Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json)
Hash identifier: SJ1U50fTaaUqIBTuBlnk54uzm7x+G8PE6lJlee2ZHZ8=
Subject key identifier: 91:4D:1B:3C:35:B2:DC:05:78:F8:00:42:6E:F6:09:74:DB:5C:3F:08
Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F
Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F
Certificate serial: 675334729D435728BC5F9D5E71D63539F5EBED32
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
Manifest number: 01D1
Signing time: Thu 30 Jan 2025 04:12:03 +0000
Manifest this update: Thu 30 Jan 2025 04:07:03 +0000
Manifest next update: Sun 02 Feb 2025 07:19:03 +0000
Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: pQ+D2QBfhseTEizpdJd6EGd6/tN54tu0I/ikw2jnymk=)
2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: sLjEyNLP44oLLTNBz1jIEt6iKSNqyKrmkOKLSr9k0lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:53:34:72:9d:43:57:28:bc:5f:9d:5e:71:d6:35:39:f5:eb:ed:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F
Validity
Not Before: Jan 30 04:07:03 2025 GMT
Not After : Feb 2 07:19:03 2025 GMT
Subject: CN=914D1B3C35B2DC0578F800426EF60974DB5C3F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:a5:3e:52:a3:00:09:af:35:51:74:ce:b9:
ea:0d:33:55:b9:ab:a4:52:80:e0:3b:8b:a0:f4:6b:
ce:ca:aa:06:9c:16:7b:c6:98:24:82:b2:35:e3:e7:
d2:3a:47:f0:91:91:be:0d:62:39:44:f8:b7:be:32:
cb:b7:45:13:9b:9a:63:1d:39:44:34:a7:bf:34:a6:
04:c0:78:a8:d8:fa:ed:3c:db:60:97:c1:7b:63:13:
25:cc:10:d1:30:00:2a:25:e2:a3:09:4e:33:f4:5f:
96:fb:5b:ed:d0:fb:90:7e:62:71:5b:2b:f8:a1:6d:
d3:f4:52:f2:48:67:4b:c3:20:f3:f4:34:5f:06:a5:
2d:0a:33:e2:b0:97:57:26:99:fe:06:e0:13:13:ab:
9c:d5:d6:43:e0:2b:16:50:df:d7:c2:9a:75:14:94:
48:cf:de:9c:50:69:d6:84:c0:fc:41:fa:72:cf:3d:
63:62:c5:58:0d:b8:a1:32:81:71:fc:36:e4:f6:6b:
98:b1:11:f0:48:4c:a4:4d:a2:23:68:7c:2c:a2:13:
04:34:9d:f8:ac:39:4a:eb:06:25:e3:28:04:37:bf:
04:72:e7:5f:de:6e:eb:a9:ca:25:f7:10:ba:c3:f8:
ad:31:bd:74:76:6b:6e:81:59:e8:27:d7:29:de:ce:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4D:1B:3C:35:B2:DC:05:78:F8:00:42:6E:F6:09:74:DB:5C:3F:08
X509v3 Authority Key Identifier:
keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0e:5a:e8:ce:4a:11:0a:8b:d6:e5:28:44:51:8f:52:14:c5:
66:27:24:6b:8e:1c:76:a5:b8:ba:f2:8b:b1:0b:be:76:69:bc:
07:c6:90:af:80:a9:2f:e9:6c:ad:e7:e7:7f:d3:21:8f:74:d7:
ec:02:81:3c:0d:1c:35:12:d6:15:42:d3:f8:eb:9c:0e:33:26:
ed:00:b8:90:b8:dd:6c:8a:81:70:7e:8a:ce:e7:42:60:c8:91:
ca:50:35:64:18:c5:06:82:16:dd:bd:08:4a:d7:3c:98:c5:1c:
c7:81:c8:80:1f:7e:28:95:a4:38:0b:77:35:2a:0b:e2:7d:09:
d3:a3:a9:be:97:65:a2:dc:76:94:ae:cd:60:fc:e3:23:9c:cc:
4a:61:d3:34:8c:c7:b1:97:18:0f:05:bc:6e:be:17:c1:42:11:
d0:e2:58:b2:25:1f:aa:8e:cc:21:29:54:ba:05:3c:b5:4e:94:
ea:16:69:23:a8:52:c7:85:6f:1a:45:0c:e9:34:65:51:66:34:
24:39:b9:20:fe:28:bc:7d:41:60:0f:82:24:cc:ee:f6:4a:c4:
5a:fa:21:00:7b:72:7b:b9:02:52:30:c8:34:6b:eb:21:ab:22:
19:73:1d:ca:d6:b2:f6:19:4e:64:03:b5:bf:20:e9:c2:16:8b:
69:6d:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:40 2025 by rpki-client