
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json)
Hash identifier: 0KPsO+9TEuLZXlq/1wdcaL9vcZalJRMdemzk8t78zl4=
Subject key identifier: E3:3C:22:38:F6:50:36:A8:B6:4E:A9:DF:D7:A8:C8:8B:29:0B:68:88
Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A
Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
Certificate serial: 573E6B2C87CE4A6C3EC2A2DCA7F82C3C4FCACC91
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
Manifest number: 60
Signing time: Thu 30 Jan 2025 18:21:30 +0000
Manifest this update: Thu 30 Jan 2025 18:16:30 +0000
Manifest next update: Mon 03 Feb 2025 04:25:30 +0000
Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: rmN2qyI3QpQlQWDR7hP9k3TqV3FXdPyaKRb9/h+2xAQ=)
2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3e:6b:2c:87:ce:4a:6c:3e:c2:a2:dc:a7:f8:2c:3c:4f:ca:cc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
Validity
Not Before: Jan 30 18:16:30 2025 GMT
Not After : Feb 3 04:25:30 2025 GMT
Subject: CN=E33C2238F65036A8B64EA9DFD7A8C88B290B6888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:88:07:07:49:aa:cd:28:9f:5c:a9:8c:85:
de:b1:57:d2:f1:fb:26:eb:da:e5:95:b9:7e:50:33:
12:71:f9:4d:86:49:ae:bc:b0:9e:e1:7a:4d:4c:54:
00:a3:c3:fc:8f:58:9e:c2:06:d8:47:2e:60:21:56:
ed:90:cc:2b:8a:82:04:44:ae:62:dd:00:d9:af:7c:
cd:c2:24:0c:fc:6b:79:dd:00:2c:4d:da:81:d2:7a:
3c:d1:b4:b8:b0:a2:dd:1f:14:c9:00:a7:93:da:c4:
48:1e:3c:f4:27:cb:f4:b2:95:5a:5d:82:3a:5d:33:
cc:eb:29:d2:c4:c1:e5:2a:9a:b7:0a:6e:61:5e:17:
5d:4a:d7:8f:46:8c:e4:a7:6d:95:0c:70:18:e9:7d:
ab:56:f5:4c:ee:d8:dd:32:61:59:6f:1c:ff:58:98:
a0:9d:26:0b:81:4a:dc:77:ee:4e:dc:ec:9f:e1:e0:
61:dc:ae:8a:6e:7a:19:74:02:ea:0e:12:62:5b:99:
89:4b:14:ae:04:04:e7:c9:19:0d:55:75:d0:84:55:
9a:82:93:fe:e6:3f:5e:bd:69:7a:29:56:17:c9:b4:
d7:c6:cd:c2:e7:c4:af:fd:af:22:44:26:e8:80:09:
78:07:b4:91:e8:64:9d:28:03:a3:f7:4c:82:ed:f3:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3C:22:38:F6:50:36:A8:B6:4E:A9:DF:D7:A8:C8:8B:29:0B:68:88
X509v3 Authority Key Identifier:
keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:3e:d5:80:d9:06:d2:63:ca:60:18:b7:1d:74:de:cb:ba:
03:64:cb:c1:29:49:b4:81:8d:17:5c:ec:2b:16:21:6a:e8:44:
7d:6b:9f:da:e2:35:34:3b:00:1b:9d:e2:65:c9:bb:d5:2f:46:
ba:80:b4:d0:98:30:8b:c5:4e:9d:af:8d:ee:40:56:ff:11:c3:
02:ef:34:bf:6a:08:1e:36:5c:49:e8:e2:e5:eb:5f:62:c8:b7:
30:5e:4b:93:e1:0f:67:30:34:74:03:17:c8:ae:a5:8d:b7:ab:
d0:93:65:16:19:6f:5b:48:b4:db:aa:96:64:ea:2d:f9:fa:18:
01:e1:5e:60:52:85:d3:51:04:bc:42:d5:33:a2:42:93:da:36:
2a:57:97:4c:4a:b5:94:70:2a:46:1e:4b:a1:67:21:e2:39:5f:
0a:3a:0d:22:28:03:00:1e:47:f3:a3:31:9e:a1:79:28:be:58:
ca:a8:6d:5f:1a:a1:93:6c:39:85:46:31:bb:e8:fc:94:18:8d:
65:f0:ba:2b:75:ef:3a:7c:69:f7:23:0c:c9:51:e6:58:d8:bc:
0d:7c:92:f7:fa:65:89:2b:57:10:56:2d:2d:a0:ef:64:54:b5:
a7:6f:fc:3b:e8:be:54:2e:3c:a5:f6:74:d6:0f:42:d2:86:91:
c9:d7:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:08 2025 by rpki-client