Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft
File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json)
Hash identifier: FZK8Y4o3eXlDXRW7dWYTB7KTzssEN+5/CVvw+pMXaAQ=
Subject key identifier: 29:7A:5C:33:9A:C6:5B:E6:C7:38:1C:C2:3A:6B:BF:A4:83:6B:7A:02
Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95
Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695
Certificate serial: 7E81DE2BF952902C8B94D4438ACA488146ACEFE3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft
Manifest number: 0134
Signing time: Sat 29 Mar 2025 08:41:03 +0000
Manifest this update: Sat 29 Mar 2025 08:36:03 +0000
Manifest next update: Tue 01 Apr 2025 14:02:03 +0000
Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: T1ATSaQ3n7Z6i4g9BGybJUFvOQM7AVy6+X50SDs0wHM=)
2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:81:de:2b:f9:52:90:2c:8b:94:d4:43:8a:ca:48:81:46:ac:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695
Validity
Not Before: Mar 29 08:36:03 2025 GMT
Not After : Apr 1 14:02:03 2025 GMT
Subject: CN=297A5C339AC65BE6C7381CC23A6BBFA4836B7A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:d1:31:8e:34:40:f6:69:b7:39:de:56:50:
18:18:40:ec:35:c7:60:78:2e:5d:6c:15:65:ef:01:
66:b3:da:52:09:e2:6a:aa:37:ec:37:ad:1a:ad:3c:
77:28:48:e1:d8:9b:25:d4:bc:35:19:6c:ae:57:21:
ed:04:01:98:2b:0d:50:93:96:6e:5a:b6:e9:95:8c:
a0:12:8f:e5:7a:46:51:6a:e2:5b:4c:a2:44:d8:d0:
ae:1b:57:97:90:80:17:14:d0:49:cd:ea:e3:f2:a9:
77:7c:be:e9:ba:87:00:ec:2b:54:0d:69:bc:4f:be:
a3:40:0a:72:9f:08:99:c4:1a:f7:29:1c:d5:3f:cb:
32:65:76:3e:c6:cf:40:1f:1d:80:88:89:b3:16:56:
9c:ca:ac:aa:cb:1c:9b:2f:7a:4b:46:73:05:2c:ca:
12:92:92:a5:0f:07:13:3b:e1:16:b1:48:8a:93:19:
91:b7:b4:64:a9:d5:84:11:b7:37:b0:4f:4d:2e:94:
8a:a1:0f:cc:6a:17:ad:cc:24:d8:2b:95:00:44:6c:
39:be:1e:d6:a6:e1:60:f9:07:61:bf:5a:16:27:87:
df:74:0c:bd:d6:d7:1c:c2:77:9b:e8:62:8f:5a:39:
3a:33:f7:53:14:af:7b:9b:d9:d7:c3:cd:65:3a:23:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:5C:33:9A:C6:5B:E6:C7:38:1C:C2:3A:6B:BF:A4:83:6B:7A:02
X509v3 Authority Key Identifier:
keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:72:fb:0d:82:ff:e1:76:c0:9e:bd:6d:7e:48:f9:7f:00:90:
4b:9b:51:6d:15:a3:f0:1b:b4:c3:4a:f4:12:7f:7e:00:27:88:
b6:24:b0:f9:fc:a1:87:54:f1:53:4d:c6:93:04:15:5c:a1:64:
7d:ad:15:39:b7:76:21:b6:7f:c6:01:25:26:8c:31:7c:93:f2:
20:32:f3:87:04:3c:d9:22:b2:7c:f1:24:ae:41:6f:49:ec:1c:
42:63:16:5a:c7:0a:cf:b9:2e:4b:e7:51:af:cf:ec:5a:ab:f1:
3c:c0:ba:80:1a:42:04:f4:5b:9b:8c:b0:7c:eb:7d:14:b1:02:
b1:24:b7:46:a7:ab:09:1d:b3:ff:a5:7e:f9:d4:62:29:bb:13:
af:57:cd:13:d1:e3:49:f2:79:e5:7c:7e:75:89:3e:b1:21:87:
0c:85:f1:c1:d7:a4:36:75:a0:66:d4:0d:71:59:81:28:eb:80:
d0:e3:34:59:8f:05:25:3c:a3:fe:69:a7:74:fb:30:a9:6b:c5:
ee:fd:03:38:be:a3:79:27:f8:b9:7e:b8:95:d4:b6:4a:68:46:
6b:8c:6b:bc:77:93:7e:30:71:3c:ff:de:0e:ac:7b:83:5b:a7:
1b:dd:43:8f:7a:63:d1:f1:36:43:6f:e8:06:07:e9:17:f7:7f:
4a:f6:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:39 2025 by rpki-client