Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft
File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json)
Hash identifier: vJu34tDirGl/SXM5kRMuOez5pLsqx93Zlcm8vYGyZsU=
Subject key identifier: 8A:BD:3D:81:BC:23:E3:A8:22:1B:89:00:45:18:61:38:DF:06:41:73
Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45
Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145
Certificate serial: 7273B3314A702B2F8D347E4A54036C36BC9C780D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft
Manifest number: 5B
Signing time: Thu 30 Jan 2025 12:20:33 +0000
Manifest this update: Thu 30 Jan 2025 12:15:33 +0000
Manifest next update: Sun 02 Feb 2025 22:17:33 +0000
Files and hashes: 1: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: msYInPIhewKfF1JktnY/UMw+jvBoJqpmGGzHZ8hG+sM=)
2: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: NGJ06HPZPnasggQ7SzYoKC32u86oginffTyP/A+SYes=)
3: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: AGtr53jIPwrIQP7ijk4+cdUWZ6tDTIQGMkK4BbIW1E8=)
4: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: rEiPJnrdrYYlFEBaRzbUD9BJkoKBn51ZZoCL2QKX2fk=)
5: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: DE4nHNca8ayWoDl52eSSRth/7jHheEal78ri52HzLS8=)
6: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: qpoFl5JoTzbSM2hPO0hoJAUaowyf53VlGJf2OUjDyLM=)
7: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: h0Ikm5xLILqHiZgjn6vJMZ/MDEgRmvD05eIzOebsCJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:73:b3:31:4a:70:2b:2f:8d:34:7e:4a:54:03:6c:36:bc:9c:78:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145
Validity
Not Before: Jan 30 12:15:33 2025 GMT
Not After : Feb 2 22:17:33 2025 GMT
Subject: CN=8ABD3D81BC23E3A8221B890045186138DF064173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:68:e8:fb:65:8e:54:3b:a1:8f:e0:34:c1:
b8:ed:94:27:60:82:c9:39:9d:78:27:0f:ba:4b:93:
c1:46:79:74:f0:de:f1:f9:c9:25:d7:95:0c:b0:9c:
78:2e:a2:21:0c:03:e2:c2:82:0e:82:bf:42:7a:ae:
13:67:9e:d0:0d:14:70:71:33:68:2b:28:5d:e6:7a:
7d:08:f9:97:34:5d:f7:15:6f:32:27:a5:db:4e:35:
5d:22:ab:db:d0:29:85:69:b1:cb:98:c2:32:b5:9a:
86:b6:81:9c:13:9a:c1:5c:d3:58:8b:26:7d:ee:9d:
4b:f9:53:97:ca:08:74:98:6d:24:93:c7:0f:c2:e4:
d1:a9:6c:d5:a6:1b:dc:3b:13:e5:ac:31:ac:2f:ef:
8e:6a:7e:ef:c9:e5:83:30:b2:59:8a:af:4c:df:e7:
84:d7:ac:12:9d:ed:50:e8:93:2d:35:c6:52:16:ca:
e0:8f:c4:cc:ee:a2:bf:62:95:be:cc:3e:39:f2:eb:
20:78:46:10:fb:95:4d:b3:27:02:cc:8d:e0:f9:90:
22:61:e6:b0:2b:ee:9e:3a:05:a5:7e:eb:ad:94:c7:
da:8f:4c:fd:b9:fc:10:f6:8e:3b:14:89:13:af:93:
dc:e3:07:64:8e:4b:b1:8b:35:87:a8:f9:2b:7f:e9:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:3D:81:BC:23:E3:A8:22:1B:89:00:45:18:61:38:DF:06:41:73
X509v3 Authority Key Identifier:
keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:45:3e:c7:1f:6a:1e:de:f5:47:28:65:de:f9:f7:ae:8d:
cf:42:72:4c:4e:f7:04:35:d2:01:c8:12:b9:10:cd:8a:67:05:
08:f5:c5:e4:05:cf:64:07:9a:bb:d6:07:e6:9a:5f:5d:1f:36:
e5:0d:62:91:eb:bf:64:29:31:36:e7:d1:5c:a5:21:4a:1e:77:
32:96:14:d2:c4:91:f3:a2:8e:7d:c4:71:f1:8d:5b:55:72:6f:
43:ac:9d:81:c2:0b:49:ff:90:c6:77:84:05:b6:e0:ca:11:81:
5e:e5:cc:73:0e:80:31:a8:9e:21:65:d2:95:08:52:d9:b6:f5:
f7:5c:0e:dc:9e:b7:1b:11:83:a3:17:94:ad:19:e2:00:c5:a5:
be:25:9c:5c:3f:ce:fd:bd:2e:91:7b:e1:09:e0:5a:2b:c5:c3:
79:49:03:b7:4c:3f:92:b9:b8:6b:fc:55:60:f4:7c:5e:b9:36:
a8:08:bc:de:f5:e4:13:b4:f7:31:b5:67:da:c8:48:f0:7e:90:
5c:37:4c:98:b7:c6:33:f8:59:57:bc:a6:00:42:88:1d:35:14:
9a:22:2c:c3:f6:40:93:7d:11:74:9c:58:92:03:ef:da:43:5d:
c5:f3:5c:ea:e4:fa:9d:c4:85:0c:30:bb:c9:e4:6c:92:64:52:
31:12:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:26 2025 by rpki-client