Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json)
Hash identifier: 28Qx0ynXd5ZVuDa6XrJ1iM6zFfVNZv9qYDxnnZe3Ii4=
Subject key identifier: 55:3D:67:7D:C7:71:04:BB:95:71:EE:4D:F5:6C:05:29:40:74:82:0D
Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01
Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501
Certificate serial: 59B8E3ADA87BE28AD094D5C4F22CBA256872C6A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
Manifest number: 0168
Signing time: Sat 29 Mar 2025 06:52:05 +0000
Manifest this update: Sat 29 Mar 2025 06:47:05 +0000
Manifest next update: Tue 01 Apr 2025 06:59:05 +0000
Files and hashes: 1: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: yIPKicu7bkCOoPpMyBUtC59ayH5QP3nfZw50p6IWuCs=)
2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: 71RKMRkCzf+dsSgq8Q8+9kiI589hG8/JWQHbUqhmZBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b8:e3:ad:a8:7b:e2:8a:d0:94:d5:c4:f2:2c:ba:25:68:72:c6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501
Validity
Not Before: Mar 29 06:47:05 2025 GMT
Not After : Apr 1 06:59:05 2025 GMT
Subject: CN=553D677DC77104BB9571EE4DF56C05294074820D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:15:14:01:77:39:34:04:2c:02:b4:79:af:
eb:50:41:49:ae:ad:aa:2b:77:f9:48:d8:7a:bc:01:
a0:34:52:19:73:3c:f2:52:e1:33:22:84:f0:e5:20:
70:e9:91:f5:fb:5c:f6:26:18:a5:ea:2f:30:1a:73:
b3:67:c5:ae:da:8f:aa:fb:89:a0:7c:aa:f1:f4:76:
15:0b:76:86:4f:e6:21:f0:06:1f:34:7f:92:9e:2a:
93:19:9c:4d:db:0f:33:0a:2c:d4:ad:54:c2:ec:2e:
63:03:5e:45:49:97:b9:a9:27:62:19:a0:12:b1:76:
03:fc:7d:05:28:67:46:cd:fe:32:62:70:90:8b:02:
46:49:cb:b5:e5:f3:11:0f:d2:c6:b1:b3:01:1a:67:
63:c8:26:a8:4e:4b:7d:54:66:2e:dd:11:3d:f7:2b:
40:cb:46:16:6d:7b:4b:53:52:f0:05:56:64:e6:46:
cd:3a:79:15:55:97:1e:49:01:c9:95:9b:77:9d:7d:
e1:00:f4:07:c9:4b:a4:f8:fa:df:5c:11:55:da:fe:
ae:a0:41:b8:75:21:d7:ff:45:3d:af:57:da:df:59:
08:31:d6:c8:de:f1:94:72:36:3a:ab:00:97:d2:50:
b4:05:49:e6:06:b8:70:48:2f:60:d3:70:5f:8d:b1:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3D:67:7D:C7:71:04:BB:95:71:EE:4D:F5:6C:05:29:40:74:82:0D
X509v3 Authority Key Identifier:
keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c8:c7:15:11:86:88:83:61:79:77:90:af:b3:5f:93:b1:0f:
cc:4b:37:bf:74:35:dc:c6:d4:63:9a:9e:6e:d1:f2:d9:c2:42:
f1:3f:b7:0b:06:86:7e:ee:e0:a9:c9:30:c6:c9:88:f3:58:82:
d2:1b:9a:bb:6d:93:bc:bb:a2:04:32:cf:69:01:ee:e2:55:a2:
78:8c:f4:46:4c:49:b2:4b:92:8c:4d:3e:6f:b8:a1:72:d1:c2:
fb:d5:af:bf:b3:cd:70:c4:79:83:49:3a:ed:06:d0:75:89:84:
cb:9b:5c:a5:de:e1:19:23:b5:25:cd:c2:d9:ad:ef:be:a5:cd:
ae:af:7e:69:79:56:80:b9:35:0c:69:42:f8:02:99:fb:f0:39:
3e:7b:70:2c:c9:9f:0d:c4:e1:fd:94:3b:3e:b7:a7:61:78:99:
97:61:6d:8e:0a:b1:4f:b5:bd:79:ba:de:44:d4:b4:1e:74:de:
98:29:b6:5f:5d:13:16:b0:65:b6:2a:d5:44:73:bd:7b:32:50:
cb:07:37:6f:d2:fe:a8:e4:09:a8:75:5e:1b:66:0a:62:48:37:
40:bd:53:57:70:1d:ae:9a:db:3c:a9:df:ad:10:2d:80:2b:31:
b7:49:3c:63:20:f1:02:f5:d3:93:47:53:62:9c:60:fe:f1:f1:
b2:6a:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:49 2025 by rpki-client