Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json)
Hash identifier: NwCVdxPYnAl2ViXZy/MZVT+LxuVzYPMsrf2osgTseZk=
Subject key identifier: DF:C9:8C:A1:24:A9:CD:BF:1F:06:5C:E8:0E:A1:1F:CC:F3:D1:CA:17
Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A
Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
Certificate serial: 7E5A36AA6F5780E4D121FF49A1351CB65A0A1D25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
Manifest number: 7A
Signing time: Fri 28 Mar 2025 23:21:33 +0000
Manifest this update: Fri 28 Mar 2025 23:16:33 +0000
Manifest next update: Tue 01 Apr 2025 05:38:33 +0000
Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: xM2UyhVRei1+UnG2ak9UL8oRXf3aQZAO5F7D8S6AVws=)
2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5a:36:aa:6f:57:80:e4:d1:21:ff:49:a1:35:1c:b6:5a:0a:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A
Validity
Not Before: Mar 28 23:16:33 2025 GMT
Not After : Apr 1 05:38:33 2025 GMT
Subject: CN=DFC98CA124A9CDBF1F065CE80EA11FCCF3D1CA17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d4:83:96:53:15:30:70:b7:38:22:6f:3b:eb:
b8:1e:36:7e:20:8f:b0:1b:5d:93:32:ac:5b:a9:dd:
5c:86:b9:4d:24:bc:21:ee:46:ab:e2:2e:ff:ca:b2:
37:5b:45:04:29:7e:95:fe:0e:6b:e6:cb:2e:58:5b:
75:f4:83:c1:a5:60:aa:61:16:95:b5:9d:30:73:5e:
42:4a:f4:56:53:37:b5:eb:c1:d4:85:bd:fd:09:89:
b6:0c:77:fe:6a:4c:cd:61:94:2f:ea:cd:9d:56:03:
65:1a:f1:82:2a:0f:27:5c:1b:1a:d6:c0:79:96:0c:
12:a3:b9:8e:27:54:77:49:4b:70:13:76:55:d4:df:
e7:09:e1:2e:3e:43:a6:16:b7:56:a4:27:79:84:4b:
19:9e:a5:d9:07:3c:de:14:94:6f:ea:be:74:04:0e:
df:82:4a:48:95:17:5a:eb:88:48:28:55:5b:fd:a4:
9f:71:eb:8f:6a:9c:00:35:ab:ef:48:d9:55:65:8c:
83:fe:79:36:4f:1a:8a:bd:9a:cc:a3:2a:14:af:d9:
bc:43:20:5a:84:ea:8c:43:34:26:a9:98:67:c6:a1:
51:f9:cf:f2:64:6c:9a:3f:97:f0:9d:93:3a:cb:b0:
71:1d:ad:5d:3b:5f:de:4c:da:76:0f:0f:3c:05:44:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C9:8C:A1:24:A9:CD:BF:1F:06:5C:E8:0E:A1:1F:CC:F3:D1:CA:17
X509v3 Authority Key Identifier:
keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:48:9a:70:7f:16:dc:a1:21:90:a0:b0:97:06:67:df:62:
71:59:da:9c:6b:0e:c2:62:21:72:3b:f3:5d:f7:c8:39:62:86:
52:27:72:5e:6e:84:07:18:01:0c:ff:19:29:49:b4:9e:e0:d6:
30:2b:32:19:7d:28:58:5d:3d:95:66:b3:27:f1:9d:04:c8:52:
22:3b:2c:67:4e:83:9a:ce:4c:11:31:8a:e4:0d:b0:ec:d7:f1:
8a:db:80:ed:3b:ac:ca:dd:0b:8b:3e:d2:87:3a:4a:c9:68:75:
42:25:6f:7e:5b:c6:f3:31:6a:9d:25:15:2a:8e:ef:a7:5e:31:
7d:7a:ce:40:a2:38:ac:03:4f:93:20:1a:24:30:b6:46:ce:e3:
86:91:ab:b3:70:f5:46:94:ba:f4:93:07:ef:fd:73:0f:4e:5e:
5a:07:ea:1a:f6:53:39:32:a7:9e:31:e4:45:31:89:5b:25:61:
7a:09:76:bb:2e:47:2e:e7:99:13:4a:2d:c0:76:bb:c9:91:76:
06:d1:5d:9e:5d:46:26:32:8c:bd:de:33:dc:c0:96:89:1b:4c:
c3:5a:3c:c2:45:80:59:c2:28:1e:83:c7:c1:53:4e:99:7c:3a:
13:64:1e:ec:62:66:f3:dd:2f:6d:ec:d0:59:a8:5a:7a:24:ee:
37:af:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:25:16 2025 by rpki-client