Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json)
Hash identifier: jH1vX3ZWdIhh1tsvdHGIqnIJxHEEa7cYPtDspr7Oc4M=
Subject key identifier: D2:BB:4E:3B:FB:C3:23:3F:8C:C7:DD:A0:37:69:8E:A5:8C:93:DE:09
Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Certificate serial: 43E847B545BFD2A2E8B191B1AA499A5061E4CA03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
Manifest number: 7B
Signing time: Fri 28 Mar 2025 04:00:35 +0000
Manifest this update: Fri 28 Mar 2025 03:55:35 +0000
Manifest next update: Mon 31 Mar 2025 07:13:35 +0000
Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=)
2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: EHLaxVuDJ1MjkRCcIJmpnkYXRoU5ytEAF441IcXqnaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e8:47:b5:45:bf:d2:a2:e8:b1:91:b1:aa:49:9a:50:61:e4:ca:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Validity
Not Before: Mar 28 03:55:35 2025 GMT
Not After : Mar 31 07:13:35 2025 GMT
Subject: CN=D2BB4E3BFBC3233F8CC7DDA037698EA58C93DE09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:e6:7b:ba:6a:f7:ce:78:c4:15:3a:8f:e8:
e0:bf:3e:17:66:cf:1e:59:2a:da:79:4f:c4:40:63:
e8:47:34:b5:63:d3:32:aa:40:99:51:43:de:1a:2a:
c5:6f:ed:5b:37:6f:a7:a1:80:c1:d8:be:db:15:5a:
b7:da:cf:ab:1a:07:ed:af:e2:5f:09:f3:44:71:b6:
ce:6a:8d:c0:94:f9:c1:6d:3d:22:eb:82:fb:34:87:
72:b3:42:b7:cb:7f:95:ea:f2:6a:55:21:53:9a:2c:
bc:53:f6:a4:da:ba:75:a0:fa:2d:21:5e:87:3e:18:
77:90:dd:29:c6:11:d1:76:75:d4:e7:2c:5f:97:3c:
38:da:9a:32:a6:ef:53:1e:8a:13:26:4c:b3:67:f4:
5b:07:f0:39:62:4e:eb:a9:8f:60:ff:48:2d:0f:61:
75:bb:73:57:bf:cc:37:05:ac:97:97:ab:79:eb:b6:
a5:26:68:b5:be:26:c0:da:94:7c:0e:ef:01:49:06:
05:ca:61:ba:df:6b:f9:d8:04:21:60:44:32:c0:59:
15:0b:4e:08:ef:c2:9a:2d:d1:b9:a6:05:6d:60:d9:
7a:44:e0:6f:0e:10:ed:31:03:13:31:44:d8:c2:06:
2b:67:16:21:a6:67:0f:a2:d0:16:08:b1:26:68:fc:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:4E:3B:FB:C3:23:3F:8C:C7:DD:A0:37:69:8E:A5:8C:93:DE:09
X509v3 Authority Key Identifier:
keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:2f:9d:a1:19:f9:78:bf:97:7c:2b:56:9d:04:88:53:89:
95:03:63:4d:e1:91:44:a9:e0:89:cd:07:de:c1:6a:2a:64:6f:
8b:e8:86:17:f6:3f:3d:99:d0:8d:87:4e:35:3b:96:a8:3d:ef:
db:29:3b:3c:bd:60:45:54:ed:70:29:a2:08:83:77:70:3f:cd:
cd:00:05:f6:d9:11:28:f7:55:74:f8:e4:48:16:1e:1e:34:2f:
aa:08:e8:b4:d1:61:2b:83:8d:fc:4d:0d:e0:05:35:e7:40:8f:
08:04:53:92:04:69:ba:29:e8:9b:08:cb:09:bb:3f:f6:89:3c:
2a:21:7a:0a:e9:ee:cf:0e:64:db:1b:96:28:bb:d8:69:20:58:
73:13:a7:72:73:13:bc:29:b8:01:de:61:71:35:57:7e:2e:0d:
ff:71:10:7a:21:b1:0a:c5:16:e6:95:8d:61:a4:3d:4d:78:30:
62:25:de:fe:0a:60:24:d7:42:92:75:80:62:6d:b9:f1:88:78:
06:48:69:47:d2:21:67:9e:5c:3f:38:f2:ff:8b:d0:20:92:7f:
e9:c4:ad:c5:9b:15:29:4f:3a:8f:ef:ce:51:64:76:87:6d:c8:
e4:f8:03:b4:22:a5:f5:5d:d9:0d:bd:48:9f:dc:5d:b8:d3:4f:
c2:74:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:38 2025 by rpki-client