Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft
File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json)
Hash identifier: nCnCUeCZpn+S11DkXmWK/Wv0f1aB8lfZVkmeFuf6ro4=
Subject key identifier: 65:FC:F8:69:CB:38:DB:D2:35:A5:9A:E2:79:86:E5:E8:47:E9:5D:39
Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67
Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967
Certificate serial: 189A0A1E061786F2275F9A7E3442EA97622E40D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft
Manifest number: 01A3
Signing time: Wed 29 Jan 2025 19:50:50 +0000
Manifest this update: Wed 29 Jan 2025 19:45:50 +0000
Manifest next update: Sun 02 Feb 2025 07:10:50 +0000
Files and hashes: 1: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: U6q05of+/P63yysf4tiIXeBBZKL9CoKIEkXVpsmvc+o=)
2: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: a7bbLvivN5h778OSusowuH24mo9x9m39VMDSk/dwR+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9a:0a:1e:06:17:86:f2:27:5f:9a:7e:34:42:ea:97:62:2e:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967
Validity
Not Before: Jan 29 19:45:50 2025 GMT
Not After : Feb 2 07:10:50 2025 GMT
Subject: CN=65FCF869CB38DBD235A59AE27986E5E847E95D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:51:c2:d2:bb:43:5c:b7:49:a3:e7:2c:88:f0:
4b:e8:9c:dc:9a:1c:c9:84:5c:34:f1:20:39:4d:44:
2d:c8:49:fa:c9:31:9f:9c:7c:48:fe:38:24:b4:62:
e6:50:a5:f2:a0:8b:7c:a1:47:18:29:d6:dd:bb:66:
47:2d:60:6c:5e:d0:87:99:dd:fe:7c:c7:18:9e:3f:
ba:d8:06:77:2d:6d:0b:b4:21:40:51:29:24:71:90:
2a:a7:16:97:86:64:2c:ee:f3:2f:0f:55:c8:52:06:
85:a8:c2:de:9a:bb:65:06:8a:da:e7:cd:94:f1:38:
10:7b:62:26:59:83:dd:d7:32:2b:9d:4d:be:25:bd:
c7:b1:94:45:3d:e7:9a:d0:ef:84:3b:43:8f:5a:a5:
15:a1:e0:7a:44:c5:3f:32:d9:cd:b4:9d:3b:b5:a3:
b7:0e:06:2f:05:34:8c:db:8f:9f:63:0d:5f:e4:61:
3a:83:1f:2f:a0:48:96:c5:29:ba:67:79:1b:ce:34:
95:16:fa:8c:51:aa:21:72:72:c8:93:2a:37:04:7d:
3c:00:ae:91:a0:a9:ff:4d:51:a5:ea:d0:67:84:39:
0b:d7:7d:27:c0:ba:74:1f:5d:4e:52:bc:e5:63:53:
66:fe:72:7d:1f:cd:25:3a:2d:cd:47:1c:cb:cb:24:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FC:F8:69:CB:38:DB:D2:35:A5:9A:E2:79:86:E5:E8:47:E9:5D:39
X509v3 Authority Key Identifier:
keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:eb:b1:aa:d2:a5:d5:3b:7c:37:c8:17:72:cb:73:b8:84:
d3:3f:84:6f:8b:27:ee:d8:4e:9e:6a:b4:55:95:c9:14:00:c6:
aa:5b:2d:23:cb:2b:e5:a8:88:2c:86:58:f4:a4:cc:c8:79:b7:
1a:6f:a8:ad:05:eb:a1:66:56:36:7c:86:8d:63:1e:34:3a:a7:
9a:67:fa:0d:24:9e:cf:61:d8:84:7c:23:70:f2:83:8e:d6:3f:
23:df:9b:17:73:74:1a:df:69:c2:ee:a3:a3:32:9f:d3:e6:aa:
d3:eb:eb:33:30:15:88:bb:27:91:0c:af:61:aa:e8:f6:92:58:
3f:af:67:96:62:23:49:b9:dc:46:bd:98:bb:10:30:17:cf:d1:
ac:d8:8c:a0:dd:3b:90:ea:58:1f:96:2f:bd:00:9a:ef:bc:dd:
90:ee:88:bb:8c:49:75:cd:3c:2b:db:7c:a1:0c:6c:27:d6:65:
b3:49:76:ae:d2:07:9a:72:3a:40:e7:36:d9:61:f2:da:55:b0:
c3:6e:2b:69:22:b6:d2:7c:c7:38:fc:ce:0b:8a:c0:b8:11:da:
d6:18:4e:e9:4f:cf:64:8b:14:a5:3d:35:6b:f6:47:6c:68:dc:
60:80:5f:25:1e:17:6e:59:82:67:be:8e:9d:d6:6b:b5:98:6e:
d9:bf:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:21:00 2025 by rpki-client