Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft
File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json)
Hash identifier: 0OPxntyHmQFOSfA8F9UeYdxAIuK86o6/72jkC0q0dRw=
Subject key identifier: 3C:37:62:99:6A:DC:34:B2:9F:A1:5C:0A:95:8D:D6:B9:3E:5B:32:15
Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98
Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698
Certificate serial: 38E72DDDC16FCDFA5B18468E3033C708E0584920
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft
Manifest number: 2C
Signing time: Thu 30 Jan 2025 18:11:52 +0000
Manifest this update: Thu 30 Jan 2025 18:06:52 +0000
Manifest next update: Sun 02 Feb 2025 23:00:52 +0000
Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=)
2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: mrC/nXCtMkn/pzE98HD07ic+2lftR6H0Gw6p5LJ7zwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e7:2d:dd:c1:6f:cd:fa:5b:18:46:8e:30:33:c7:08:e0:58:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698
Validity
Not Before: Jan 30 18:06:52 2025 GMT
Not After : Feb 2 23:00:52 2025 GMT
Subject: CN=3C3762996ADC34B29FA15C0A958DD6B93E5B3215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:cd:7b:97:46:b3:fa:54:d0:14:42:0e:aa:
d1:ea:c7:26:f7:08:34:02:e0:3f:41:21:37:92:36:
7f:98:42:c8:0f:8d:9f:af:1f:e5:0d:ea:c6:50:3d:
8a:fb:fc:da:37:7e:0d:d0:db:fb:53:59:7b:17:5f:
09:e0:25:22:aa:1f:4e:68:d3:ac:9c:e5:9f:76:c0:
70:46:bd:31:a0:cc:ba:44:26:a4:53:9e:c4:f2:f1:
71:55:51:62:92:58:9b:0a:70:bf:71:23:cb:ba:1e:
7d:d9:f1:bc:6d:76:46:bd:0c:6d:48:bc:b9:58:2e:
5a:77:ed:a0:84:5b:ff:45:43:d1:58:6a:18:eb:cb:
a6:d1:f0:02:0d:49:5a:2d:d8:56:6e:6b:f6:36:61:
22:6a:35:5f:ad:2b:ce:00:9f:1d:74:ca:6d:34:c8:
74:ca:ed:d7:dd:00:07:6c:6d:9e:03:25:de:cd:05:
ad:22:4f:5a:a9:81:2f:1b:9e:72:1e:93:5e:33:ab:
0f:94:16:92:f2:ea:3c:61:b8:1c:27:e4:69:90:1a:
96:ba:28:9e:a0:7f:c4:b7:74:7c:f6:0b:fd:8b:cc:
71:3e:95:ab:81:bf:c4:59:0c:77:d3:94:28:bd:6a:
1d:f8:66:e4:01:2b:06:e4:d8:23:1d:93:ad:81:71:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:62:99:6A:DC:34:B2:9F:A1:5C:0A:95:8D:D6:B9:3E:5B:32:15
X509v3 Authority Key Identifier:
keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:db:3c:5c:09:d6:a7:db:a3:23:a6:91:17:cc:e1:20:a9:
ef:da:b7:39:48:41:ce:6e:62:26:7f:04:ba:ca:8a:4d:9e:54:
bc:22:d6:ad:e4:55:70:80:c0:bc:92:ec:6d:c8:7f:2b:d5:1e:
be:3a:29:36:7a:45:ca:55:1f:d2:55:32:3b:82:7d:10:b8:05:
25:42:5e:b7:3c:ec:7e:66:17:03:a0:c5:cc:02:58:5b:69:7d:
15:6c:b0:95:c0:9c:1b:2e:40:cb:c6:f7:1a:64:03:f6:51:99:
86:04:3f:17:59:0d:25:6e:54:7c:4b:90:00:72:e5:cf:10:b8:
25:c0:d8:1b:18:8c:06:e0:03:1f:53:39:64:63:53:26:2a:4f:
bf:7a:62:b8:71:22:06:75:65:60:75:f5:10:1c:4e:c8:4b:ae:
e3:d3:e0:58:c9:cc:9b:09:77:23:a2:81:3f:64:b4:46:b7:70:
de:3e:df:b2:90:a4:a3:f0:90:d8:67:06:55:77:3f:89:9f:2c:
d3:53:e0:82:86:5b:22:c5:9c:a5:f2:08:a2:cf:d1:63:6a:42:
08:d6:0e:12:ce:91:25:1c:16:11:dd:b3:20:6f:e0:25:75:e8:
18:cc:03:2c:7b:a1:2f:05:64:e1:e8:c0:89:5c:f5:ae:f9:31:
75:08:35:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOOct3cFvzfpbGEaOMDPHCOBYSSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD
QzYxQjY5ODAeFw0yNTAxMzAxODA2NTJaFw0yNTAyMDIyMzAwNTJaMDMxMTAvBgNV
BAMTKDNDMzc2Mjk5NkFEQzM0QjI5RkExNUMwQTk1OERENkI5M0U1QjMyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTds17l0az+lTQFEIOqtHqxyb3
CDQC4D9BITeSNn+YQsgPjZ+vH+UN6sZQPYr7/No3fg3Q2/tTWXsXXwngJSKqH05o
06yc5Z92wHBGvTGgzLpEJqRTnsTy8XFVUWKSWJsKcL9xI8u6Hn3Z8bxtdka9DG1I
vLlYLlp37aCEW/9FQ9FYahjry6bR8AINSVot2FZua/Y2YSJqNV+tK84Anx10ym00
yHTK7dfdAAdsbZ4DJd7NBa0iT1qpgS8bnnIek14zqw+UFpLy6jxhuBwn5GmQGpa6
KJ6gf8S3dHz2C/2LzHE+lauBv8RZDHfTlCi9ah34ZuQBKwbk2CMdk62BcUwJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPDdimWrcNLKfoVwKlY3WuT5bMhUwHwYDVR0j
BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5
QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx
QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh
MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2
N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKPH2zxcCdan26MjppEXzOEgqe/atzlIQc5u
YiZ/BLrKik2eVLwi1q3kVXCAwLyS7G3IfyvVHr46KTZ6RcpVH9JVMjuCfRC4BSVC
Xrc87H5mFwOgxcwCWFtpfRVssJXAnBsuQMvG9xpkA/ZRmYYEPxdZDSVuVHxLkABy
5c8QuCXA2BsYjAbgAx9TOWRjUyYqT796YrhxIgZ1ZWB19RAcTshLruPT4FjJzJsJ
dyOigT9ktEa3cN4+37KQpKPwkNhnBlV3P4mfLNNT4IKGWyLFnKXyCKLP0WNqQgjW
DhLOkSUcFhHdsyBv4CV16BjMAyx7oS8FZOHowIlc9a75MXUINfU=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:41 2025 by rpki-client