Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft
File: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft (raw, json)
Hash identifier: AoNUwKFdkBN3LnY5pyh3WQoKzHue44eIAnpeL/JRIxc=
Subject key identifier: D3:7A:9B:F4:6C:A1:16:BD:C4:52:F4:8A:AB:53:F4:E0:6D:AA:4D:18
Authority key identifier: 67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F
Certificate issuer: /CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F
Certificate serial: 51B0917C7F4229D9EEA7713580DE7859EB0D0BA9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft
Manifest number: 0156
Signing time: Fri 31 Jan 2025 15:51:15 +0000
Manifest this update: Fri 31 Jan 2025 15:46:15 +0000
Manifest next update: Mon 03 Feb 2025 23:29:15 +0000
Files and hashes: 1: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl (hash: zQnCAMWPJcNgcsbERaPrWSPldf91UW+qxKYj1Xzfz1Q=)
2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: 1GaxlmyMBH5Av+K+s7DcySXoa/4RweD6yLZx8aQoKzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b0:91:7c:7f:42:29:d9:ee:a7:71:35:80:de:78:59:eb:0d:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F
Validity
Not Before: Jan 31 15:46:15 2025 GMT
Not After : Feb 3 23:29:15 2025 GMT
Subject: CN=D37A9BF46CA116BDC452F48AAB53F4E06DAA4D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:37:8b:8d:9c:0e:fd:92:aa:64:9c:06:eb:
0f:c4:0a:82:90:81:fd:b5:a3:5e:aa:46:b5:4f:d8:
76:0d:8d:65:37:78:7d:3b:e4:86:c3:bd:97:83:e5:
39:05:f3:2d:c6:2c:2e:eb:a4:10:59:ad:07:f0:00:
74:64:81:3c:53:a8:ed:cc:b4:cb:30:95:8b:a6:90:
5b:43:34:40:37:26:dd:e8:67:77:74:e5:5d:d4:64:
b7:33:83:27:5a:fd:aa:99:e7:df:a7:2c:17:70:ab:
3b:36:b3:68:77:37:fd:66:58:d8:a5:e4:0b:3c:42:
77:01:1a:d6:22:fc:a2:a6:22:3d:a4:36:7c:2d:c9:
7b:cf:a5:7b:07:b5:f8:97:a2:12:18:c8:4e:71:92:
0d:05:a2:d1:cb:d8:3b:46:be:00:14:4b:4f:47:66:
f4:0f:3f:45:b3:d9:92:ac:4f:9e:1c:a8:4b:4e:3d:
22:36:68:67:04:5b:8f:7e:06:8d:a7:26:b3:50:9e:
2d:48:a1:6e:c7:41:8a:68:41:c8:4f:00:72:2b:ce:
4f:fb:78:07:9f:98:7a:33:d7:96:ab:d2:8c:5e:14:
0e:64:96:e7:e2:8f:93:0c:50:4b:3a:39:9b:c9:56:
8a:e2:b8:48:10:a3:2a:22:2d:09:45:bf:b3:1d:75:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:9B:F4:6C:A1:16:BD:C4:52:F4:8A:AB:53:F4:E0:6D:AA:4D:18
X509v3 Authority Key Identifier:
keyid:67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:f2:c4:64:89:72:e5:80:7d:86:8c:c8:99:d0:78:28:4f:
8e:2f:99:c1:09:93:e4:45:ec:52:15:8a:f9:25:0c:59:c4:dc:
13:8c:d6:9c:c2:26:e8:89:2d:0f:e1:bf:d2:e4:65:f9:ca:79:
dc:68:08:71:94:04:a1:08:98:f7:e6:b0:81:33:ed:73:0b:62:
bc:00:3f:96:03:ab:9b:99:4c:19:e9:dd:ea:d7:9d:28:10:c3:
74:c9:03:b2:5a:5e:77:17:ff:b2:0f:26:c6:c2:dc:c3:5b:90:
a5:7b:14:7a:f6:69:62:c3:f2:2b:c9:5d:60:f0:c2:79:c9:4b:
18:b2:66:c1:1d:e0:97:cf:c6:69:a1:e3:5e:94:a7:68:7a:8b:
da:5e:91:ec:89:b6:e8:42:2e:d9:11:18:89:4f:50:59:2d:17:
15:b3:03:1d:53:34:91:05:60:ec:11:72:0a:5a:b8:94:8f:78:
0b:4d:f0:c5:f9:54:95:be:84:86:01:a8:96:b7:86:87:d6:e3:
8a:7c:f7:3e:c7:3e:44:fc:c2:72:db:ae:ca:fd:71:a8:1c:cb:
95:28:52:a8:4c:9e:84:c7:1a:ee:df:d1:28:19:8e:8f:33:19:
86:b8:bf:23:e5:64:28:f5:36:df:c8:6c:f8:4d:8f:67:53:e8:
2b:dc:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:40 2025 by rpki-client