Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json)
Hash identifier: CA/UJWo/XnnKOyINKL2NnGxP8utLm9zQk2vertS39lE=
Subject key identifier: 59:23:AD:DA:AC:9B:93:63:5D:39:36:0C:F8:C0:E6:47:EC:46:C5:7D
Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Certificate serial: 4F547CA478451DA85786D09C80F41F3A06C062DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
Manifest number: 02DB
Signing time: Thu 30 Jan 2025 03:41:10 +0000
Manifest this update: Thu 30 Jan 2025 03:36:10 +0000
Manifest next update: Sun 02 Feb 2025 12:29:10 +0000
Files and hashes: 1: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: Y94ACgKRW/B6r5u1l5R9++TiByrUg/dDZ6VyKO+Pxik=)
2: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: ofjM5FxDrSaepYN3G15J8WqAJI9AMLIPFI4JPVmX/Cs=)
3: 3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa (hash: ypT2E/4mQi8ZinwGIb3ksHfodPA0Ub74zZ/WxvTHyYI=)
4: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: MmDjqY0in3Ron4tXoyw1IFEdlRaJCNk65DIgw6xUgLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:54:7c:a4:78:45:1d:a8:57:86:d0:9c:80:f4:1f:3a:06:c0:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Validity
Not Before: Jan 30 03:36:10 2025 GMT
Not After : Feb 2 12:29:10 2025 GMT
Subject: CN=5923ADDAAC9B93635D39360CF8C0E647EC46C57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:f6:3f:86:a5:e4:0b:70:f3:ef:bb:ac:fb:
e9:70:f6:45:49:10:2e:23:23:46:a2:1e:78:cb:d3:
8a:25:eb:4b:5c:7c:f7:8b:55:f6:aa:ce:38:41:95:
2e:94:0c:35:b7:24:8d:74:e4:28:fb:6a:35:4b:5a:
d4:40:e2:23:71:48:03:4b:bf:11:8d:05:a3:70:ed:
73:17:d9:71:23:e2:50:73:11:fe:04:bf:10:9d:46:
e7:a3:e9:ea:65:7c:b9:0e:2c:44:3f:0b:54:1c:ba:
47:6c:d0:6f:c6:98:13:81:86:8c:50:4b:e4:9e:cc:
54:a0:69:ca:fb:76:3d:5c:98:08:da:90:ca:17:b4:
bc:93:e3:54:fa:f1:b8:e2:79:cc:f2:5a:9d:f4:a8:
b8:cb:f7:2d:22:22:0e:67:b2:d8:53:1e:9f:99:e5:
69:3a:83:30:b1:34:92:95:10:e1:2a:d0:76:c7:6a:
ad:33:44:ef:9a:8d:66:60:f5:57:6a:ab:00:5e:46:
ef:f5:22:a7:c4:aa:ff:16:e8:03:db:26:46:7f:a4:
c7:80:00:8e:16:0d:b0:64:5c:a8:6d:ea:5b:74:80:
11:c7:59:27:77:14:2a:c5:69:e7:49:ca:83:1a:31:
6b:58:20:67:91:53:34:50:15:09:79:b6:4f:42:91:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:23:AD:DA:AC:9B:93:63:5D:39:36:0C:F8:C0:E6:47:EC:46:C5:7D
X509v3 Authority Key Identifier:
keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6d:86:1f:f0:6f:b5:97:43:47:52:cf:7c:fd:20:b0:1b:65:
7d:e9:7c:01:81:10:d0:bc:f2:11:a7:7a:8a:d8:70:5c:18:bd:
12:82:02:f5:4b:dc:41:e2:55:12:12:54:25:a2:5c:88:d1:a4:
c1:89:1c:b4:68:2b:73:4f:a8:d8:b2:e0:63:de:37:a9:bd:f4:
ff:38:30:42:9a:bf:e4:17:69:23:dc:43:cc:da:0a:3a:eb:89:
d1:26:22:5c:e0:dd:61:62:23:b0:3d:62:84:93:c1:6d:24:78:
78:22:eb:37:31:b6:fa:ad:c1:c9:cc:76:02:40:2b:70:5d:06:
a0:25:b8:dd:fa:fe:98:15:99:bc:95:34:30:72:4e:a1:28:3c:
22:4f:ca:14:2f:c6:88:09:12:3d:6d:34:57:6d:04:73:00:05:
c6:13:39:01:31:75:87:57:6c:3e:81:05:d8:28:cc:f2:2b:e4:
65:b8:cb:81:b2:4f:b0:51:da:82:c2:b1:a4:00:a5:94:4d:f1:
6a:04:1b:56:4b:1c:b7:e7:be:ec:80:a5:5e:ce:f3:8b:7e:e4:
eb:64:db:3b:e7:ba:34:c7:a6:e7:7f:40:84:86:a8:55:fa:50:
55:ff:8d:a6:5d:7f:d5:f8:66:97:de:7d:b1:93:ec:8e:68:06:
04:90:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:03 2025 by rpki-client