Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json)
Hash identifier: PhoZ7I1ArUHKd+emeLWxF+D8B7FzCuzYgShWO6yhgI0=
Subject key identifier: 55:CE:83:35:91:C3:77:34:77:19:7B:22:EE:A4:FF:A1:1A:51:F7:F8
Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419
Certificate serial: 547EA7E4F93D659E797986D330FCA1C074E9FF3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
Manifest number: 68
Signing time: Wed 29 Jan 2025 21:42:04 +0000
Manifest this update: Wed 29 Jan 2025 21:37:04 +0000
Manifest next update: Sun 02 Feb 2025 06:46:04 +0000
Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: kKiSPmcHDa/5thaoOS2Z2bwp6BLu+C3uIrUKWP8C4qA=)
2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: shl5hzE7A/Tc3LxB68K5+LeHHHNimXXsrSJroYt9mi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7e:a7:e4:f9:3d:65:9e:79:79:86:d3:30:fc:a1:c0:74:e9:ff:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419
Validity
Not Before: Jan 29 21:37:04 2025 GMT
Not After : Feb 2 06:46:04 2025 GMT
Subject: CN=55CE833591C3773477197B22EEA4FFA11A51F7F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:3d:2b:35:41:1f:23:48:d6:4d:84:57:af:
35:52:63:57:de:7c:48:b4:6c:44:fb:87:08:5a:8b:
29:6f:0e:4f:8d:10:a2:f6:48:42:ce:4e:50:c1:4b:
d8:a7:c6:27:2b:5f:90:55:d1:4b:75:13:fd:c0:f5:
c2:1b:3f:6d:5a:f0:fc:47:f7:fc:b1:57:72:97:12:
ee:32:8f:67:f7:ad:65:8d:43:ef:1d:4f:77:3d:f0:
23:07:93:dd:7f:0f:8a:e0:68:e0:5a:ea:be:c8:ab:
7c:6d:47:e8:ef:f3:17:fa:cd:a4:a6:48:eb:91:fa:
28:ee:a0:a7:3a:66:37:64:f8:84:d1:dd:8c:b0:92:
1c:8b:78:27:78:53:d2:4c:5a:c1:83:54:bc:cd:5a:
9d:c6:8e:80:c1:d9:9b:11:fd:87:61:17:1e:2d:51:
2f:1c:5b:23:2a:28:fa:d0:8d:f9:49:22:f4:a9:54:
a2:ab:7d:03:8e:68:08:8d:33:c3:6d:bb:9f:b3:8e:
5c:e2:4d:8b:bb:24:01:bd:2a:bc:8d:05:3c:b1:38:
50:87:2d:81:dc:56:1e:e7:37:22:27:72:72:c2:20:
51:29:6c:bb:4f:3a:4f:7e:35:d1:9b:9b:05:37:91:
f6:44:5e:6b:5a:ef:87:5a:a5:e3:01:39:36:fd:89:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:83:35:91:C3:77:34:77:19:7B:22:EE:A4:FF:A1:1A:51:F7:F8
X509v3 Authority Key Identifier:
keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:c4:a9:f1:a7:c1:6d:e0:51:5f:eb:14:78:51:09:e4:dd:
51:9b:8e:22:0b:ea:ac:73:84:c4:24:89:1b:44:ee:7e:c1:17:
56:5d:e6:96:23:9d:54:df:87:55:cc:5b:49:d7:b2:33:83:dc:
c6:26:2f:ca:6a:05:a7:27:cd:00:d8:29:a2:e6:c0:d4:96:7f:
75:bf:3e:c4:da:3a:a4:05:28:a8:ce:4d:e1:98:9c:48:3a:9d:
9c:74:60:1b:08:37:d0:b3:f5:5d:c5:61:84:3a:b7:8d:79:26:
a0:7e:c2:4f:1d:19:25:12:2e:b4:8a:a4:fd:8f:7c:02:c7:26:
13:a1:b4:08:60:be:2b:05:17:02:c8:b4:c8:d7:76:b3:33:df:
d5:1c:27:c8:a1:c8:db:7a:29:31:ce:26:0b:67:b3:60:df:f0:
e4:5c:34:55:83:f1:e9:8f:8a:8a:68:b1:32:ee:46:8e:c8:3d:
19:72:08:71:da:a7:5f:e4:4b:78:52:6e:5a:08:7a:3a:01:5a:
32:f9:25:85:29:b6:90:f1:a0:be:2b:db:c9:34:11:26:f5:2f:
e4:7f:ea:89:56:4f:8b:3a:c8:43:7c:00:e6:93:93:07:40:5f:
47:92:f4:33:dd:5d:84:03:71:ff:48:0d:9e:74:c6:bf:5b:28:
4e:aa:3e:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVH6n5Pk9ZZ55eYbTMPyhwHTp/zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz
NzVEMDQxOTAeFw0yNTAxMjkyMTM3MDRaFw0yNTAyMDIwNjQ2MDRaMDMxMTAvBgNV
BAMTKDU1Q0U4MzM1OTFDMzc3MzQ3NzE5N0IyMkVFQTRGRkExMUE1MUY3RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLT0rNUEfI0jWTYRXrzVSY1fe
fEi0bET7hwhaiylvDk+NEKL2SELOTlDBS9inxicrX5BV0Ut1E/3A9cIbP21a8PxH
9/yxV3KXEu4yj2f3rWWNQ+8dT3c98CMHk91/D4rgaOBa6r7Iq3xtR+jv8xf6zaSm
SOuR+ijuoKc6Zjdk+ITR3YywkhyLeCd4U9JMWsGDVLzNWp3GjoDB2ZsR/YdhFx4t
US8cWyMqKPrQjflJIvSpVKKrfQOOaAiNM8Ntu5+zjlziTYu7JAG9KryNBTyxOFCH
LYHcVh7nNyIncnLCIFEpbLtPOk9+NdGbmwU3kfZEXmta74dapeMBOTb9ife1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVc6DNZHDdzR3GXsi7qT/oRpR9/gwHwYDVR0j
BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy
REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE
MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw
YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB
QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABAgxKnxp8Ft4FFf6xR4UQnk3VGbjiIL6qxz
hMQkiRtE7n7BF1Zd5pYjnVTfh1XMW0nXsjOD3MYmL8pqBacnzQDYKaLmwNSWf3W/
PsTaOqQFKKjOTeGYnEg6nZx0YBsIN9Cz9V3FYYQ6t415JqB+wk8dGSUSLrSKpP2P
fALHJhOhtAhgvisFFwLItMjXdrMz39UcJ8ihyNt6KTHOJgtns2Df8ORcNFWD8emP
ioposTLuRo7IPRlyCHHap1/kS3hSbloIejoBWjL5JYUptpDxoL4r28k0ESb1L+R/
6olWT4s6yEN8AOaTkwdAX0eS9DPdXYQDcf9IDZ50xr9bKE6qPmg=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:58 2025 by rpki-client