Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json)
Hash identifier: z0U+xaGL5jocIafuKSAr69Ddfry9wKzGVWEDNeT08SM=
Subject key identifier: 0F:D8:B2:D8:C6:17:37:7E:36:A9:ED:60:0E:86:0A:A3:95:A1:22:2A
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial: 70ED5BB1F60D536C43FBCDFC8AA23B4D7EEEA14B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
Manifest number: 01A1
Signing time: Thu 30 Jan 2025 00:12:08 +0000
Manifest this update: Thu 30 Jan 2025 00:07:08 +0000
Manifest next update: Sun 02 Feb 2025 08:53:08 +0000
Files and hashes: 1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: 0xRobU/o+dv8GfzE7blpNk0pnJZnUklZYJoIVmSWLMk=)
2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: tKnvOcGTVqsW/yS5Z2lvba/Xzg8OV2BXKtMn/U4SLRQ=)
3: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: M2AqJ26SKPMQCW3KR3RhdcUmaBv2RenAC76SCZeW+a0=)
4: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: hDClbQDSswgVDEu/DPM7msozDc/R6vqroB52plI4h4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ed:5b:b1:f6:0d:53:6c:43:fb:cd:fc:8a:a2:3b:4d:7e:ee:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
Validity
Not Before: Jan 30 00:07:08 2025 GMT
Not After : Feb 2 08:53:08 2025 GMT
Subject: CN=0FD8B2D8C617377E36A9ED600E860AA395A1222A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:cb:cd:9b:16:2f:11:12:65:7e:70:9c:92:
5d:ed:02:79:9b:cc:6b:b0:bd:bf:78:0d:3c:c0:ac:
4a:ba:97:c4:76:f0:5e:7b:6e:a9:8e:7e:ff:ca:a2:
d0:52:5b:c4:56:e7:c9:e9:65:6d:d2:4c:e5:35:20:
f8:c9:b7:17:cf:bb:eb:ad:17:22:f0:21:47:c2:cb:
7d:7f:90:4c:13:f0:87:85:10:25:61:37:18:ee:c5:
70:04:79:0c:a2:22:bf:ec:16:3e:3e:4f:1c:75:51:
36:63:f5:df:c6:b8:5c:e7:90:03:42:b6:e4:de:98:
f2:99:bf:57:26:72:c0:fd:67:33:25:52:3a:5a:1d:
f8:d9:cb:9e:e4:63:e8:f8:e1:a9:cf:f0:65:1f:8e:
c8:1a:52:98:54:20:51:94:41:30:f6:7d:30:11:f9:
aa:90:7e:76:c2:9f:2c:db:0e:f2:da:2a:89:75:e8:
f8:b6:41:74:f2:a1:15:a9:75:f1:92:77:63:46:37:
16:11:2f:cc:ce:5d:63:f9:9e:5d:c1:9d:a9:08:d2:
06:68:c3:15:da:54:83:84:36:ca:70:23:62:13:cf:
c5:35:63:3d:1c:26:a2:18:e1:42:0b:ec:31:fe:ca:
78:94:a7:85:48:de:52:e9:e0:0d:b7:00:de:9c:eb:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D8:B2:D8:C6:17:37:7E:36:A9:ED:60:0E:86:0A:A3:95:A1:22:2A
X509v3 Authority Key Identifier:
keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3d:00:2c:58:2c:24:17:20:a3:14:9b:38:09:f5:f1:83:fc:
13:63:e2:5e:0a:5a:a6:23:86:4a:41:7c:f9:68:8d:dc:54:ee:
21:cb:c8:e9:51:c5:8a:a5:39:0b:a9:6e:9a:47:31:27:eb:a5:
c5:f4:e0:6f:40:ab:bb:14:2f:d3:da:af:b7:a0:e8:8b:d7:a2:
0f:7d:0d:3e:eb:a3:0c:79:0e:61:cc:b0:5d:51:da:f9:32:7b:
69:3a:b4:26:1d:f0:4c:f0:a5:16:fa:23:59:a8:78:3e:c4:ce:
e4:ea:47:fe:62:39:ac:18:f8:f5:d9:d6:29:e6:45:41:21:2a:
8f:84:6f:a5:4b:75:98:c3:07:37:0d:39:dc:c3:c2:aa:af:6a:
48:67:cd:e8:10:f4:c1:08:83:a4:f2:a3:e5:21:2b:07:82:92:
39:f6:0c:6f:e2:ba:fb:77:e1:d6:29:b1:28:90:3c:72:fc:7c:
47:f8:b2:57:f4:3f:d1:57:99:17:b8:89:f2:df:c4:b7:62:da:
63:e2:00:1f:2e:6d:0b:e7:c6:e4:f3:d0:0b:98:a7:de:95:1c:
d7:3b:81:76:f4:24:3d:f1:2c:80:50:e0:1a:15:d3:ce:75:ba:
2a:97:d9:44:78:5f:0a:78:23:ef:27:ef:77:68:73:4f:81:06:
7c:7b:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:26 2025 by rpki-client