Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft
File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json)
Hash identifier: RITUGg1JJCRNNinnHOlBr2kMGmSQgvEA/zKTGBs26ns=
Subject key identifier: 7A:CD:88:8B:D5:71:CF:00:96:94:49:2C:F8:5B:4F:56:69:AF:0B:05
Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14
Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114
Certificate serial: 1CAFF252B25ED5E6A21A504E45E9168622E1FF68
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft
Manifest number: 0147
Signing time: Wed 29 Jan 2025 16:40:47 +0000
Manifest this update: Wed 29 Jan 2025 16:35:47 +0000
Manifest next update: Sat 01 Feb 2025 19:44:47 +0000
Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: qgOxPiObltgokCNJjjzvZytUzJcAkOhf3aNir3pXjPc=)
2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:af:f2:52:b2:5e:d5:e6:a2:1a:50:4e:45:e9:16:86:22:e1:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114
Validity
Not Before: Jan 29 16:35:47 2025 GMT
Not After : Feb 1 19:44:47 2025 GMT
Subject: CN=7ACD888BD571CF009694492CF85B4F5669AF0B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:cb:58:cc:27:94:04:1a:30:53:e7:3b:44:
6f:ae:04:f4:cf:f6:d6:8c:e4:25:91:19:56:3a:0e:
44:9a:3f:fc:e4:62:26:cf:61:98:65:70:96:97:86:
e2:d2:23:f6:c9:63:48:b6:6b:60:a5:f4:55:b7:98:
6b:69:0e:8c:b0:b0:f4:6e:18:cb:2a:ca:12:45:58:
c2:8a:f6:a3:a7:cf:06:88:97:d0:ac:f2:29:67:91:
5f:e0:ff:48:1c:0e:10:18:59:e0:0d:98:72:4a:99:
5d:19:ed:ff:e3:02:51:82:1b:0d:6d:1a:f1:d1:44:
d3:42:97:bf:a3:9e:e4:87:ea:c6:0a:b8:f1:e1:31:
06:8e:4a:66:d8:8d:06:c3:43:e6:b4:11:86:f7:49:
a5:25:bb:10:d0:4d:63:bb:1a:3b:cf:91:d5:66:9c:
48:2b:45:8f:0d:a4:52:98:ed:62:cc:ea:ab:fa:5b:
46:14:2e:de:d9:c3:0e:6f:2b:cc:20:8d:be:57:2f:
2a:f1:af:96:2c:2c:4d:6a:2a:00:60:53:03:7c:b8:
fa:2f:1b:af:46:22:75:38:03:a4:74:cb:35:f0:93:
d4:c0:0a:fd:87:38:f0:a0:24:e6:e9:16:00:ea:69:
3e:3f:07:92:f1:cf:55:06:3d:fc:c9:9c:c9:2b:97:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:88:8B:D5:71:CF:00:96:94:49:2C:F8:5B:4F:56:69:AF:0B:05
X509v3 Authority Key Identifier:
keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:f8:33:d5:c9:ef:49:0a:6a:b2:29:fa:9e:f8:dd:50:d4:
a9:0a:f0:28:34:1d:08:3a:f0:13:bb:42:f6:71:e4:8f:6f:f7:
95:68:b4:a4:c1:78:d8:f6:09:4f:46:a7:9c:2b:72:67:05:8b:
e3:12:8c:00:c4:99:85:b1:08:7d:f6:63:f1:94:ab:17:f5:fe:
4e:d4:f6:1d:f1:3a:a0:5d:79:ca:71:ae:76:02:34:65:51:be:
ad:46:7d:f5:e5:24:ae:b4:bc:a5:a4:4b:5d:f1:f0:12:cc:7f:
e7:c8:c7:2d:a3:75:09:81:5b:7b:44:3e:07:68:86:b9:b6:a4:
86:3a:73:8b:92:85:f5:e7:dc:cc:3e:bd:fa:db:dc:dc:1a:65:
05:47:80:ba:be:e5:c2:25:1e:26:83:b1:6c:6b:34:b4:cb:42:
97:32:4d:16:73:de:60:40:18:95:b1:7b:36:a2:f1:b7:9c:40:
2f:d0:cd:99:65:28:e2:a4:ea:a7:e2:82:b5:3b:08:c7:2e:f9:
bb:73:ba:f8:33:af:26:1c:ee:89:25:75:44:12:b7:1f:81:00:
a0:80:99:cf:c5:ee:1a:ae:d1:8f:c4:10:b3:46:6e:5f:65:7d:
ce:4e:a7:51:61:6e:28:a6:67:00:4d:34:af:3d:7a:75:6f:e8:
a8:1d:c1:97
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHK/yUrJe1eaiGlBORekWhiLh/2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC
NTc4NDExNDAeFw0yNTAxMjkxNjM1NDdaFw0yNTAyMDExOTQ0NDdaMDMxMTAvBgNV
BAMTKDdBQ0Q4ODhCRDU3MUNGMDA5Njk0NDkyQ0Y4NUI0RjU2NjlBRjBCMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVMtYzCeUBBowU+c7RG+uBPTP
9taM5CWRGVY6DkSaP/zkYibPYZhlcJaXhuLSI/bJY0i2a2Cl9FW3mGtpDoywsPRu
GMsqyhJFWMKK9qOnzwaIl9Cs8ilnkV/g/0gcDhAYWeANmHJKmV0Z7f/jAlGCGw1t
GvHRRNNCl7+jnuSH6sYKuPHhMQaOSmbYjQbDQ+a0EYb3SaUluxDQTWO7GjvPkdVm
nEgrRY8NpFKY7WLM6qv6W0YULt7Zww5vK8wgjb5XLyrxr5YsLE1qKgBgUwN8uPov
G69GInU4A6R0yzXwk9TACv2HOPCgJObpFgDqaT4/B5Lxz1UGPfzJnMkrl0bnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUes2Ii9VxzwCWlEks+FtPVmmvCwUwHwYDVR0j
BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF
MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4
NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl
ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG
OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG4A+DPVye9JCmqyKfqe+N1Q1KkK8Cg0HQg6
8BO7QvZx5I9v95VotKTBeNj2CU9Gp5wrcmcFi+MSjADEmYWxCH32Y/GUqxf1/k7U
9h3xOqBdecpxrnYCNGVRvq1GffXlJK60vKWkS13x8BLMf+fIxy2jdQmBW3tEPgdo
hrm2pIY6c4uShfXn3Mw+vfrb3NwaZQVHgLq+5cIlHiaDsWxrNLTLQpcyTRZz3mBA
GJWxezai8becQC/QzZllKOKk6qfigrU7CMcu+btzuvgzryYc7okldUQStx+BAKCA
mc/F7hqu0Y/EELNGbl9lfc5Op1FhbiimZwBNNK89enVv6KgdwZc=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:33 2025 by rpki-client