Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json)
Hash identifier: hRUKT3y0SyVZzynJf5jxBtAqqb03X8uQoL2YR5yrQpA=
Subject key identifier: E3:7B:41:E2:64:FD:9C:6A:E5:D5:09:45:C6:6F:E2:63:32:27:6D:36
Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055
Certificate serial: 7E479D26FE762E1171187620C0B8C82B1645A11B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
Manifest number: 8E
Signing time: Wed 29 Jan 2025 16:02:03 +0000
Manifest this update: Wed 29 Jan 2025 15:57:03 +0000
Manifest next update: Sun 02 Feb 2025 00:01:03 +0000
Files and hashes: 1: 3135372e32302e39322e302f32332d3234203d3e20313532343037.roa (hash: MU3QX9wOyN5MJ5+2Sse/wz/eRIZjpwZUwSSKtJec7ic=)
2: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: lBlEEgDeYBlrkzMLVzCtIivAsFwpddk11PPwEPuLF2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:47:9d:26:fe:76:2e:11:71:18:76:20:c0:b8:c8:2b:16:45:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055
Validity
Not Before: Jan 29 15:57:03 2025 GMT
Not After : Feb 2 00:01:03 2025 GMT
Subject: CN=E37B41E264FD9C6AE5D50945C66FE26332276D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:d5:8f:30:7f:59:7e:8d:d7:ae:28:81:33:
76:18:bd:0a:f7:b7:d0:74:15:84:96:7f:76:76:fe:
4d:c3:87:0b:fd:d6:64:e1:73:c5:00:8d:90:c8:c9:
90:17:54:93:e5:26:29:ac:a1:51:c2:f7:6c:d3:aa:
e2:c3:78:6a:31:fd:be:53:cb:eb:61:1b:69:4d:ca:
59:e8:30:8f:c5:44:2f:8b:6b:b0:ac:2f:3a:02:ff:
30:2f:80:8d:c8:0b:e4:dc:37:87:d8:e0:64:73:3e:
e1:c4:d1:4b:0c:e8:02:a7:65:de:22:4f:d0:2d:f4:
60:cc:95:90:37:a5:f9:cc:c6:f9:e9:3e:d0:14:82:
57:89:e5:15:11:07:93:f4:53:89:65:23:c5:6e:3e:
e3:d5:18:d7:61:35:61:9b:9a:76:c1:01:d3:d3:ee:
40:2d:39:61:12:ff:29:9b:8f:7c:63:62:11:70:7f:
a8:b0:a5:24:9c:c0:6d:5b:df:3b:4f:c3:99:87:8a:
e1:4f:bb:e4:3f:f7:e5:1d:48:bd:c9:d4:19:48:45:
a7:e8:af:a5:ab:12:48:e7:69:32:63:fb:66:1b:9b:
f1:4d:20:b9:6c:26:5e:13:e7:8b:2c:05:c6:f9:a7:
b0:6a:55:2b:dc:fd:86:76:14:a7:6c:4b:60:43:32:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7B:41:E2:64:FD:9C:6A:E5:D5:09:45:C6:6F:E2:63:32:27:6D:36
X509v3 Authority Key Identifier:
keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:e6:2a:66:8f:3f:8e:0a:90:9c:87:3d:24:59:3d:20:6a:
e7:9a:57:bc:b9:0a:fa:0a:38:1c:a6:12:25:22:3e:61:0f:62:
6e:4d:49:df:29:16:6c:f8:e8:94:1e:0e:df:14:bb:8f:b3:1e:
19:13:85:2f:4f:62:55:b4:9a:10:db:1e:e6:25:26:2b:eb:43:
a9:7c:e4:bd:eb:3b:ef:0f:b1:6c:ef:a6:b6:8a:fb:ce:25:5e:
a9:2e:15:59:ed:e6:3a:7f:e2:b8:d6:de:cd:a2:75:14:a0:63:
9f:98:98:0b:c1:47:4a:34:38:45:3e:83:da:9e:42:b5:0a:01:
6d:de:b6:35:4a:7e:05:13:ff:e2:b8:6f:c7:a2:bf:33:d7:41:
57:87:97:da:9a:98:7c:89:4d:b9:77:dd:f8:99:0a:e9:75:9c:
1a:cd:c4:1d:7e:f0:3d:53:52:3b:21:a1:6d:5c:85:da:f7:df:
34:a0:42:35:27:88:1c:68:d2:3a:c1:fb:13:82:06:0f:e2:53:
8e:a1:bd:a9:3a:d6:3c:e8:9c:35:e3:df:2a:9b:4b:23:0b:47:
bf:b0:23:3a:eb:88:60:ac:45:c7:8d:13:bd:2b:e9:e6:dc:4c:
c4:55:64:2a:29:7e:89:92:a2:0a:4d:ba:9f:fa:6d:9c:f2:7b:
43:b8:38:87
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfkedJv52LhFxGHYgwLjIKxZFoRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5
MkZGRTA1NTAeFw0yNTAxMjkxNTU3MDNaFw0yNTAyMDIwMDAxMDNaMDMxMTAvBgNV
BAMTKEUzN0I0MUUyNjRGRDlDNkFFNUQ1MDk0NUM2NkZFMjYzMzIyNzZEMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91dWPMH9Zfo3XriiBM3YYvQr3
t9B0FYSWf3Z2/k3Dhwv91mThc8UAjZDIyZAXVJPlJimsoVHC92zTquLDeGox/b5T
y+thG2lNylnoMI/FRC+La7CsLzoC/zAvgI3IC+TcN4fY4GRzPuHE0UsM6AKnZd4i
T9At9GDMlZA3pfnMxvnpPtAUgleJ5RURB5P0U4llI8VuPuPVGNdhNWGbmnbBAdPT
7kAtOWES/ymbj3xjYhFwf6iwpSScwG1b3ztPw5mHiuFPu+Q/9+UdSL3J1BlIRafo
r6WrEkjnaTJj+2Ybm/FNILlsJl4T54ssBcb5p7BqVSvc/YZ2FKdsS2BDMqTPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU43tB4mT9nGrl1QlFxm/iYzInbTYwHwYDVR0j
BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG
QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG
RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh
OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2
MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH295ipmjz+OCpCchz0kWT0gaueaV7y5CvoK
OBymEiUiPmEPYm5NSd8pFmz46JQeDt8Uu4+zHhkThS9PYlW0mhDbHuYlJivrQ6l8
5L3rO+8PsWzvpraK+84lXqkuFVnt5jp/4rjW3s2idRSgY5+YmAvBR0o0OEU+g9qe
QrUKAW3etjVKfgUT/+K4b8eivzPXQVeHl9qamHyJTbl33fiZCul1nBrNxB1+8D1T
UjshoW1chdr33zSgQjUniBxo0jrB+xOCBg/iU46hvak61jzonDXj3yqbSyMLR7+w
IzrriGCsRceNE70r6ebcTMRVZCopfomSogpNup/6bZzye0O4OIc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:42 2025 by rpki-client