Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft
File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json)
Hash identifier: 2XdS8huHu0JePYk/k1ap7atR+UIl8G5tratmjbvPYKc=
Subject key identifier: 99:C7:05:2E:EB:5A:12:C4:83:41:87:04:37:AB:76:29:37:A4:C4:45
Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF
Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF
Certificate serial: 088E55914FB35C0FBA97836698220BC44C91D148
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft
Manifest number: 0485
Signing time: Fri 28 Mar 2025 10:01:22 +0000
Manifest this update: Fri 28 Mar 2025 09:56:22 +0000
Manifest next update: Mon 31 Mar 2025 17:49:22 +0000
Files and hashes: 1: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: U7s7mJEq04NtR6STkPi+xKXctW6kbz3ipGXgodCpsEE=)
2: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: zhjLKdHiZJAAA60z4kxaHFx03Q2DU/hes1jKQwL/5G8=)
3: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: cLVCVvcvprgwkkF82bMcfbs0h+bsaPJp7VIWMvcz0os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8e:55:91:4f:b3:5c:0f:ba:97:83:66:98:22:0b:c4:4c:91:d1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF
Validity
Not Before: Mar 28 09:56:22 2025 GMT
Not After : Mar 31 17:49:22 2025 GMT
Subject: CN=99C7052EEB5A12C48341870437AB762937A4C445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:e3:4e:d4:0d:92:ee:51:d6:7d:7f:ca:87:
85:88:bf:c8:68:1a:77:16:0f:fc:ac:2a:54:9f:dd:
8d:65:fd:9a:3b:68:e1:2c:58:f7:10:e3:11:da:dc:
87:4d:95:95:4d:14:e9:04:6b:0a:06:7d:a6:a0:cc:
73:1a:fb:da:1d:86:63:35:d9:04:ea:09:9c:00:2e:
e0:33:26:9a:29:29:a0:3f:30:e9:ed:db:1c:66:f8:
f2:2e:b2:9d:a5:45:17:ea:76:79:20:73:62:3f:f0:
ed:cb:1e:c9:b2:35:5c:65:12:b6:52:9d:2d:c8:c9:
bd:96:2a:1a:98:5f:ad:84:ac:71:39:67:0c:98:5e:
ae:3f:d0:83:0f:71:bd:3b:43:84:00:7d:6c:06:ef:
f4:c3:2f:9a:13:b7:df:e2:41:aa:61:8a:bb:a6:60:
de:76:c6:27:80:ab:d7:b1:dd:f3:6e:32:cb:68:98:
65:4a:df:94:fd:51:51:91:31:4a:08:fa:ec:cc:cd:
fa:90:ca:09:10:33:e2:f2:8d:a8:ce:ef:86:e3:f0:
53:45:84:35:37:9e:b0:9f:04:03:69:7b:f4:e3:64:
ef:50:e7:12:e3:af:96:c9:61:1f:a1:cf:cf:41:f7:
6b:20:c6:d2:00:67:d6:3b:7c:24:cb:72:89:5c:14:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:05:2E:EB:5A:12:C4:83:41:87:04:37:AB:76:29:37:A4:C4:45
X509v3 Authority Key Identifier:
keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bf:15:11:a6:33:eb:ba:2c:98:42:cf:0e:98:ac:65:23:27:
aa:0f:80:1f:2d:6a:c2:40:ad:9d:fb:7c:c7:58:37:3a:91:8f:
e0:d5:f6:d1:3c:a5:22:af:a2:09:23:74:51:69:14:57:f5:ad:
07:4d:fb:5f:10:52:b3:e0:28:15:8c:cb:b2:d6:3f:ef:ec:bc:
41:56:70:75:2c:e3:1d:bb:62:ac:4f:f8:31:1a:53:a3:be:ea:
48:ed:fb:ae:e9:7e:41:a0:9c:51:45:5d:77:27:23:6f:2f:f4:
f0:25:9f:b7:45:0f:7e:94:b4:b1:a3:2e:2b:ee:25:ff:24:75:
f8:36:69:0c:17:25:d1:93:ae:94:54:55:4c:b4:e9:e2:3a:68:
88:32:0b:c7:47:01:d8:28:a3:cb:cf:c6:63:c6:9a:af:a8:1a:
0e:c8:2c:ed:27:02:0a:67:2e:f5:5c:ac:e6:bf:0f:35:72:85:
22:62:3f:93:f3:1e:f7:10:2c:d3:28:58:37:b1:89:0c:65:e0:
65:ba:99:d7:0a:93:d7:fb:a7:1f:32:ed:cc:d5:78:38:e3:33:
10:3c:01:78:bb:8a:e8:52:ff:a8:d9:33:17:81:60:72:a3:76:
80:09:8b:f4:79:e0:00:c0:d9:4b:27:56:29:9f:11:ec:f5:b3:
d9:e7:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:32 2025 by rpki-client