Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json)
Hash identifier: I+YEwMwrbSRDXxye2yL3zQ3kdnSevFoaLMSr+m2kJZQ=
Subject key identifier: 96:1A:1B:8C:AD:27:C6:44:F1:66:CE:13:BC:C7:B1:AB:92:3C:C8:9F
Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9
Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9
Certificate serial: 6268920883FBAAFF70A50C8B88D2970FDD6D21D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
Manifest number: 01C8
Signing time: Thu 30 Jan 2025 09:21:08 +0000
Manifest this update: Thu 30 Jan 2025 09:16:08 +0000
Manifest next update: Sun 02 Feb 2025 10:14:08 +0000
Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=)
2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=)
3: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: 7JeaJlEm043VsmLNUtGiXAWB5DvObbeo3McKE/k6QqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:68:92:08:83:fb:aa:ff:70:a5:0c:8b:88:d2:97:0f:dd:6d:21:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9
Validity
Not Before: Jan 30 09:16:08 2025 GMT
Not After : Feb 2 10:14:08 2025 GMT
Subject: CN=961A1B8CAD27C644F166CE13BCC7B1AB923CC89F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:54:f5:7b:d2:c7:81:5a:42:e9:2e:d5:62:
c3:bd:68:c9:26:90:f9:33:d0:24:81:ea:bc:d5:ad:
d1:20:e0:90:17:ae:35:f2:18:b0:2b:6e:1b:65:6a:
70:39:e0:ed:48:90:9d:22:7c:8e:ca:a3:2a:4f:ee:
81:3f:7e:23:61:4c:00:fb:41:e2:62:34:75:d6:04:
01:d3:1f:f7:f9:df:9e:c3:f6:22:db:3b:8d:1f:7e:
48:56:c7:b9:33:40:18:20:f1:6f:c7:b1:81:d7:df:
ce:8d:10:b6:6e:87:ff:9f:a1:4c:d2:7b:a5:69:36:
cc:ec:6c:25:98:9a:79:f9:24:04:c6:dd:fe:7b:8d:
99:fb:8c:09:59:1c:4e:97:19:46:a3:05:68:f9:e0:
87:05:19:7f:36:dd:f2:db:2d:b4:13:4a:ce:7e:08:
e4:48:0b:09:79:3c:6c:77:3d:59:09:0b:34:69:94:
55:38:3a:41:1c:0b:14:10:e7:a1:76:69:91:1c:80:
1b:1c:f5:c9:2f:3f:fc:46:a3:f4:12:c4:1d:34:9a:
32:89:ff:bd:bf:69:be:bf:2f:02:bf:f1:89:30:dd:
e0:77:e1:65:ce:9c:48:e7:d6:d3:05:56:1e:94:74:
15:29:c5:8e:4f:eb:c1:8d:d1:47:f5:16:aa:f9:20:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:1B:8C:AD:27:C6:44:F1:66:CE:13:BC:C7:B1:AB:92:3C:C8:9F
X509v3 Authority Key Identifier:
keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b1:8a:06:fc:34:f4:4f:d3:89:7f:6c:14:3d:91:50:63:8d:
da:63:1e:8f:27:fa:b8:c0:af:a8:4f:2c:61:ef:9d:f1:9c:fa:
85:db:91:b4:7b:01:28:9a:dc:61:f9:17:f0:d2:68:f0:24:c9:
f4:4b:2f:24:4e:21:70:c4:fb:1d:b7:3e:b6:28:96:a8:83:09:
5b:14:92:48:a6:72:1e:0d:29:bb:89:ff:4b:0c:ca:03:4c:20:
b0:b7:9a:0f:6a:d8:3f:45:b0:86:7f:c4:ae:e4:ae:32:00:60:
05:58:00:b8:aa:a2:6a:b9:cc:78:a0:1c:09:aa:4d:0d:60:db:
95:98:c7:95:8a:27:f1:ca:75:c7:30:53:f7:c2:39:ae:d0:8c:
e8:ec:3f:3c:54:ad:24:e6:4b:2c:e9:43:1e:d0:a9:6b:ed:39:
a7:88:24:bd:ba:bb:f7:23:c5:e2:94:3f:ee:6f:52:84:9d:f8:
5a:d6:e0:d6:d0:84:62:52:8f:93:9b:b1:0f:9d:39:df:be:af:
0b:2d:78:38:5b:05:87:ae:9a:e6:09:4d:fa:ab:fd:30:e3:34:
0d:57:3f:d9:8f:4a:6a:b3:a1:68:1a:43:36:c5:e6:85:96:46:
18:f6:e9:46:d1:7c:28:18:21:99:d2:da:d8:69:41:e7:45:e4:
9a:fe:6f:b3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYmiSCIP7qv9wpQyLiNKXD91tIdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz
OTU2OTNEOTAeFw0yNTAxMzAwOTE2MDhaFw0yNTAyMDIxMDE0MDhaMDMxMTAvBgNV
BAMTKDk2MUExQjhDQUQyN0M2NDRGMTY2Q0UxM0JDQzdCMUFCOTIzQ0M4OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4VT1e9LHgVpC6S7VYsO9aMkm
kPkz0CSB6rzVrdEg4JAXrjXyGLArbhtlanA54O1IkJ0ifI7KoypP7oE/fiNhTAD7
QeJiNHXWBAHTH/f5357D9iLbO40ffkhWx7kzQBgg8W/HsYHX386NELZuh/+foUzS
e6VpNszsbCWYmnn5JATG3f57jZn7jAlZHE6XGUajBWj54IcFGX823fLbLbQTSs5+
CORICwl5PGx3PVkJCzRplFU4OkEcCxQQ56F2aZEcgBsc9ckvP/xGo/QSxB00mjKJ
/72/ab6/LwK/8Ykw3eB34WXOnEjn1tMFVh6UdBUpxY5P68GN0Uf1Fqr5IE45AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlhobjK0nxkTxZs4TvMexq5I8yJ8wHwYDVR0j
BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1
RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2
OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm
NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1
Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFqxigb8NPRP04l/bBQ9kVBjjdpjHo8n+rjA
r6hPLGHvnfGc+oXbkbR7ASia3GH5F/DSaPAkyfRLLyROIXDE+x23PrYolqiDCVsU
kkimch4NKbuJ/0sMygNMILC3mg9q2D9FsIZ/xK7krjIAYAVYALiqomq5zHigHAmq
TQ1g25WYx5WKJ/HKdccwU/fCOa7QjOjsPzxUrSTmSyzpQx7QqWvtOaeIJL26u/cj
xeKUP+5vUoSd+FrW4NbQhGJSj5ObsQ+dOd++rwsteDhbBYeumuYJTfqr/TDjNA1X
P9mPSmqzoWgaQzbF5oWWRhj26UbRfCgYIZnS2thpQedF5Jr+b7M=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:48 2025 by rpki-client