Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft
File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json)
Hash identifier: EPWes7o5glX0wkXIlaacn7ajC/eChE3CyUPS3boER10=
Subject key identifier: 1E:B5:78:82:A0:11:BF:56:88:A4:89:4E:F2:CA:FB:CB:84:9A:F7:55
Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20
Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520
Certificate serial: 57BC41F7EEBA64CCE28AD6C7D5E21BC22D7106A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft
Manifest number: DD
Signing time: Thu 27 Mar 2025 16:00:59 +0000
Manifest this update: Thu 27 Mar 2025 15:55:59 +0000
Manifest next update: Mon 31 Mar 2025 01:15:59 +0000
Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: JFBXxsFNrOQ6KI9typJFmEBHGefHeMC1WutoxNz5Zaw=)
2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bc:41:f7:ee:ba:64:cc:e2:8a:d6:c7:d5:e2:1b:c2:2d:71:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520
Validity
Not Before: Mar 27 15:55:59 2025 GMT
Not After : Mar 31 01:15:59 2025 GMT
Subject: CN=1EB57882A011BF5688A4894EF2CAFBCB849AF755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:67:b9:80:cf:c6:99:94:9d:a0:07:6c:e0:
d9:c8:48:1a:2c:8b:97:d4:72:e8:5b:e2:e0:e9:48:
78:23:d3:f4:f8:50:a3:d3:d0:f3:6f:ee:53:64:bc:
f9:6d:08:a2:51:d6:5b:90:96:d2:e2:a2:f9:00:3b:
70:9d:f0:fb:a8:d8:6f:e1:e9:18:08:c1:70:f1:b5:
00:9f:e1:d9:f2:a2:19:b3:2e:2a:63:80:b5:f7:14:
38:98:ca:fd:97:20:f2:4f:32:7d:9c:a2:78:9d:af:
56:c7:9a:bc:2b:d9:ea:e4:b8:78:81:31:aa:e6:51:
72:ae:a9:41:3e:54:58:5c:1a:e3:d7:7c:9c:41:50:
84:aa:2d:30:d6:82:f8:e4:19:3f:76:3c:6e:a7:43:
c7:45:75:5d:5c:76:18:22:e9:e0:a8:2f:32:ae:31:
12:57:0d:bb:b8:75:e1:80:11:a1:9f:77:4c:dd:82:
c9:58:1b:43:27:c5:a6:f8:4f:4e:c3:14:7e:1f:e1:
26:b3:23:c9:bc:c5:4a:6c:22:2f:7a:b2:6a:d0:60:
6b:80:d3:ea:07:67:c1:f7:4e:07:75:99:78:b1:65:
23:7f:28:7b:6a:cc:e0:3c:fd:62:17:bf:6c:7d:9b:
f7:03:13:09:7c:00:93:bb:fa:ca:bf:9b:1b:00:c8:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B5:78:82:A0:11:BF:56:88:A4:89:4E:F2:CA:FB:CB:84:9A:F7:55
X509v3 Authority Key Identifier:
keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:04:89:8b:df:f1:03:c9:63:28:da:6e:f3:d5:f7:d5:c3:2a:
ac:55:c6:f4:4c:f2:25:03:d1:bb:81:b9:7b:44:7b:19:de:93:
f1:65:1d:d7:63:b3:0f:4e:dd:d4:64:a3:cd:56:25:ee:b9:fa:
43:7a:b1:9e:6c:ae:3f:6c:22:54:65:a0:b0:ba:3c:93:b8:3b:
94:1c:94:9f:e7:0f:a6:89:a2:44:43:08:98:a1:6c:42:7f:f7:
73:ba:4d:31:04:99:18:88:12:96:1a:5b:0f:91:f7:af:75:43:
5b:4d:d4:a7:5c:42:39:46:ec:9a:60:52:00:c4:e7:4e:12:64:
3c:40:b4:af:f9:a9:17:b6:9f:af:83:a2:a2:90:11:4e:56:1a:
fa:d7:c8:eb:0b:fa:50:b4:57:47:36:16:d6:72:40:06:1c:49:
1a:03:e0:94:16:9a:5f:50:ba:b7:8b:4e:03:9e:5f:fe:f5:05:
19:85:fc:5b:28:77:ab:9f:f3:57:f8:f0:f0:43:4b:62:9e:33:
e3:7b:fd:9e:f2:48:33:bd:39:43:ae:a1:04:b4:3e:91:a3:4b:
4b:0d:34:91:83:ad:0d:87:5a:c6:82:2f:01:8d:e5:05:4a:15:
44:17:1e:ee:f6:8b:3c:d3:6a:51:60:80:8d:26:f3:33:72:21:
90:d0:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:34 2025 by rpki-client