
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft
File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json)
Hash identifier: MOV/VImT9gkMahfBA8ROTUEzM8a0ItkOkPktDYTXNgM=
Subject key identifier: 8F:21:7C:A2:16:4A:79:66:AD:DC:23:05:FB:C4:5C:9C:AF:29:D6:0E
Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB
Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
Certificate serial: 63DBCD8D96511A308DA5DFD6A13FEAF1FE995111
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft
Manifest number: 01A0
Signing time: Thu 30 Jan 2025 19:11:11 +0000
Manifest this update: Thu 30 Jan 2025 19:06:11 +0000
Manifest next update: Mon 03 Feb 2025 06:53:11 +0000
Files and hashes: 1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: ir5XqbuYDzNkACrKSM5OrQEIYHK8NKyduvvNTWtxaCY=)
2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: JeyEC5GT44T1l/mY8nDqe/JsiSipfq9Qfm+r93xH6/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:db:cd:8d:96:51:1a:30:8d:a5:df:d6:a1:3f:ea:f1:fe:99:51:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
Validity
Not Before: Jan 30 19:06:11 2025 GMT
Not After : Feb 3 06:53:11 2025 GMT
Subject: CN=8F217CA2164A7966ADDC2305FBC45C9CAF29D60E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:e4:f1:85:02:ff:d6:ae:ec:cd:04:c3:a9:
c1:73:29:68:24:7a:32:7e:4d:32:fc:d2:b8:e3:ea:
66:d3:41:c4:b5:01:0c:d1:ec:77:13:9f:6a:d1:e9:
4f:91:9e:2e:fd:e0:6c:8e:35:f2:eb:d7:14:ff:1e:
07:2b:8d:fa:a3:1a:f4:73:bf:ec:ba:60:98:1f:0c:
c7:fa:37:8b:e5:00:8b:db:45:c3:ff:fe:00:ae:96:
44:ce:60:73:61:a4:cb:d9:d4:87:dd:cf:2c:35:25:
4b:5f:05:a7:80:00:c1:ea:bb:af:dc:14:8c:cf:ff:
60:63:b1:b9:bd:37:7b:48:3b:3d:b8:43:c9:30:a0:
b4:97:2a:78:36:bc:d1:91:5e:89:a1:bb:a1:65:c1:
ba:be:bf:27:b2:e1:9c:c0:f5:1b:66:d9:8a:2f:ab:
30:15:c1:e9:19:6d:5a:a8:65:c8:3b:f7:73:fa:9b:
d3:9f:d0:b9:a7:ca:6d:83:9d:d6:60:02:94:8d:3b:
a6:1a:e7:b2:68:ce:26:91:7a:01:ef:45:81:ca:d3:
06:15:0f:4b:cf:e6:93:cb:57:7f:65:44:c0:4c:d1:
2b:9f:ee:5d:5b:77:31:f0:d5:04:34:bf:c7:e8:30:
b7:3f:86:2a:2b:37:2e:eb:19:76:82:8d:78:97:f4:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:7C:A2:16:4A:79:66:AD:DC:23:05:FB:C4:5C:9C:AF:29:D6:0E
X509v3 Authority Key Identifier:
keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:52:e4:a2:53:50:2d:55:c5:11:b6:04:5f:90:95:1b:d9:4e:
27:10:05:89:d2:c6:2e:16:4b:9f:48:75:34:6d:97:2b:8c:42:
3e:db:70:17:9e:ba:b0:dc:d0:ca:e4:3c:a7:b7:b2:22:df:9e:
0a:4a:93:f6:ae:be:31:e2:37:37:50:92:2e:b8:83:f3:99:72:
47:f8:d6:1a:1b:28:d4:1d:1d:f9:2c:85:92:39:74:a6:f0:97:
f8:76:a0:81:52:e8:c1:e9:18:7f:6f:63:e1:a7:83:34:7a:20:
ba:bb:e7:cb:1f:c7:bd:66:68:02:f4:d8:a3:16:df:83:d0:c3:
a5:0e:99:3d:19:44:c0:bd:42:7d:6a:2a:51:9f:d7:6a:f2:61:
16:b5:74:b7:f4:08:f2:9d:16:73:2f:60:3c:25:f2:6b:be:bb:
25:50:6d:d1:c1:05:d8:56:95:34:ce:71:1f:48:68:a7:30:68:
8d:f5:53:35:31:0d:b1:5a:9a:94:89:cf:1e:1c:86:ca:26:0b:
1d:66:88:38:d7:db:1d:fb:ce:d3:d1:f0:ea:07:c0:29:f4:8b:
04:57:ca:bb:bd:bf:2c:c5:53:d7:75:fc:cb:e3:2f:e3:08:7e:
f6:ff:f9:4c:2f:22:31:fe:99:24:f7:dd:9a:dd:de:81:67:a8:
6a:39:b9:34
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY9vNjZZRGjCNpd/WoT/q8f6ZUREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4
MTkxMURCQjAeFw0yNTAxMzAxOTA2MTFaFw0yNTAyMDMwNjUzMTFaMDMxMTAvBgNV
BAMTKDhGMjE3Q0EyMTY0QTc5NjZBRERDMjMwNUZCQzQ1QzlDQUYyOUQ2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qOTxhQL/1q7szQTDqcFzKWgk
ejJ+TTL80rjj6mbTQcS1AQzR7HcTn2rR6U+Rni794GyONfLr1xT/HgcrjfqjGvRz
v+y6YJgfDMf6N4vlAIvbRcP//gCulkTOYHNhpMvZ1Ifdzyw1JUtfBaeAAMHqu6/c
FIzP/2Bjsbm9N3tIOz24Q8kwoLSXKng2vNGRXomhu6Flwbq+vyey4ZzA9Rtm2Yov
qzAVwekZbVqoZcg793P6m9Of0Lmnym2DndZgApSNO6Ya57JoziaRegHvRYHK0wYV
D0vP5pPLV39lRMBM0Suf7l1bdzHw1QQ0v8foMLc/hiorNy7rGXaCjXiX9PxRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjyF8ohZKeWat3CMF+8RcnK8p1g4wHwYDVR0j
BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF
MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx
MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj
MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5
NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIxS5KJTUC1VxRG2BF+QlRvZTicQBYnSxi4W
S59IdTRtlyuMQj7bcBeeurDc0MrkPKe3siLfngpKk/auvjHiNzdQki64g/OZckf4
1hobKNQdHfkshZI5dKbwl/h2oIFS6MHpGH9vY+GngzR6ILq758sfx71maAL02KMW
34PQw6UOmT0ZRMC9Qn1qKlGf12ryYRa1dLf0CPKdFnMvYDwl8mu+uyVQbdHBBdhW
lTTOcR9IaKcwaI31UzUxDbFampSJzx4chsomCx1miDjX2x37ztPR8OoHwCn0iwRX
yru9vyzFU9d1/MvjL+MIfvb/+UwvIjH+mST33Zrd3oFnqGo5uTQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:54 2025 by rpki-client