0:da:
85:80:b4:e1:40:af:48:52:6a:d0:02:2d:48:6e:49:
ac:c9:4a:8c:6b:e2:a2:4b:d0:34:e4:b0:d9:80:57:
c6:e5:f5:63:de:fa:6c:80:ce:e3:47:3d:fd:42:76:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:C4:E9:4A:AC:AB:38:E7:0D:FE:03:1F:CF:C5:85:EB:60:EC:DB
X509v3 Authority Key Identifier:
keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9d:49:f0:7e:ae:2d:2c:c5:ae:66:1f:15:06:c0:6f:a9:4b:
23:f6:9d:7f:ed:82:3c:f6:0f:ec:0f:e0:e8:a4:f8:dd:2b:7c:
ce:7a:a6:1e:e6:74:11:26:b6:20:70:15:f3:15:62:ce:85:07:
29:5d:e5:29:63:f2:88:20:77:ba:e1:a9:6f:28:21:b4:ef:b8:
b6:16:68:62:e7:27:94:65:d6:04:4a:c7:a5:6c:7c:da:b2:db:
aa:0f:1e:95:59:27:85:5b:36:9c:2e:e7:63:bc:a9:13:d0:e8:
02:02:3f:12:0e:bc:0d:4b:b3:e9:bb:a2:0a:4b:ac:c8:b8:06:
74:31:57:a6:35:77:61:36:0c:50:02:a2:10:50:0a:00:05:65:
dc:1f:89:80:92:11:56:a4:60:19:7c:59:98:87:ff:c6:f5:12:
32:e5:d7:d4:72:4c:76:4f:07:b1:f6:10:6f:05:c9:ae:7e:39:
36:07:51:fc:ea:95:95:c0:e8:e2:49:fc:99:25:1e:36:b9:bf:
18:30:00:47:ac:2e:75:4d:6c:46:50:10:f7:4b:d4:01:f6:55:
0e:80:3e:64:ba:21:10:3d:8b:e4:f7:1b:d3:e1:a3:e6:8f:46:
2f:c9:5b:9d:73:82:79:c7:91:c5:00:b1:fb:62:40:36:d8:8d:
82:43:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:17 2025 by rpki-client