Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft
File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json)
Hash identifier: JrCN1j1RGeSkzsjg3m+3CVKKEONJcTboUp+JsIrFZFM=
Subject key identifier: 11:4D:90:CD:B9:25:45:81:EB:86:2F:46:0C:D2:46:D0:CD:7B:2F:60
Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02
Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002
Certificate serial: 5BB726EE0FF1F42EFBBA7509DE3B0202FB6FC138
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft
Manifest number: 7C
Signing time: Fri 28 Mar 2025 01:02:01 +0000
Manifest this update: Fri 28 Mar 2025 00:57:01 +0000
Manifest next update: Mon 31 Mar 2025 02:28:01 +0000
Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: WrPm09Kkx6fpJJz+90fweUXIss8HmA4j4dVshUfH63Y=)
2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: pQCtNd2+RXtFnrSf+6sVuQqtxv0QiGcHuuERYnQ23YQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b7:26:ee:0f:f1:f4:2e:fb:ba:75:09:de:3b:02:02:fb:6f:c1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002
Validity
Not Before: Mar 28 00:57:01 2025 GMT
Not After : Mar 31 02:28:01 2025 GMT
Subject: CN=114D90CDB9254581EB862F460CD246D0CD7B2F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:02:02:ab:36:6e:e5:ac:89:c4:8c:4b:3f:
34:a0:19:4c:94:95:60:a0:6b:33:0a:c6:dd:18:82:
98:f6:cb:96:63:75:36:6f:a5:63:25:24:2a:df:93:
b4:8a:c3:e4:84:c1:83:0f:c5:98:15:4e:77:15:c5:
90:78:4e:c5:e3:45:6b:3f:87:50:dc:0b:4a:07:6d:
d4:47:36:5d:76:f2:7e:fb:88:7f:38:db:d8:e6:23:
3c:03:66:c0:6c:04:12:67:f4:0b:6b:b5:3e:fd:2d:
8e:2c:3a:18:0f:b6:03:b2:0d:26:c7:e0:b2:ef:12:
92:0d:cd:12:db:76:8c:a4:e6:2b:ee:ff:b6:87:a6:
5e:74:66:58:ee:b9:14:ef:8c:dd:5e:20:03:8f:6f:
84:02:ed:b0:b2:6c:a1:1c:c9:59:de:f3:0b:ab:0e:
cc:6a:b2:e5:9a:b2:a5:cd:09:9f:66:c8:81:be:72:
e6:02:ab:e9:29:ba:a2:26:10:36:3a:ef:1b:0b:b1:
54:c5:50:ea:b2:ea:2e:60:72:3a:f3:60:c7:c9:43:
fd:c8:d6:63:d2:f4:de:97:a3:2e:a5:64:60:c5:68:
c3:79:8f:00:50:56:f7:4c:3e:48:c6:1b:c6:bb:70:
5d:dc:9a:07:c2:bd:84:84:dd:70:e6:46:f3:1d:2a:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4D:90:CD:B9:25:45:81:EB:86:2F:46:0C:D2:46:D0:CD:7B:2F:60
X509v3 Authority Key Identifier:
keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:95:1f:a4:b9:de:ab:0d:13:c1:77:43:78:c8:9f:b4:58:
e3:19:27:af:15:aa:3d:27:87:59:74:1d:78:2f:52:63:b3:ec:
9a:68:a1:a6:22:26:b1:9f:10:8d:12:2a:b5:99:1b:e1:17:5e:
5c:5b:a4:ca:a9:f2:7b:a5:e2:dc:b9:a5:86:26:d0:a4:a3:3a:
ad:a4:c0:6b:1c:f0:8d:47:ef:2b:1c:7e:60:a3:4e:78:f6:92:
b3:7a:ad:70:74:38:0f:84:13:c0:1a:6a:4b:4b:b9:f1:fc:6d:
51:52:a5:c0:72:f6:3c:b9:48:48:41:00:d2:05:da:d1:26:e9:
4b:dd:f4:aa:33:a0:dd:58:f4:4c:28:db:b0:3d:f2:12:86:9a:
4a:4d:b0:11:3b:50:ef:a7:eb:50:4e:d8:3c:f8:be:54:91:f2:
07:6c:63:f9:cd:9d:9b:34:f8:bf:cd:ab:11:d3:a9:b4:6f:14:
7c:84:da:fe:fd:ab:9a:37:93:fa:66:2d:f1:56:16:6d:67:0b:
88:e6:43:1c:f2:a8:c9:00:3f:b2:b5:31:91:1e:e5:a4:1e:42:
f3:88:76:8b:3a:20:f9:3e:24:8f:d8:1e:fd:d0:c4:ba:69:d1:
b2:3c:4c:76:84:f9:6a:5d:94:a7:2e:19:a2:73:68:ac:c5:a9:
00:79:5f:b5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW7cm7g/x9C77unUJ3jsCAvtvwTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1
MTM2QzAwMjAeFw0yNTAzMjgwMDU3MDFaFw0yNTAzMzEwMjI4MDFaMDMxMTAvBgNV
BAMTKDExNEQ5MENEQjkyNTQ1ODFFQjg2MkY0NjBDRDI0NkQwQ0Q3QjJGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJwICqzZu5ayJxIxLPzSgGUyU
lWCgazMKxt0Ygpj2y5ZjdTZvpWMlJCrfk7SKw+SEwYMPxZgVTncVxZB4TsXjRWs/
h1DcC0oHbdRHNl128n77iH8429jmIzwDZsBsBBJn9AtrtT79LY4sOhgPtgOyDSbH
4LLvEpINzRLbdoyk5ivu/7aHpl50ZljuuRTvjN1eIAOPb4QC7bCybKEcyVne8wur
DsxqsuWasqXNCZ9myIG+cuYCq+kpuqImEDY67xsLsVTFUOqy6i5gcjrzYMfJQ/3I
1mPS9N6Xoy6lZGDFaMN5jwBQVvdMPkjGG8a7cF3cmgfCvYSE3XDmRvMdKo3nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEU2QzbklRYHrhi9GDNJG0M17L2AwHwYDVR0j
BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw
NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2
QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1
NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0
NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABU+lR+kud6rDRPBd0N4yJ+0WOMZJ68Vqj0n
h1l0HXgvUmOz7JpooaYiJrGfEI0SKrWZG+EXXlxbpMqp8nul4ty5pYYm0KSjOq2k
wGsc8I1H7yscfmCjTnj2krN6rXB0OA+EE8AaaktLufH8bVFSpcBy9jy5SEhBANIF
2tEm6Uvd9KozoN1Y9Ewo27A98hKGmkpNsBE7UO+n61BO2Dz4vlSR8gdsY/nNnZs0
+L/NqxHTqbRvFHyE2v79q5o3k/pmLfFWFm1nC4jmQxzyqMkAP7K1MZEe5aQeQvOI
dos6IPk+JI/YHv3QxLpp0bI8THaE+WpdlKcuGaJzaKzFqQB5X7U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:49 2025 by rpki-client