
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
File: DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json)
Hash identifier: 1/TEdIYsYdaXWxufb0tx/9lDazvhqsYgYRgx9r5VsW8=
Subject key identifier: C7:C8:06:B8:EA:95:F2:F5:B0:24:31:AD:6D:FD:B7:F7:C4:03:40:5B
Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
Certificate issuer: /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Certificate serial: 34505706ACB26B0A3791C621ABBCEDB3B6283533
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
Manifest number: 016C
Signing time: Wed 29 Jan 2025 13:01:42 +0000
Manifest this update: Wed 29 Jan 2025 12:56:42 +0000
Manifest next update: Sat 01 Feb 2025 23:24:42 +0000
Files and hashes: 1: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: AKe7Y2lyp5Q9y8MDRTPdGWnq5Sr6zXFhp0bG7CgZo5Q=)
2: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: nSaffT2loCbCY4DbpP8GpLCrFZYYKh3bE+jC1cyDP9Y=)
3: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: fGeQBiKX+xxqfH1XXT4otHk8nTCoBgbZ9CMCkIFVfP8=)
4: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: n7fDyeuU1HQZdFIYr/m3ZztFKIf2iIRMeVjsry1/EpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:50:57:06:ac:b2:6b:0a:37:91:c6:21:ab:bc:ed:b3:b6:28:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Validity
Not Before: Jan 29 12:56:42 2025 GMT
Not After : Feb 1 23:24:42 2025 GMT
Subject: CN=C7C806B8EA95F2F5B02431AD6DFDB7F7C403405B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:71:b1:b7:8f:0c:c2:27:a9:10:48:26:d7:
cc:95:7a:cc:42:12:79:2b:e1:5c:60:5c:39:cc:7e:
b6:83:b7:a6:c0:ff:55:24:5d:3b:31:dc:8e:c4:c8:
62:76:a0:19:3b:85:c1:68:55:01:4d:a8:c9:79:14:
6d:c8:03:7d:64:d3:66:bb:dd:c9:a8:66:b9:87:7b:
7f:b4:e0:d9:4b:dc:db:77:25:b4:b3:b4:5e:36:fb:
e3:1e:00:69:95:7c:9f:cb:7f:f9:f5:ba:86:97:d1:
bb:cc:e3:7c:0c:79:a7:aa:db:fc:d0:b2:2e:b4:a0:
58:2f:c3:58:18:f5:9a:cc:b0:e9:1e:7c:f5:46:09:
75:13:d5:90:5f:3c:5c:ed:74:9e:85:50:eb:3e:64:
6f:e7:5c:17:87:8c:47:c5:ad:8f:0e:a4:9a:9c:6b:
ff:c9:46:b2:44:c4:c4:70:43:7d:e7:8c:9f:45:29:
b4:cd:36:bf:25:b1:b0:3a:b9:7f:cf:cb:98:b6:05:
a8:4f:1e:89:63:fd:99:5c:68:f7:e8:64:b0:4d:e6:
2e:2e:13:ca:4b:28:8e:6a:45:db:7f:91:35:45:16:
31:16:73:08:5d:70:60:0e:c2:10:c1:23:0b:20:68:
96:b6:28:6a:b6:78:ee:f5:01:f9:73:07:c7:74:62:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:06:B8:EA:95:F2:F5:B0:24:31:AD:6D:FD:B7:F7:C4:03:40:5B
X509v3 Authority Key Identifier:
keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:7b:9d:99:6e:2d:0c:da:bb:e2:32:94:97:29:05:4f:0d:06:
92:a1:52:11:e4:15:70:88:fa:a9:b6:3d:73:1f:98:97:3b:8b:
58:eb:70:3e:55:c1:c4:7e:43:8d:9b:8d:b6:dc:02:f7:35:44:
d9:49:3a:81:98:94:36:90:5a:11:2b:0a:a5:0c:36:eb:fd:05:
0c:ba:b8:94:72:77:f2:55:30:b9:60:5b:b0:2c:92:b1:68:37:
0c:9e:16:2d:24:cd:62:ca:c8:4c:03:77:2a:57:50:2f:e2:1a:
65:c8:f8:20:18:79:bf:c0:10:48:70:2e:1e:86:43:9e:37:98:
6e:74:b9:12:3a:d5:fa:fd:44:e8:9f:b7:95:43:bf:aa:41:7f:
58:23:6f:41:f7:43:51:9b:68:d1:7f:ea:83:23:5c:02:b4:62:
3a:1b:17:b4:41:49:59:0e:2c:aa:b4:a3:57:60:bc:01:80:d0:
38:30:f4:d0:99:2c:54:02:41:5a:ae:1b:d1:4b:8b:6b:f7:8c:
2c:ee:14:5c:a5:60:5e:25:fa:2c:fc:97:58:86:2a:a8:7a:98:
53:86:ff:aa:88:32:39:5b:62:0a:20:b9:ba:08:f3:07:98:87:
90:d2:72:80:61:e4:41:45:7f:b6:4d:4d:9f:92:f1:48:34:c0:
2b:e1:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:53 2025 by rpki-client