Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json)
Hash identifier: ppvLmLDWfWRQ8U/6hNEj2t7qF4LSM5v1WI7YUQLG2EQ=
Subject key identifier: 5D:AB:96:08:E5:54:75:EF:88:AB:F6:D3:0C:D4:B3:BB:D3:A6:14:CA
Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA
Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA
Certificate serial: 401FB95D4283A67D0C906815FB5929115A6B11E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
Manifest number: AE
Signing time: Thu 30 Jan 2025 17:10:00 +0000
Manifest this update: Thu 30 Jan 2025 17:05:00 +0000
Manifest next update: Mon 03 Feb 2025 02:28:00 +0000
Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=)
2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: 1orY8C9s8MFTyV/Mi0qeFsVxRBPwuYNqtqYhUlOH1GA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1f:b9:5d:42:83:a6:7d:0c:90:68:15:fb:59:29:11:5a:6b:11:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA
Validity
Not Before: Jan 30 17:05:00 2025 GMT
Not After : Feb 3 02:28:00 2025 GMT
Subject: CN=5DAB9608E55475EF88ABF6D30CD4B3BBD3A614CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:18:47:71:52:1a:1e:ca:0b:9f:02:0e:7c:
df:b3:35:f3:18:44:88:c0:9f:ea:24:dd:f1:30:ef:
15:85:1e:24:0e:5b:2c:99:f5:8c:21:88:f0:d0:f9:
b0:8a:84:5b:75:1f:78:a7:8b:dd:55:83:9e:6e:b9:
c1:bb:80:f8:db:1a:e8:50:02:b7:9c:08:da:a5:c5:
75:a8:4e:0c:41:04:a1:51:c0:b7:9b:ad:af:5f:17:
4f:e8:f4:7d:ff:24:09:c5:04:65:49:f9:50:4f:2d:
f7:d2:3a:24:67:8d:d8:4e:dd:0c:14:a1:89:9c:9f:
f6:6d:ee:b5:97:99:17:4e:01:db:04:d1:3b:41:3e:
71:b4:1d:59:e2:5d:1c:0e:54:c7:0e:86:4c:3d:45:
fb:f6:da:9f:61:1c:81:d0:b5:46:04:95:9f:9b:03:
10:37:f0:df:9d:11:b3:99:5c:db:b7:a1:75:0d:ca:
f9:10:12:16:85:87:b2:3b:4a:5c:bd:15:8a:2b:33:
91:7e:e5:e9:75:a5:5e:0c:8e:f1:bf:4c:c8:54:e1:
82:0f:2d:ae:90:76:8a:90:1e:29:20:13:4b:e7:20:
0a:4b:c1:e1:f7:36:49:f2:e7:72:18:00:1e:d7:12:
86:f7:72:80:e0:19:85:de:e8:1e:03:d7:0f:d7:04:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:96:08:E5:54:75:EF:88:AB:F6:D3:0C:D4:B3:BB:D3:A6:14:CA
X509v3 Authority Key Identifier:
keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:16:97:56:dc:38:e3:57:e6:58:4a:28:79:1e:9d:39:c9:38:
2d:e7:4c:42:75:18:47:9f:53:58:23:1c:35:c6:c7:7b:2e:5c:
2d:ea:80:87:78:7e:c1:82:1e:6b:4c:4e:f0:2e:b3:02:4b:36:
46:8e:9c:22:cc:6b:0a:f3:e8:0a:71:50:0b:33:75:84:c4:4f:
c9:42:c8:56:27:e0:d7:71:e5:ca:87:1b:60:c6:44:33:03:f9:
64:3a:9d:ae:05:1b:a1:1e:7e:c0:8a:5e:a7:8a:ce:d5:e5:0f:
bb:4f:b4:dc:32:35:8b:45:1f:a7:15:9a:5b:00:ec:a9:88:bf:
6c:f2:7e:42:98:cd:20:da:06:3b:e3:c4:a0:d8:ff:26:5e:fb:
76:fc:2c:74:76:08:a9:93:ec:47:15:7e:9e:7d:8e:5b:7d:2c:
eb:38:ce:c4:86:4d:c5:f2:89:69:83:97:6c:5b:00:f0:c5:d8:
36:36:21:8c:f7:c2:40:8f:34:fe:34:e8:9e:5d:9d:1b:8f:f7:
50:f0:8a:0c:6a:9f:97:3a:ce:db:a3:a5:cd:ad:17:1a:5b:2f:
eb:d8:ea:de:05:6e:e9:2f:47:ef:97:f8:09:bb:95:44:ce:2e:
54:b8:39:17:9f:b5:a0:f5:5d:0b:6d:97:48:8b:29:57:06:7b:
86:07:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:59 2025 by rpki-client