
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft
File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json)
Hash identifier: kgdKSXdI241Jiui37+TwLXZUHMpnre63ixiRZJlpMng=
Subject key identifier: 85:FF:FC:D6:DB:DB:4F:DB:71:17:68:C9:76:29:0F:6F:15:55:D0:8B
Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Certificate serial: 6D28E97BCD117528783004A126E908363EEA66C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft
Manifest number: 0310
Signing time: Wed 29 Jan 2025 16:21:23 +0000
Manifest this update: Wed 29 Jan 2025 16:16:23 +0000
Manifest next update: Sat 01 Feb 2025 23:09:23 +0000
Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: dOSwIab4DipRsGMw2fmXCp8oC5CSGZ+c+pbbDEgoGbA=)
2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: J3thQeJT692zM4jqfF3YmA8WRma7Qu8o+O33RB+0Q5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:28:e9:7b:cd:11:75:28:78:30:04:a1:26:e9:08:36:3e:ea:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Validity
Not Before: Jan 29 16:16:23 2025 GMT
Not After : Feb 1 23:09:23 2025 GMT
Subject: CN=85FFFCD6DBDB4FDB711768C976290F6F1555D08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:d2:11:18:7f:e1:1e:e5:75:80:dd:e9:44:
b5:f5:14:27:a9:cf:38:5b:b4:b5:0f:31:0e:81:bc:
45:87:81:1a:30:7f:d5:47:e5:e4:fd:15:c5:02:ab:
92:94:de:50:2c:ce:de:09:d9:2d:2e:83:c3:cc:cc:
4b:64:55:93:af:d6:fa:22:b4:57:76:b1:6b:84:78:
0c:66:6c:10:1f:e0:c3:db:18:65:24:6d:28:5c:b8:
d2:fa:cf:7f:f0:c0:42:15:86:c5:9c:d6:83:a6:48:
7e:f1:98:5b:98:31:29:34:95:5b:1a:30:56:0e:28:
34:e4:39:17:b7:9a:b4:c2:74:5c:20:e6:0c:12:16:
29:d7:a9:f6:32:15:e1:47:d0:13:94:30:18:2f:78:
fb:92:05:be:cb:16:6d:80:fb:a6:0d:d7:a7:a1:5d:
79:b2:fe:85:ed:1b:8d:70:f6:e3:3c:b9:e4:47:ac:
a5:7b:b7:bf:33:87:86:7e:80:99:a3:ee:b8:9c:c1:
d4:58:ba:37:8f:72:9f:f8:df:34:c7:76:90:21:c3:
8b:34:d5:a8:da:7b:d1:ab:9d:73:99:a2:60:be:76:
aa:9a:c5:6b:aa:3a:83:c8:36:a7:df:dc:71:42:23:
10:f6:b3:ab:4d:2d:0c:5c:55:a0:c1:32:5f:46:d2:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:FC:D6:DB:DB:4F:DB:71:17:68:C9:76:29:0F:6F:15:55:D0:8B
X509v3 Authority Key Identifier:
keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:35:68:b0:c5:98:ef:7e:89:70:4f:ae:bb:5d:6a:c8:0d:0c:
f3:72:1b:f1:39:38:fc:f6:96:1f:51:c5:c1:dc:25:48:a1:c6:
99:b7:c7:f5:8b:0b:6d:ba:c6:32:21:b0:c0:f0:49:8b:38:e2:
dd:82:4b:25:de:52:74:ce:af:1c:48:9a:9c:97:13:1e:6d:2d:
fb:c3:65:23:84:b5:14:9e:e1:73:f7:53:a0:86:3f:4c:6b:a4:
a9:e3:f9:a5:a3:39:0d:cb:2d:1e:77:a9:14:04:e2:33:d6:62:
a2:1a:81:d7:ca:12:8b:51:f7:26:ed:28:e9:3d:b3:c9:a2:ea:
fb:a0:b8:59:28:8b:85:73:4b:8d:8f:f4:d5:5e:c3:20:c2:32:
49:00:08:f0:44:78:e6:87:0c:ef:a7:46:b9:65:6c:41:7c:0a:
07:dd:3c:e9:28:6a:38:69:68:c3:cc:16:90:ca:a5:e3:ef:98:
39:97:b4:02:12:1e:5a:80:04:65:fc:90:cb:23:79:62:80:fe:
32:f2:09:9e:b9:db:0b:cb:27:31:c2:ed:96:a8:6f:0f:92:8d:
b5:4d:73:4f:d3:24:e4:c5:a9:d0:2b:e7:10:b2:a8:33:09:98:
ae:48:c2:8b:17:67:92:1b:f3:55:a5:dc:9f:60:c8:59:a6:7a:
57:79:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:12:34 2025 by rpki-client