Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json)
Hash identifier: JFV1UIEPWXx+g0cybLhu18QzDzOxWuUAqjpXRcn6VvY=
Subject key identifier: 8F:CD:BB:EF:04:49:96:8E:BE:C5:BB:5A:B7:D9:CA:5C:1B:D8:F3:1A
Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Certificate serial: 4E073655BE34264A790B230B9FDFAB80D0DDE89C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
Manifest number: 0144
Signing time: Wed 29 Jan 2025 14:30:43 +0000
Manifest this update: Wed 29 Jan 2025 14:25:43 +0000
Manifest next update: Sat 01 Feb 2025 19:52:43 +0000
Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=)
2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: CHngUnV1l9Q3nq/NyaxDJtq8vmqDh7AkUr0Q3IHFbps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:07:36:55:be:34:26:4a:79:0b:23:0b:9f:df:ab:80:d0:dd:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Validity
Not Before: Jan 29 14:25:43 2025 GMT
Not After : Feb 1 19:52:43 2025 GMT
Subject: CN=8FCDBBEF0449968EBEC5BB5AB7D9CA5C1BD8F31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:e8:16:c0:a1:1a:11:f8:ca:5e:e7:05:9c:
21:07:91:c6:89:24:3a:f9:ce:26:c5:3d:4d:68:dc:
6e:e8:60:38:d2:68:93:88:21:51:af:31:77:2b:83:
52:04:97:e7:22:0a:9f:2b:d4:5c:b6:ff:65:34:da:
b2:d8:91:8e:f0:bf:e0:7f:ad:5f:c4:01:90:65:3b:
f7:fc:30:bb:55:a3:78:6c:6d:34:b5:2f:7f:19:4c:
cc:c7:35:6b:1e:f9:42:df:d6:80:fc:8a:b6:9e:85:
0b:fc:c7:e7:cb:eb:a3:f0:42:5e:7a:55:cf:9a:be:
da:b3:29:30:b7:e6:76:62:13:f5:c0:81:db:3f:24:
de:47:63:1d:40:ac:3a:c0:de:3f:08:5c:23:3b:69:
1e:c3:df:9a:6d:48:cd:dd:81:72:81:9e:e1:29:dd:
c9:5a:75:73:83:83:b2:40:ea:0d:e9:fe:3b:35:d1:
ee:af:0e:3a:79:59:0b:64:4d:2a:3d:58:40:36:bd:
3c:99:74:43:ef:83:6a:f4:3d:09:c8:78:01:2b:23:
ea:cc:bf:88:8f:3e:7f:e0:a5:d4:d0:39:fc:aa:c6:
cc:0b:ac:f9:b5:78:99:0a:97:1d:2e:7f:37:70:99:
3f:2d:50:bf:74:14:b0:a3:cf:50:80:d2:f4:4f:3f:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:BB:EF:04:49:96:8E:BE:C5:BB:5A:B7:D9:CA:5C:1B:D8:F3:1A
X509v3 Authority Key Identifier:
keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:60:40:58:f1:69:71:13:a6:a4:8e:34:e9:89:af:a6:f5:aa:
e8:e0:b6:c9:42:0b:16:86:22:78:1c:82:c3:43:50:4b:36:1e:
b3:f4:5e:b8:b4:fd:c4:0f:3a:be:bd:88:84:f5:dc:45:9c:2d:
0c:9d:6d:a9:e6:01:89:2e:14:26:23:54:08:97:13:06:a8:14:
96:71:d3:0c:68:5a:2a:46:87:76:ce:84:4e:03:e0:cb:32:99:
76:ec:35:ae:e7:4b:fe:89:92:a3:1f:10:25:76:70:4a:a3:81:
14:09:c6:df:42:68:85:ea:42:8c:ff:d1:ec:94:ba:d0:ec:ef:
8a:eb:2b:6b:71:11:22:f2:eb:16:0f:a0:cd:e9:7f:77:d4:e4:
50:d9:e8:f5:2d:62:6a:3a:8b:7f:0c:11:94:42:67:9c:5b:6b:
5d:36:40:6c:8b:f7:02:cb:c1:19:1b:c5:34:43:38:c0:bd:4e:
7e:79:2d:59:79:c1:34:19:32:e3:c6:52:c7:d5:47:6b:d6:db:
06:e5:79:a2:fb:7e:f1:9b:7c:0b:9a:35:14:73:28:d8:3c:c2:
04:10:36:9c:68:a9:83:fc:7d:16:33:46:68:a4:73:6f:31:49:
29:83:1f:ae:c9:68:92:96:09:83:88:ae:0a:d0:59:2f:a7:4c:
21:9b:fa:1c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTgc2Vb40Jkp5CyMLn9+rgNDd6JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1
NjEzOEY1ODAeFw0yNTAxMjkxNDI1NDNaFw0yNTAyMDExOTUyNDNaMDMxMTAvBgNV
BAMTKDhGQ0RCQkVGMDQ0OTk2OEVCRUM1QkI1QUI3RDlDQTVDMUJEOEYzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oOgWwKEaEfjKXucFnCEHkcaJ
JDr5zibFPU1o3G7oYDjSaJOIIVGvMXcrg1IEl+ciCp8r1Fy2/2U02rLYkY7wv+B/
rV/EAZBlO/f8MLtVo3hsbTS1L38ZTMzHNWse+ULf1oD8iraehQv8x+fL66PwQl56
Vc+avtqzKTC35nZiE/XAgds/JN5HYx1ArDrA3j8IXCM7aR7D35ptSM3dgXKBnuEp
3cladXODg7JA6g3p/js10e6vDjp5WQtkTSo9WEA2vTyZdEPvg2r0PQnIeAErI+rM
v4iPPn/gpdTQOfyqxswLrPm1eJkKlx0ufzdwmT8tUL90FLCjz1CA0vRPP1IdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUj8277wRJlo6+xbtat9nKXBvY8xowHwYDVR0j
BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB
MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz
OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1
OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC
RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEVgQFjxaXETpqSONOmJr6b1qujgtslCCxaG
IngcgsNDUEs2HrP0Xri0/cQPOr69iIT13EWcLQydbanmAYkuFCYjVAiXEwaoFJZx
0wxoWipGh3bOhE4D4MsymXbsNa7nS/6JkqMfECV2cEqjgRQJxt9CaIXqQoz/0eyU
utDs74rrK2txESLy6xYPoM3pf3fU5FDZ6PUtYmo6i38MEZRCZ5xba102QGyL9wLL
wRkbxTRDOMC9Tn55LVl5wTQZMuPGUsfVR2vW2wbleaL7fvGbfAuaNRRzKNg8wgQQ
NpxoqYP8fRYzRmikc28xSSmDH67JaJKWCYOIrgrQWS+nTCGb+hw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:24 2025 by rpki-client