Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json)
Hash identifier: EMSRT3vhlMIW26tIwqhazJD8TrmFgsG5OnQZhPog3qY=
Subject key identifier: 68:5E:65:A7:79:B5:DD:AA:6C:E9:65:73:05:6A:E3:51:92:B9:F5:2A
Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Certificate serial: 56EFADD69F6A4A89DBBDA6FD46F780360795D83C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
Manifest number: 01D3
Signing time: Fri 28 Mar 2025 05:11:46 +0000
Manifest this update: Fri 28 Mar 2025 05:06:46 +0000
Manifest next update: Mon 31 Mar 2025 10:34:46 +0000
Files and hashes: 1: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: 5DkiA4nhunKea7qQtuaDsV489KBcbOMVoQDN1Ian9lQ=)
2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: bu4LtbxxfvYhSmPVYXsHJnQ8u6QDASxNerDLPSby9+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ef:ad:d6:9f:6a:4a:89:db:bd:a6:fd:46:f7:80:36:07:95:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Validity
Not Before: Mar 28 05:06:46 2025 GMT
Not After : Mar 31 10:34:46 2025 GMT
Subject: CN=685E65A779B5DDAA6CE96573056AE35192B9F52A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:79:f3:04:ab:6f:56:c0:19:89:6c:aa:00:
b7:1e:f6:59:f3:b7:a2:60:f9:bb:e5:a5:e2:e5:bf:
62:6f:ac:79:9d:ed:1e:3f:37:76:a2:46:90:28:40:
02:e3:f5:f5:49:bf:41:22:ac:39:33:b4:f2:a9:6c:
ae:9d:68:56:58:b5:a6:63:40:89:ba:4c:02:39:9d:
24:2f:a1:ef:01:1c:59:01:e4:bd:4d:7f:65:9a:7c:
11:dd:1c:9a:ba:3c:19:35:cd:0f:0b:14:75:ba:fa:
30:6d:17:ab:7b:0a:09:1c:3b:c4:c5:e6:97:b0:3f:
35:f8:65:f5:92:37:7b:a0:ee:ea:78:af:2a:45:76:
cc:0a:3b:ca:60:80:8e:09:21:e6:85:79:8a:de:c7:
b8:54:34:9e:5c:03:bb:3d:4f:2d:00:79:f1:78:61:
e6:0d:9d:08:14:74:ad:bb:3b:fc:d1:47:1e:9e:0d:
24:1b:bd:cd:3f:9e:a8:bd:f5:96:10:61:bb:73:34:
a5:4b:28:9d:91:71:f7:04:1f:ff:6f:47:38:1e:24:
64:47:b5:be:16:be:c9:c3:d6:ba:3e:7d:38:54:8a:
46:f0:98:2e:46:80:51:06:cf:fc:05:c6:d1:55:4a:
8c:4b:70:19:d7:89:e4:59:ec:c0:23:65:cb:d5:5d:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5E:65:A7:79:B5:DD:AA:6C:E9:65:73:05:6A:E3:51:92:B9:F5:2A
X509v3 Authority Key Identifier:
keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b2:8a:87:4f:7e:14:49:87:a9:14:e8:51:de:6d:70:6d:56:
fd:82:4a:cb:15:49:6b:03:c2:23:5d:c7:1d:ad:ce:72:61:a0:
bf:e6:e9:5e:3b:22:94:ee:d7:97:e4:4e:e9:e6:74:ac:92:f0:
1b:b3:9a:cb:cf:37:cb:27:64:36:66:bd:5d:45:26:35:56:56:
77:46:96:80:55:3c:ce:d8:2a:1a:dd:e3:84:37:97:a4:bd:72:
84:66:8c:52:c0:ba:49:7b:57:80:27:b1:16:52:d3:29:bc:fc:
d6:92:c2:1c:07:eb:82:13:1a:3e:0a:57:66:0e:1c:63:bb:cc:
fb:29:4e:1b:6a:d3:92:8e:97:ee:7b:a7:13:8d:b8:4e:5c:7b:
5a:73:5f:f2:51:bf:de:8e:65:e7:eb:6d:e5:44:15:00:d2:4f:
c1:fa:02:12:29:98:b8:3b:ef:97:50:69:14:e1:3c:7b:65:0a:
c4:d3:06:e9:46:b5:10:2e:e9:2a:73:78:1e:eb:16:46:86:46:
46:51:7a:5e:e7:f8:f2:9f:1b:11:bb:4a:e3:19:ab:6f:06:1e:
08:ad:54:85:f4:5c:5c:df:ec:37:ab:72:f9:f7:df:08:79:f4:
37:5e:ce:ac:26:ae:3d:e4:d9:36:37:e1:17:98:14:cf:ae:a9:
fd:98:04:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:47 2025 by rpki-client