Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json)
Hash identifier: jdaZQd6pFz30mqUh88YIGJiTnVbWCKBOmuXcKiOJ8xo=
Subject key identifier: AF:98:A4:79:79:AE:11:BC:A4:E8:3E:EF:F2:35:4E:F4:7F:42:5F:14
Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA
Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA
Certificate serial: 142FC33F28E45116F07F4C58578DD72D79AD4AFF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
Manifest number: 0474
Signing time: Fri 28 Mar 2025 07:51:32 +0000
Manifest this update: Fri 28 Mar 2025 07:46:32 +0000
Manifest next update: Mon 31 Mar 2025 16:22:32 +0000
Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: PR+NptpRSqdNX3JxASFvgXoHl0xZCWEsneNRQ7yPmZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2f:c3:3f:28:e4:51:16:f0:7f:4c:58:57:8d:d7:2d:79:ad:4a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA
Validity
Not Before: Mar 28 07:46:32 2025 GMT
Not After : Mar 31 16:22:32 2025 GMT
Subject: CN=AF98A47979AE11BCA4E83EEFF2354EF47F425F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:8c:03:83:f3:70:94:15:f2:36:c6:b0:79:
93:d1:2d:92:b4:1f:54:79:47:6d:7f:1c:3d:e6:b4:
3a:b4:84:e7:32:56:84:ad:8a:b5:94:98:92:db:15:
f0:a9:74:0c:4f:cd:10:94:ad:46:ce:31:83:80:dc:
8e:47:1a:0d:7e:af:a1:d7:ec:51:60:62:05:99:f0:
ee:64:a1:d4:af:42:f7:2a:17:a6:c7:49:fe:d1:b9:
77:77:21:97:00:11:21:a9:6f:6e:c0:be:3b:89:00:
62:ca:0c:99:60:5b:38:a1:2f:8f:c3:3d:3a:c2:ec:
d4:ab:41:f0:c1:a9:5a:a8:8e:0c:08:a9:f5:82:42:
74:83:0b:2f:49:83:57:9c:5c:3d:60:72:a7:80:60:
ee:e3:de:9c:2b:d4:71:3a:75:6c:cc:dd:2a:a3:75:
51:fb:21:b0:d9:c5:6b:cf:19:14:34:18:13:54:85:
77:9a:70:5a:2c:30:c1:fb:f6:e5:be:10:16:67:1f:
17:cf:3f:0f:1b:c0:90:75:47:39:66:a5:7c:cf:6d:
be:ba:a2:20:cc:1e:71:f6:bb:d4:b3:d6:9a:53:44:
c1:29:c1:cd:6d:7e:36:d9:e3:87:5a:5b:91:0e:31:
24:78:b4:af:7a:e2:05:d3:88:c9:b1:5f:49:99:ee:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:A4:79:79:AE:11:BC:A4:E8:3E:EF:F2:35:4E:F4:7F:42:5F:14
X509v3 Authority Key Identifier:
keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2d:09:c0:9f:5e:e7:e4:c9:20:73:05:26:72:73:e0:e4:08:
cd:15:23:08:64:d4:01:24:ee:34:21:58:4f:53:72:b7:82:2c:
ac:4d:0a:1e:5b:d9:32:f4:fc:f3:fb:d9:20:91:4d:8f:b7:6c:
88:a2:ac:d6:8a:d3:95:59:8e:27:c8:f2:c0:f4:1c:5b:7b:bd:
ef:5e:3b:86:ff:fe:0f:e7:a5:7b:e5:17:d1:42:78:34:2c:51:
57:62:c5:c8:36:65:db:9b:80:8c:36:f8:7e:a7:40:ac:cf:c2:
ad:63:10:74:74:5a:07:bc:29:31:02:dd:9f:34:62:8a:db:10:
6a:23:d2:28:01:58:2e:df:b2:9d:3b:e2:60:d2:4a:ad:71:34:
cc:1e:ca:81:35:49:4f:da:a8:75:41:3d:f6:7d:ea:13:11:6b:
ac:15:63:9f:bf:ea:e0:e8:82:38:20:28:5d:fd:9f:a2:02:39:
19:29:f9:4b:54:e9:a3:73:00:79:04:26:c8:10:e1:9c:82:99:
55:c1:8c:5d:57:f1:f4:b0:1a:03:cd:25:bd:4c:9e:4e:35:2d:
8c:95:05:79:94:4d:b2:82:4b:3a:6c:19:55:1b:cc:4f:d1:bb:
ed:b5:3c:c1:7e:64:cb:29:67:6a:20:2f:0f:46:a9:4e:45:6d:
81:a1:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:15 2025 by rpki-client