
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft
File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json)
Hash identifier: iOn9s2PoBsTuniMOatdfIbLvALCUGY8o+AxwvdMYbr0=
Subject key identifier: C2:BC:D7:19:3F:84:E0:D4:92:72:27:92:C8:E3:F4:12:57:5E:0A:12
Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95
Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695
Certificate serial: 594DB8AE800E5F5B56B970EB2FD6E6F61877EFA8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft
Manifest number: 011A
Signing time: Thu 30 Jan 2025 23:41:01 +0000
Manifest this update: Thu 30 Jan 2025 23:36:01 +0000
Manifest next update: Mon 03 Feb 2025 05:13:01 +0000
Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: +1JjDkry2Yh7h4FVJWZnIUS6DhSfu5ybbb3fKfngfog=)
2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: L7KowJX+vkD9OPsQ0owSRhhf4cCZ5+6JZ/CKHdSuVC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4d:b8:ae:80:0e:5f:5b:56:b9:70:eb:2f:d6:e6:f6:18:77:ef:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695
Validity
Not Before: Jan 30 23:36:01 2025 GMT
Not After : Feb 3 05:13:01 2025 GMT
Subject: CN=C2BCD7193F84E0D492722792C8E3F412575E0A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:fc:f6:4a:12:71:7d:19:4c:62:88:b1:30:
17:78:49:7c:32:79:47:60:bb:ac:dc:84:e8:33:f5:
b4:ec:4e:82:84:63:7f:30:18:d1:d9:52:52:a2:ee:
20:d1:a1:49:75:62:f8:6e:e2:7a:67:5a:ee:4d:fa:
7a:a8:e9:82:fe:22:b5:33:d6:58:a0:94:bc:a1:fc:
35:94:d0:ce:99:b2:15:19:e4:d6:a4:66:e2:fb:e2:
06:89:45:f9:cc:08:8f:c6:40:fc:ae:0e:58:62:a3:
10:5a:2b:e9:35:71:b8:cb:b2:bc:61:c3:9c:70:a2:
e5:ca:a2:f1:21:ad:9d:91:c8:4c:a8:8d:34:da:01:
9d:3c:35:b8:df:ee:bc:34:d0:37:d2:56:7f:76:74:
43:3e:6d:e5:f6:ce:bf:4e:e2:8a:d6:86:bf:6d:72:
55:1e:0b:19:5e:a8:50:16:48:df:d7:24:30:78:8b:
8b:95:46:0f:f7:e2:43:8e:b8:18:c0:32:59:3d:04:
3d:92:06:b0:92:35:69:e3:16:70:84:a3:30:08:f4:
3f:51:43:06:44:1f:51:a8:96:12:85:9b:52:88:a3:
9c:83:f1:55:d7:6f:35:a2:76:a2:a6:ee:47:22:07:
1e:c5:6e:db:91:00:d0:6a:cd:06:4b:e9:f9:53:26:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:D7:19:3F:84:E0:D4:92:72:27:92:C8:E3:F4:12:57:5E:0A:12
X509v3 Authority Key Identifier:
keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4f:93:ac:10:12:bc:75:e2:c8:c6:fe:df:24:94:31:20:e5:
49:00:df:ab:43:73:2f:4c:69:e6:2b:88:8e:49:fd:87:0c:16:
f3:48:0b:2c:eb:95:28:2e:2e:a3:67:e4:5b:d6:36:09:ea:0b:
93:82:7b:56:50:d3:c5:4b:00:dc:00:d3:b3:d6:6f:7b:a5:2d:
51:1d:dc:da:28:5b:aa:e5:cd:8f:21:55:62:ca:ae:a3:ab:9b:
43:f7:5a:d4:a9:97:9f:df:de:e7:0d:c8:c5:26:70:92:d3:da:
44:84:f8:c7:56:a3:3e:54:22:98:87:47:0d:d7:2e:43:af:e3:
d3:83:e9:1c:a0:35:53:2e:7f:a3:fc:b0:95:5c:fb:29:54:25:
d1:3e:1e:10:5d:92:9c:3f:f4:f2:86:81:1c:b5:a7:ac:45:cf:
90:fc:70:f8:00:df:4b:a1:33:56:71:c7:a3:b5:bd:99:c3:7f:
98:5f:2b:66:0e:18:4b:6e:f5:03:00:5a:9d:57:40:3b:09:ec:
4f:56:fc:02:5b:c5:84:08:1d:92:ef:ac:a0:6c:28:e3:44:ea:
37:d0:d9:f1:48:31:ef:8b:65:0e:3b:f5:4c:ba:77:63:ff:e1:
75:a3:7d:88:46:c5:f4:3f:7e:7d:42:ab:ae:f1:f2:16:06:f1:
b6:94:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:35 2025 by rpki-client