Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json)
Hash identifier: Q17AHl5JpRt7epb9crrUvze0UrjJ+iZyceHmeNz+auk=
Subject key identifier: E0:1F:9F:CC:33:70:67:6E:E3:6C:5D:24:62:2D:D3:67:68:CE:0F:30
Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Certificate serial: 575736F461C7496927FB6ADA5B7937966CB51FAB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
Manifest number: 037E
Signing time: Fri 31 Jan 2025 11:11:16 +0000
Manifest this update: Fri 31 Jan 2025 11:06:16 +0000
Manifest next update: Mon 03 Feb 2025 18:22:16 +0000
Files and hashes: 1: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=)
2: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: U6QRDDeYie232XrbfMpDP+THe3aKMp8TC3m/oWwbtng=)
3: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=)
4: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:57:36:f4:61:c7:49:69:27:fb:6a:da:5b:79:37:96:6c:b5:1f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Validity
Not Before: Jan 31 11:06:16 2025 GMT
Not After : Feb 3 18:22:16 2025 GMT
Subject: CN=E01F9FCC3370676EE36C5D24622DD36768CE0F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:ad:25:24:d5:60:0c:42:ad:72:58:2d:8b:
23:e4:f1:88:94:72:06:ae:ef:72:55:fb:6a:60:eb:
18:89:f6:5d:2c:fa:b4:69:5c:7c:ba:be:99:ed:d8:
40:76:22:29:bd:e9:34:de:40:75:90:4c:cc:5f:be:
e4:e0:f4:8e:3f:bb:71:ac:89:7a:7d:37:b9:17:47:
d4:1a:bd:1c:ee:19:ad:a2:89:1e:26:db:b9:ca:83:
f7:7b:e2:74:6b:fc:02:4c:b6:28:45:ef:99:fb:ea:
c1:08:c0:1d:3a:31:a5:8d:4f:90:79:9c:02:2d:87:
84:6e:6e:62:e7:b4:86:0e:2b:3e:97:bf:cd:d6:4d:
52:de:bc:9f:e4:14:73:6c:96:4b:37:19:9a:7c:6f:
cb:4e:c1:c7:19:ac:0e:b2:1f:d9:e7:0f:37:de:81:
c5:17:d5:c8:d1:2d:73:a7:fc:53:1d:f2:28:d4:b7:
96:e6:c9:7a:de:c3:65:5a:25:07:b3:38:89:33:f8:
ea:78:d5:ba:59:74:24:69:69:56:00:a5:12:a6:06:
2c:52:13:6f:19:08:48:85:83:78:54:5f:9e:18:9c:
ba:ba:a3:7b:e8:4b:30:19:bb:56:12:2e:fb:af:f3:
09:78:cc:92:07:35:84:66:f0:bd:e1:c4:83:35:10:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:9F:CC:33:70:67:6E:E3:6C:5D:24:62:2D:D3:67:68:CE:0F:30
X509v3 Authority Key Identifier:
keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:58:cb:fb:a4:03:d0:c1:90:ce:4c:cf:1e:2f:0c:7a:25:
dc:44:32:3a:2f:54:f4:8e:be:f1:a9:f4:15:1c:1d:bf:e6:ba:
2c:95:c4:da:ba:2f:a2:10:f3:e7:0a:d1:86:d0:7a:02:d9:b3:
28:11:ed:0a:dd:38:92:cd:a8:25:57:1e:18:48:8d:0c:76:21:
85:d2:bb:db:e1:7a:3a:bb:a6:98:89:71:95:e5:d5:56:0e:9b:
db:72:2a:97:52:0c:49:32:4c:21:9f:57:e7:07:c3:f0:e9:36:
75:7c:0b:ad:6a:28:e2:54:40:b4:a9:47:2e:5e:8f:76:55:d9:
27:ef:7e:3a:27:41:3f:22:0c:3b:38:59:e7:22:ad:eb:77:b3:
88:64:e7:39:c4:26:b4:7b:4f:56:e9:f3:69:7b:b9:35:5e:8f:
16:bc:75:9e:59:78:eb:95:de:29:66:d4:9b:e3:80:f8:87:8e:
51:0e:ca:50:05:f6:86:f2:e1:c9:21:8d:a4:d2:14:92:0f:5e:
1f:7c:06:ee:83:ed:83:96:b8:53:c5:da:5a:58:3c:51:92:24:
12:76:af:26:29:e5:37:bd:4f:fd:71:da:15:b5:01:2d:08:8e:
38:ca:c0:40:34:f5:42:86:ce:a2:bb:71:42:a8:d6:bf:41:22:
6c:6c:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:30 2025 by rpki-client