Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json)
Hash identifier: 9A/3NFSWfHAerOJ5rzdRtWBuDdddYoKpu9MNopkrjG8=
Subject key identifier: 77:5B:5D:53:30:B5:1B:88:1A:D3:31:19:9F:EC:18:74:CA:38:3F:48
Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA
Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA
Certificate serial: 2FD79906E7C4787FB34CD467F34CF984A8426B9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
Manifest number: 045B
Signing time: Wed 29 Jan 2025 13:41:30 +0000
Manifest this update: Wed 29 Jan 2025 13:36:30 +0000
Manifest next update: Sat 01 Feb 2025 23:36:30 +0000
Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: RcjDOWozyI9WsmQTJeYEYOZoEnNbHUQ7s37xwu8Snd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d7:99:06:e7:c4:78:7f:b3:4c:d4:67:f3:4c:f9:84:a8:42:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA
Validity
Not Before: Jan 29 13:36:30 2025 GMT
Not After : Feb 1 23:36:30 2025 GMT
Subject: CN=775B5D5330B51B881AD331199FEC1874CA383F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:d6:9d:db:fa:71:f6:e6:ce:bc:53:e1:58:
51:a5:45:d4:b0:86:4f:f6:80:6b:ea:52:a8:ea:a9:
4c:ff:82:22:ad:99:c7:d2:40:a2:e1:c9:7a:05:b3:
94:b5:89:e4:e1:c4:dd:31:25:c1:85:91:d6:e6:b4:
86:dc:f4:9f:15:a4:86:dd:83:dd:91:8e:fb:92:14:
82:37:42:95:fb:d1:00:6f:fe:e1:85:39:50:f5:49:
f3:48:28:a5:30:da:42:1b:f5:6b:c8:67:bc:04:4a:
64:e5:f0:ba:72:80:c4:81:59:78:fa:b7:97:2d:ee:
fc:0f:6e:1f:30:b1:60:9b:c1:93:c7:7e:9f:e2:d4:
6a:6d:a2:6f:7a:fc:aa:a3:a2:a0:a2:40:67:56:b4:
5f:fe:6f:fc:41:97:25:26:e2:61:af:bc:f1:c6:4c:
7c:be:2e:fb:b3:53:5b:e7:c5:5c:da:da:16:f4:80:
86:f6:b3:3d:94:cb:27:2e:ae:d0:07:d8:1a:08:31:
f3:3c:18:59:75:50:7b:d6:5b:9a:37:8f:24:36:e4:
87:b8:97:a0:63:0c:1d:eb:80:af:16:cc:6e:8b:c7:
84:4c:36:20:71:c1:9e:10:f9:05:eb:5a:32:94:c7:
25:06:05:d2:89:ea:c9:6e:a6:9c:f6:25:cc:9e:7e:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5B:5D:53:30:B5:1B:88:1A:D3:31:19:9F:EC:18:74:CA:38:3F:48
X509v3 Authority Key Identifier:
keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:28:b4:db:e1:83:21:62:40:46:c1:48:2e:1b:be:36:ba:8b:
77:ed:22:bc:54:65:de:d7:de:84:26:1a:9c:d1:3a:a1:2a:4d:
72:ee:53:8f:f6:92:b6:f4:69:7b:1f:a7:2c:a2:40:fd:8f:c1:
5f:a0:86:5b:9f:6a:fe:d3:cd:9f:53:5d:fe:4f:6e:2d:10:00:
05:64:72:8d:9e:2f:dc:9f:98:7f:5f:eb:72:92:53:2c:8a:64:
93:e7:e5:80:d9:d9:01:4c:76:cf:b7:3f:0e:91:49:c4:7d:f5:
73:41:f2:39:77:67:f1:1f:93:b6:ea:3c:c1:24:b9:37:bd:26:
ab:df:1f:23:ae:fa:96:bd:50:47:26:c6:c7:99:29:4b:ae:b9:
38:63:19:13:0c:a8:f4:0b:d9:35:0e:cf:15:cd:d8:25:b4:83:
fa:31:b2:e7:fc:d6:ea:37:2a:bc:72:e2:25:9a:b9:3f:94:96:
9f:54:b1:45:08:cf:cc:25:c1:52:1d:4b:79:d5:e4:84:03:28:
2d:ed:11:94:1c:ce:71:f4:3f:0c:58:94:79:e6:bb:6d:67:ec:
0c:91:f8:a7:7f:53:2d:14:49:cd:0d:4f:ee:eb:a8:64:cf:cd:
bd:78:89:e2:27:26:30:5f:92:c2:eb:71:bf:ea:28:cf:97:89:
96:ab:5b:d0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL9eZBufEeH+zTNRn80z5hKhCa54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx
QjQzQjVDQTAeFw0yNTAxMjkxMzM2MzBaFw0yNTAyMDEyMzM2MzBaMDMxMTAvBgNV
BAMTKDc3NUI1RDUzMzBCNTFCODgxQUQzMzExOTlGRUMxODc0Q0EzODNGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRtad2/px9ubOvFPhWFGlRdSw
hk/2gGvqUqjqqUz/giKtmcfSQKLhyXoFs5S1ieThxN0xJcGFkdbmtIbc9J8VpIbd
g92RjvuSFII3QpX70QBv/uGFOVD1SfNIKKUw2kIb9WvIZ7wESmTl8LpygMSBWXj6
t5ct7vwPbh8wsWCbwZPHfp/i1Gptom96/KqjoqCiQGdWtF/+b/xBlyUm4mGvvPHG
THy+LvuzU1vnxVza2hb0gIb2sz2UyycurtAH2BoIMfM8GFl1UHvWW5o3jyQ25Ie4
l6BjDB3rgK8WzG6Lx4RMNiBxwZ4Q+QXrWjKUxyUGBdKJ6sluppz2JcyefrojAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd1tdUzC1G4ga0zEZn+wYdMo4P0gwHwYDVR0j
BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx
RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz
QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3
ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0
NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADIotNvhgyFiQEbBSC4bvja6i3ftIrxUZd7X
3oQmGpzROqEqTXLuU4/2krb0aXsfpyyiQP2PwV+ghlufav7TzZ9TXf5Pbi0QAAVk
co2eL9yfmH9f63KSUyyKZJPn5YDZ2QFMds+3Pw6RScR99XNB8jl3Z/Efk7bqPMEk
uTe9JqvfHyOu+pa9UEcmxseZKUuuuThjGRMMqPQL2TUOzxXN2CW0g/oxsuf81uo3
Krxy4iWauT+Ulp9UsUUIz8wlwVIdS3nV5IQDKC3tEZQcznH0PwxYlHnmu21n7AyR
+Kd/Uy0USc0NT+7rqGTPzb14ieInJjBfksLrcb/qKM+XiZarW9A=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:44 2025 by rpki-client