
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft
File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json)
Hash identifier: wzq1ICXNN8gMqQ+WFuSYwJkPZA5DFHtvyYNw+nA4hlQ=
Subject key identifier: 9E:56:DD:45:2F:54:94:A5:B1:3F:B5:36:C8:F7:0C:38:B8:07:68:8B
Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0
Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0
Certificate serial: 3A85286E5F112D3E6F857DC3D8595ACBB888C2A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft
Manifest number: 0322
Signing time: Thu 30 Jan 2025 01:20:39 +0000
Manifest this update: Thu 30 Jan 2025 01:15:39 +0000
Manifest next update: Sun 02 Feb 2025 10:32:39 +0000
Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: 6CpN8aBw/RZzk7vZX82p71fUs1ZsrBjhdxlC+CO80+A=)
2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: iydZ6Rm8ql+zZMjrfRIgoFX8pyuUulES1ohs8XDf9vk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:85:28:6e:5f:11:2d:3e:6f:85:7d:c3:d8:59:5a:cb:b8:88:c2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0
Validity
Not Before: Jan 30 01:15:39 2025 GMT
Not After : Feb 2 10:32:39 2025 GMT
Subject: CN=9E56DD452F5494A5B13FB536C8F70C38B807688B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9f:55:42:a9:3e:d0:15:b9:c5:97:56:44:01:
6a:97:85:71:3d:98:9e:e1:aa:0e:23:44:d9:71:f4:
39:ec:9d:16:8e:23:e5:f5:54:5c:30:f7:d2:31:78:
04:b7:9c:35:c8:f8:d4:07:83:cd:de:f4:ec:e1:e6:
a9:a0:d0:1a:53:d3:f9:14:95:88:31:28:f2:e9:27:
63:0f:3f:a5:80:75:f8:53:c3:db:41:b2:bd:82:21:
5b:b9:74:7a:69:8a:56:d1:b1:0a:e1:db:a8:a5:61:
c9:63:e5:6d:d7:b9:29:9f:f9:51:84:50:92:37:67:
21:53:b3:1a:0d:f8:36:e1:7d:cb:5a:9b:af:30:d9:
6c:8c:16:cd:89:10:fb:2c:ca:f3:0d:43:69:d1:a7:
a0:f5:d5:79:2a:a0:67:39:9d:b1:a3:a4:15:97:77:
9c:4c:fc:6b:b9:94:e8:e3:d5:69:4d:c3:88:8e:d8:
2c:ac:20:84:ab:1d:af:c6:43:ae:c5:af:0c:c1:bb:
2c:c5:f3:8e:93:2e:fd:c3:61:06:b9:32:02:10:0a:
b9:97:e3:21:28:b3:5e:8a:39:07:74:cf:ab:a1:44:
ce:5c:37:af:be:a6:e2:d6:6b:23:b3:8e:f7:a4:24:
82:5c:7f:42:dd:56:72:a7:0d:47:f7:ef:a7:bd:4e:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:DD:45:2F:54:94:A5:B1:3F:B5:36:C8:F7:0C:38:B8:07:68:8B
X509v3 Authority Key Identifier:
keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c6:bd:b8:dc:a0:b6:e8:62:87:a3:52:e6:00:32:da:69:53:
28:0e:7b:a3:e7:be:95:5d:53:84:d9:2d:bf:0c:6a:39:ee:b9:
3b:11:59:5a:4b:14:ee:be:99:c6:bb:06:36:6a:c0:b2:41:e5:
49:f3:26:0a:92:b2:7a:c3:9b:67:bd:9b:04:0a:86:14:24:72:
44:d2:e8:76:0a:24:23:c5:8c:84:d7:3a:5a:1b:2c:ad:be:74:
5e:c4:c4:7f:1f:d6:6c:c3:21:45:15:5e:ef:5b:fb:17:f7:9c:
2b:8a:f9:2a:b2:9d:3b:95:2c:54:4e:06:af:ca:2b:62:8a:23:
de:29:a5:7b:67:51:8b:48:b5:95:32:2a:a3:e8:2c:6d:46:d2:
08:10:81:bf:6b:50:cb:16:6f:a4:96:08:46:5f:7c:cb:9a:6e:
fd:0b:e4:44:16:bb:4d:61:45:ed:f9:96:ea:b5:c6:c4:aa:67:
67:cb:fc:6e:cc:cd:c6:1b:69:78:2a:29:f2:52:39:4e:a8:54:
44:20:ab:65:d6:10:b4:95:bd:6c:e2:1d:96:9c:70:0d:31:45:
20:62:12:03:40:df:54:c6:10:23:b9:cf:62:fb:a5:1d:74:37:
4e:45:d0:67:4c:c5:ba:44:7b:1c:84:3f:bf:cc:1f:d2:0c:1e:
7c:35:74:33
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOoUobl8RLT5vhX3D2Flay7iIwqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD
REUxRTVEMDAeFw0yNTAxMzAwMTE1MzlaFw0yNTAyMDIxMDMyMzlaMDMxMTAvBgNV
BAMTKDlFNTZERDQ1MkY1NDk0QTVCMTNGQjUzNkM4RjcwQzM4QjgwNzY4OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwn1VCqT7QFbnFl1ZEAWqXhXE9
mJ7hqg4jRNlx9DnsnRaOI+X1VFww99IxeAS3nDXI+NQHg83e9Ozh5qmg0BpT0/kU
lYgxKPLpJ2MPP6WAdfhTw9tBsr2CIVu5dHppilbRsQrh26ilYclj5W3XuSmf+VGE
UJI3ZyFTsxoN+Dbhfctam68w2WyMFs2JEPssyvMNQ2nRp6D11XkqoGc5nbGjpBWX
d5xM/Gu5lOjj1WlNw4iO2CysIISrHa/GQ67FrwzBuyzF846TLv3DYQa5MgIQCrmX
4yEos16KOQd0z6uhRM5cN6++puLWayOzjvekJIJcf0LdVnKnDUf376e9TrFnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnlbdRS9UlKWxP7U2yPcMOLgHaIswHwYDVR0j
BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1
RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx
RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm
MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3
MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGXGvbjcoLboYoejUuYAMtppUygOe6PnvpVd
U4TZLb8MajnuuTsRWVpLFO6+mca7BjZqwLJB5UnzJgqSsnrDm2e9mwQKhhQkckTS
6HYKJCPFjITXOlobLK2+dF7ExH8f1mzDIUUVXu9b+xf3nCuK+SqynTuVLFROBq/K
K2KKI94ppXtnUYtItZUyKqPoLG1G0ggQgb9rUMsWb6SWCEZffMuabv0L5EQWu01h
Re35luq1xsSqZ2fL/G7MzcYbaXgqKfJSOU6oVEQgq2XWELSVvWziHZaccA0xRSBi
EgNA31TGECO5z2L7pR10N05F0GdMxbpEexyEP7/MH9IMHnw1dDM=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:38 2025 by rpki-client