Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft
File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json)
Hash identifier: 1rk6aTmQzFj0/ZnJUMN8rEX40l9ZAUwuUaLLlMquklA=
Subject key identifier: D9:C8:13:A9:B2:4A:14:55:18:B9:91:CF:AA:72:DD:D8:A6:20:E2:35
Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999
Certificate serial: 578DB8E68E654A115C3A63387021CF76B4FEE689
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft
Manifest number: 0134
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:55:41 +0000
Manifest next update: Mon 03 Feb 2025 13:19:41 +0000
Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: QB3hRFk1Fog69rNCBtmqLqGiZ9Pp+Cxjqrto7jJ0Hw8=)
2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8d:b8:e6:8e:65:4a:11:5c:3a:63:38:70:21:cf:76:b4:fe:e6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999
Validity
Not Before: Jan 31 10:55:41 2025 GMT
Not After : Feb 3 13:19:41 2025 GMT
Subject: CN=D9C813A9B24A145518B991CFAA72DDD8A620E235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:11:8d:c0:77:dd:39:02:f2:f2:f4:b7:4c:
f4:ea:8b:1b:55:1b:be:7c:f9:ac:76:1c:b8:b0:94:
07:83:c9:38:26:43:e0:ea:34:24:0e:60:24:26:da:
ce:b7:d6:52:19:62:12:e7:05:16:19:ee:17:4a:fd:
08:0b:5a:08:14:39:c4:7a:4c:32:a7:08:b6:7a:72:
5c:93:2f:1d:1b:7f:4f:0b:04:15:fd:34:72:2b:29:
5e:18:27:40:d9:1c:73:2b:01:94:aa:12:51:2e:77:
da:8a:97:a9:83:c0:5e:53:09:8b:37:64:83:7c:25:
ce:57:b5:99:72:b7:41:4e:50:2a:70:ab:5f:a3:f8:
87:6e:c7:a3:ed:cf:f2:a6:1e:32:7d:d7:8b:a2:b2:
b8:66:dd:c7:43:32:52:f5:fe:8b:63:0e:22:98:8d:
b9:4e:e9:77:49:f1:8f:64:cc:06:ab:01:45:31:7e:
c8:c4:e6:0d:50:ba:f4:54:ef:75:65:d9:34:7b:97:
f2:e4:cb:7d:9b:22:af:79:5a:79:fc:4f:fb:97:c1:
8f:fc:09:ce:11:81:3b:0f:9b:81:29:47:55:ef:61:
b0:20:82:7b:dd:0d:f1:3a:24:1d:d0:5f:cc:03:c5:
17:fd:58:3e:10:9b:ed:2d:15:d3:c4:b1:88:db:67:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C8:13:A9:B2:4A:14:55:18:B9:91:CF:AA:72:DD:D8:A6:20:E2:35
X509v3 Authority Key Identifier:
keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:40:c5:de:0d:ec:c2:cd:b0:d6:d5:04:ce:da:b6:13:d8:d2:
11:07:f3:2b:c9:11:e9:69:3b:eb:ee:36:9f:33:a2:8b:21:42:
f5:55:82:ca:5a:e9:2c:de:f5:7e:26:8f:fb:67:0b:15:a6:6d:
0b:c9:34:7d:98:a0:fd:50:75:7e:15:67:31:ea:a1:e4:79:0c:
3b:e0:7b:cc:8e:aa:25:1e:e9:7b:93:03:be:25:b4:48:78:70:
e8:31:ea:bc:84:5c:60:7e:6f:72:9d:a8:c4:1f:5c:84:57:23:
e4:ee:2d:02:15:fe:d3:31:b5:b9:3f:0a:da:7d:d1:7f:77:7c:
b1:1e:2e:c5:cc:ce:a1:04:d8:5f:71:8b:f5:2e:98:b6:08:45:
97:df:4c:fa:2c:90:cb:db:6a:9c:80:7a:9f:03:9a:4b:40:a6:
4d:2f:59:f1:ad:51:23:74:40:14:82:2c:40:96:85:08:22:a3:
f9:c8:2e:85:53:a6:e3:9a:38:f1:2b:e6:d0:b2:45:78:87:55:
5b:f0:01:1a:13:64:38:dc:f1:de:46:6e:df:c3:e7:11:8b:0b:
8f:7e:3f:a8:ef:f1:29:5c:7e:2e:1d:e3:ee:82:7f:32:de:4a:
a6:a4:d6:a1:c2:53:3d:5d:0a:0b:29:5b:64:44:84:79:3b:9b:
61:dd:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:38 2025 by rpki-client