
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json)
Hash identifier: f5+iHqC0dM+VJKuZK1qcNL+Lap6RsBiVmjG2lHenaX4=
Subject key identifier: C3:4F:A5:74:B5:C9:01:F3:C0:32:65:DB:55:F0:DF:5D:B9:76:B1:35
Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA
Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA
Certificate serial: 7EE0421F5F99605E1E9F210B0497A83313152599
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
Manifest number: 0179
Signing time: Thu 30 Jan 2025 23:21:19 +0000
Manifest this update: Thu 30 Jan 2025 23:16:19 +0000
Manifest next update: Mon 03 Feb 2025 07:08:19 +0000
Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: NAG8Cq6jqem216v83nfIrK7PcSaTzBTt0cxNCTNVNEo=)
2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: yfirY/IdmmUBXQP+agxLPC5R2mzKmb/7B1nbgYo1Od4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e0:42:1f:5f:99:60:5e:1e:9f:21:0b:04:97:a8:33:13:15:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA
Validity
Not Before: Jan 30 23:16:19 2025 GMT
Not After : Feb 3 07:08:19 2025 GMT
Subject: CN=C34FA574B5C901F3C03265DB55F0DF5DB976B135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:53:59:12:16:66:ff:72:32:a0:95:50:f5:
eb:16:b8:cb:51:6f:95:90:97:9d:cd:ab:dd:12:79:
ee:6c:4b:03:d2:61:f6:e7:f4:6f:df:10:82:e4:d4:
b8:1c:e4:92:0e:09:cc:0f:3b:30:26:84:d7:a6:8d:
e0:4f:49:ea:46:f2:a8:44:d3:12:fb:3d:11:f6:61:
67:8a:29:43:b8:e7:ab:bf:88:f6:93:45:89:5e:c4:
65:95:d1:b5:f5:6c:77:5c:e3:cc:96:50:f7:b3:04:
8d:c8:b5:a8:95:93:a6:64:04:68:e3:6d:66:26:48:
77:78:e9:3a:59:4d:b3:3c:9f:4a:af:0b:b8:ef:6d:
ce:6a:d7:8f:49:f1:17:d3:ff:60:a9:9d:0d:da:c5:
a8:0c:8c:bd:d6:3b:7b:02:41:1c:d0:d6:62:a0:d3:
c0:d2:1a:99:6f:9d:5b:7e:c6:86:d9:0b:2e:9a:8d:
00:05:c3:f9:51:86:63:cf:58:a4:26:96:92:90:a1:
84:05:3a:34:01:a5:9d:67:b5:7d:00:7d:ce:1b:a4:
54:ad:dd:78:48:39:55:ef:95:af:85:7c:d8:e9:3f:
64:54:60:43:0b:9f:96:e2:41:5f:b0:ad:03:ac:77:
33:f0:5b:5b:59:59:31:bc:70:3b:2e:a9:26:93:ed:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4F:A5:74:B5:C9:01:F3:C0:32:65:DB:55:F0:DF:5D:B9:76:B1:35
X509v3 Authority Key Identifier:
keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:26:e3:4c:9f:e7:f1:40:e0:07:bb:08:fb:1c:9a:64:86:af:
50:2d:ae:ea:da:3d:a6:e8:21:77:83:63:12:59:68:e5:25:f7:
5c:6e:f7:43:d6:c6:a0:f8:45:19:55:37:e2:91:be:cc:d9:62:
36:88:05:b9:2a:f9:9c:da:c7:c4:38:fc:79:32:5a:29:49:31:
55:39:db:f6:a5:9c:66:46:07:a1:c8:ee:7b:5d:a3:72:11:d9:
f4:11:f4:07:0b:83:e9:42:87:b5:b3:5c:71:34:50:52:39:8a:
db:04:d2:bf:f9:7e:5d:61:47:df:7c:d0:e4:ff:8b:02:60:64:
7e:13:8c:ca:5b:10:c4:a6:69:9c:c5:33:c6:06:de:34:e2:54:
06:b7:fd:76:19:f5:8f:90:96:2e:a3:bb:81:69:30:68:86:70:
3d:86:d7:01:10:dd:7d:f9:ec:22:b6:41:df:5e:de:ff:5b:e8:
c6:3b:1e:be:5b:1b:04:3b:58:0b:69:74:b9:fa:3b:97:1e:18:
d9:a6:c3:c9:a4:72:3a:0c:75:90:c0:24:18:aa:b2:31:13:b9:
1d:7f:3d:ee:00:05:a6:c6:a6:6e:d6:b1:40:21:4a:bf:a0:e6:
fb:97:f9:62:47:46:38:d9:b9:d1:e1:66:dc:72:27:a4:b1:40:
fa:04:ef:ba
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfuBCH1+ZYF4enyELBJeoMxMVJZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3
RkIwQ0VDQTAeFw0yNTAxMzAyMzE2MTlaFw0yNTAyMDMwNzA4MTlaMDMxMTAvBgNV
BAMTKEMzNEZBNTc0QjVDOTAxRjNDMDMyNjVEQjU1RjBERjVEQjk3NkIxMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2FNZEhZm/3IyoJVQ9esWuMtR
b5WQl53Nq90See5sSwPSYfbn9G/fEILk1Lgc5JIOCcwPOzAmhNemjeBPSepG8qhE
0xL7PRH2YWeKKUO456u/iPaTRYlexGWV0bX1bHdc48yWUPezBI3ItaiVk6ZkBGjj
bWYmSHd46TpZTbM8n0qvC7jvbc5q149J8RfT/2CpnQ3axagMjL3WO3sCQRzQ1mKg
08DSGplvnVt+xobZCy6ajQAFw/lRhmPPWKQmlpKQoYQFOjQBpZ1ntX0Afc4bpFSt
3XhIOVXvla+FfNjpP2RUYEMLn5biQV+wrQOsdzPwW1tZWTG8cDsuqSaT7cFRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUw0+ldLXJAfPAMmXbVfDfXbl2sTUwHwYDVR0j
BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4
QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw
Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh
NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2
MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFMm40yf5/FA4Ae7CPscmmSGr1AtruraPabo
IXeDYxJZaOUl91xu90PWxqD4RRlVN+KRvszZYjaIBbkq+Zzax8Q4/HkyWilJMVU5
2/alnGZGB6HI7ntdo3IR2fQR9AcLg+lCh7WzXHE0UFI5itsE0r/5fl1hR9980OT/
iwJgZH4TjMpbEMSmaZzFM8YG3jTiVAa3/XYZ9Y+Qli6ju4FpMGiGcD2G1wEQ3X35
7CK2Qd9e3v9b6MY7Hr5bGwQ7WAtpdLn6O5ceGNmmw8mkcjoMdZDAJBiqsjETuR1/
Pe4ABabGpm7WsUAhSr+g5vuX+WJHRjjZudHhZtxyJ6SxQPoE77o=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:17 2025 by rpki-client