Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json)
Hash identifier: ULQqlifLRfsSOTEu+bhL3k374APHHr067lCbvIICiXI=
Subject key identifier: DE:D5:EB:A4:1C:19:16:1D:F3:E7:DC:1E:EC:A0:B6:14:ED:DA:28:DE
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial: 2994E81DE096E41C06DCA938B736EA75B6DD911B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
Manifest number: 01A9
Signing time: Thu 30 Jan 2025 10:51:28 +0000
Manifest this update: Thu 30 Jan 2025 10:46:28 +0000
Manifest next update: Sun 02 Feb 2025 18:44:28 +0000
Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: zR665DTyJA/CfbJT9XZ1rRiLHbhOu+eqALD6NRCm228=)
2: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: ph3uYTlFMX1BFRHHGEZlKMgJ6csPlVRgtyfF036CKIk=)
3: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: dehqxFCHBrMds+ZiAeLPjrR/fRS6PqqqAhfp9EkpWIg=)
4: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: hzQEiawJlGsxUqPkAzc7IEjsLAEw6N4yUk8uknnkf3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:94:e8:1d:e0:96:e4:1c:06:dc:a9:38:b7:36:ea:75:b6:dd:91:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Validity
Not Before: Jan 30 10:46:28 2025 GMT
Not After : Feb 2 18:44:28 2025 GMT
Subject: CN=DED5EBA41C19161DF3E7DC1EECA0B614EDDA28DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:5a:9f:45:f8:da:55:ff:d3:f6:2a:e1:cb:
56:6e:f5:6f:f9:ba:6d:42:47:89:bc:70:1c:8b:cb:
f8:9c:1a:b1:42:6d:65:85:e7:c7:62:80:89:31:9f:
8b:5f:74:e4:ed:2f:93:8e:68:45:ae:fd:34:5e:0e:
58:68:23:61:54:92:e3:53:a0:4e:7a:81:a7:50:14:
20:6c:46:18:79:81:5b:f2:04:a6:69:d7:c6:cd:3b:
bb:93:0a:f1:d8:6f:a5:5f:64:30:23:b1:ef:f4:9f:
21:87:bc:fb:dd:a9:f8:67:1b:32:be:05:56:73:1e:
22:55:d8:15:06:7d:05:ca:08:54:cc:87:e5:e0:e8:
ed:67:09:19:53:fc:1f:35:6f:cb:f9:3b:34:e2:9c:
4e:12:2e:65:91:d1:f4:d1:64:ab:71:79:12:3e:73:
e6:16:ae:70:f0:01:7c:5c:34:df:e5:73:68:fa:d0:
49:81:78:82:0a:ab:13:45:a3:a7:25:04:60:9e:3f:
27:2b:07:9c:d8:c7:60:12:d3:14:7f:91:a1:1b:f4:
a1:25:f1:ce:5f:85:50:25:35:90:05:9d:eb:f0:24:
47:6f:5c:8c:ec:cc:32:62:86:51:bd:b6:ae:b3:51:
59:d8:6a:ae:d2:a5:60:48:db:e3:5b:95:33:03:f3:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:EB:A4:1C:19:16:1D:F3:E7:DC:1E:EC:A0:B6:14:ED:DA:28:DE
X509v3 Authority Key Identifier:
keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4f:d7:98:a9:e9:2c:9d:c0:3c:eb:de:13:04:0c:0f:44:4a:
e1:85:1b:1e:f3:27:b2:6a:3f:7d:a9:a8:e9:6d:f5:6a:18:f6:
95:8e:96:b2:12:ed:69:7c:0b:61:75:3c:77:89:f5:8f:b8:88:
a0:73:f9:6f:e3:29:c3:08:f0:de:e7:cf:6f:35:ae:c3:0b:e2:
62:8a:02:8a:28:3a:f4:16:c4:7f:e2:71:b6:4b:90:92:0b:7f:
aa:c5:72:d0:19:3b:c8:0e:44:3e:34:fe:4e:fe:bf:32:fe:a6:
58:ca:cd:1e:7f:86:8f:88:f7:20:6c:54:c7:e5:54:9a:1e:e6:
b7:fe:6f:9e:d2:c5:65:9d:79:f6:a0:61:be:b1:06:de:58:38:
23:83:fd:77:ba:37:ec:a3:bb:66:91:d8:7e:59:1c:00:58:af:
a2:e5:2b:81:53:24:61:da:3e:d9:fb:2e:ec:bd:a8:13:af:16:
ab:ce:c5:70:38:20:af:45:89:c9:24:32:4a:b7:71:44:e0:3e:
34:d8:d4:d9:27:cf:45:29:8f:a5:0f:09:09:ce:96:68:24:30:
cc:10:04:c2:35:a8:50:1c:bd:ac:c9:84:8d:4f:ad:74:9f:34:
2a:e1:39:99:4f:34:11:87:cd:b4:3b:5d:5c:d1:21:2b:a5:0e:
14:dd:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:43 2025 by rpki-client