
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json)
Hash identifier: k/UtXNmm34tes87LX+v9w3Rcles4mpO+hpD+wM8+ARM=
Subject key identifier: 23:1E:7E:C1:83:0C:FF:BE:C7:C5:55:24:CF:18:1E:4B:51:47:5B:2D
Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Certificate serial: 255D520EFD41FBD4E55DFD28100D424196BE0166
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
Manifest number: 62
Signing time: Fri 31 Jan 2025 11:30:34 +0000
Manifest this update: Fri 31 Jan 2025 11:25:34 +0000
Manifest next update: Mon 03 Feb 2025 13:56:34 +0000
Files and hashes: 1: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: 9dO8lwfc+q/F+z1UtDPvW8HzYR3RGTrB3KWc3xfY/vU=)
2: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5d:52:0e:fd:41:fb:d4:e5:5d:fd:28:10:0d:42:41:96:be:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Validity
Not Before: Jan 31 11:25:34 2025 GMT
Not After : Feb 3 13:56:34 2025 GMT
Subject: CN=231E7EC1830CFFBEC7C55524CF181E4B51475B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:b8:ae:dd:62:e2:9b:04:b5:63:db:85:f0:
2d:e9:db:98:10:91:92:43:ee:32:69:8b:3c:22:4a:
fa:99:f5:52:02:fd:3f:b9:ae:45:cc:79:03:95:ae:
d9:ee:9c:04:6a:e5:6f:b9:03:9c:d2:41:b0:2f:60:
3c:42:96:80:7c:3d:71:bd:4b:cb:d3:7d:c5:a3:ae:
21:b5:f5:8d:7d:42:c1:7f:38:20:7e:f3:37:b2:71:
8c:d3:aa:a5:8c:08:24:88:46:24:6e:42:d7:8b:87:
e6:f2:2d:de:ac:ed:65:38:02:34:4c:6c:59:55:3c:
dc:73:b9:1f:8c:91:4b:59:f9:b2:21:59:a2:6b:34:
44:74:74:05:11:5a:38:89:03:be:82:7a:76:05:eb:
d2:32:73:5d:e7:76:17:da:0c:ad:4e:24:bf:7b:b2:
3a:ad:f6:bd:f1:c6:03:4f:5c:0e:cd:84:40:f2:e6:
76:a4:f7:b7:fa:89:75:2b:7d:e9:84:3e:0a:ab:c5:
35:73:ba:80:ac:aa:5c:28:a7:ae:8f:70:10:be:d1:
0e:a7:a8:2b:20:8d:ca:ec:44:b6:08:a1:d7:2a:a9:
d3:d5:96:26:2c:e1:05:b0:fd:b7:8c:91:6e:20:bb:
ba:f9:d7:79:8c:41:5c:ba:9a:40:ed:3b:6e:85:00:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:7E:C1:83:0C:FF:BE:C7:C5:55:24:CF:18:1E:4B:51:47:5B:2D
X509v3 Authority Key Identifier:
keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7b:67:67:26:03:3c:58:14:17:89:f4:3b:f0:0e:ed:c3:3d:
c2:06:42:ac:5a:92:65:02:33:86:03:c5:fe:d2:75:f3:aa:7a:
49:2d:f4:d8:f2:f2:96:03:6e:8a:05:34:6d:e1:ee:f4:bd:9f:
3f:71:c0:c1:d6:12:48:63:c7:7f:45:9d:f3:bb:9e:6b:16:c9:
33:fb:f7:58:cd:9f:1c:dc:a6:17:5e:83:c6:c4:d3:78:02:fa:
22:d6:94:da:49:51:19:1f:72:ec:9d:ed:e3:c0:33:30:80:db:
98:fe:55:9f:15:8b:67:74:46:e8:23:bd:a7:da:4b:e5:fa:a2:
78:ba:a3:1f:bb:20:2f:ba:1a:11:c0:fa:31:31:3c:13:c0:27:
c5:c1:c0:1f:97:4a:8d:2d:85:9e:51:21:aa:78:65:a8:3b:45:
2f:ed:4f:6b:d8:a0:34:70:97:07:53:7b:af:aa:a3:62:34:74:
89:10:f0:7e:ed:65:cc:cd:77:b8:09:a0:c6:f1:26:89:73:f3:
e1:7d:7d:ec:42:1e:6d:3d:78:e2:8d:2a:99:1e:4d:b8:ee:29:
79:a7:b0:7e:8c:69:75:cf:dc:07:0b:11:aa:e0:d1:ac:21:9d:
0f:c2:bd:e5:fc:8a:fb:37:8a:55:64:d8:d5:b4:3f:fb:73:fe:
66:21:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:24 2025 by rpki-client