Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json)
Hash identifier: D9MNIhOpLys6o4TiaTMk+mi8vJZbhWi8MCYm2CS3LeQ=
Subject key identifier: D3:8F:2D:59:EB:6B:36:DE:94:59:FB:17:A9:58:27:0A:DD:85:68:16
Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0
Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0
Certificate serial: 15D521D7959D17E602514E4F7FB272A00B9F3B02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
Manifest number: 25
Signing time: Thu 30 Jan 2025 13:00:02 +0000
Manifest this update: Thu 30 Jan 2025 12:55:02 +0000
Manifest next update: Sun 02 Feb 2025 17:32:02 +0000
Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: UvBExuFU9+4GavC/nLcFTHKlwxNLSgvNJ/x532tUvgo=)
2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d5:21:d7:95:9d:17:e6:02:51:4e:4f:7f:b2:72:a0:0b:9f:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0
Validity
Not Before: Jan 30 12:55:02 2025 GMT
Not After : Feb 2 17:32:02 2025 GMT
Subject: CN=D38F2D59EB6B36DE9459FB17A958270ADD856816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:d4:48:00:a0:5a:0c:5b:81:2f:99:69:d2:
d0:6b:20:b0:3d:38:a3:ef:cb:dc:18:7c:f9:e3:23:
8f:b7:57:b4:d6:a9:df:06:b6:45:d6:74:58:66:fa:
b6:94:e5:9d:c6:0b:3e:f1:0d:a5:45:9e:f3:d5:8c:
6c:e2:72:7f:7e:77:59:9a:5d:d2:b5:f9:0f:32:8f:
11:7b:37:55:ee:1f:87:08:47:46:a5:6d:30:2c:01:
4b:9d:20:fc:44:b6:8e:f1:8a:d8:ae:2e:df:2e:00:
db:a7:9f:9c:88:a1:55:4e:b3:db:2d:87:7a:69:ce:
e0:8d:65:8d:e7:6b:bd:4e:96:78:f6:f9:f0:73:a1:
fc:a0:8c:86:e5:e9:ac:0e:a4:8a:cb:36:2c:e1:ef:
ce:dc:16:97:33:4c:50:15:e4:f4:59:12:1c:45:fb:
ed:27:38:28:d8:86:dc:5a:35:75:cf:a6:a4:8c:cd:
43:36:6a:f1:ad:1e:f1:cf:20:21:dd:fa:bc:cc:18:
37:39:f3:60:d0:f0:40:e7:5d:ba:26:c7:8d:37:14:
23:af:d5:b6:44:a2:8a:89:58:87:c9:e2:13:c7:5b:
26:23:dd:46:ce:b0:bf:7c:15:b5:21:27:15:9f:2c:
31:fa:2b:7e:42:97:73:d4:83:d8:41:a9:62:6f:da:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:2D:59:EB:6B:36:DE:94:59:FB:17:A9:58:27:0A:DD:85:68:16
X509v3 Authority Key Identifier:
keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1e:0f:0c:7a:98:18:b5:36:2e:3f:ce:55:30:cf:6d:f0:9d:
6a:d3:8f:72:1c:c1:4d:f6:b2:52:89:9f:92:50:a1:73:af:f8:
46:18:a9:34:40:40:ec:07:51:22:81:e8:0a:a5:ed:e4:14:23:
6f:26:40:d6:2c:7f:0a:70:91:77:db:70:3f:95:11:3e:15:9e:
dc:93:53:7a:3e:b8:55:dd:fe:26:61:14:29:e9:05:a1:ec:28:
0e:22:61:45:f6:15:aa:16:5d:97:cd:48:60:9c:d6:f8:0e:19:
75:ca:59:9b:9e:bf:11:fa:42:0d:18:d3:04:e8:ef:35:15:08:
c1:d2:f2:6a:28:77:82:32:4d:df:b3:a6:10:17:81:9e:3e:92:
fa:1b:aa:ad:5a:ca:49:2d:52:63:fe:4d:48:ad:6d:49:d7:cd:
2c:3c:48:db:5f:63:59:c3:f3:87:da:7e:ec:1c:7e:9b:9d:ec:
b9:2e:77:d2:79:43:c0:c9:5e:b7:d9:d1:7e:b6:7b:e5:46:b4:
2e:91:e4:b9:37:a7:b9:41:7f:71:37:4c:f7:98:f3:68:f5:e7:
2e:3e:9b:36:f7:c7:85:bb:5a:fb:bc:ff:f3:b5:17:a1:43:54:
7d:f1:62:01:05:2d:a3:25:ad:54:f6:87:6d:56:c0:83:d3:69:
58:36:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:16:55 2025 by rpki-client