
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json)
Hash identifier: eK5pDidAnFjh6+VQ/YuUw+XKaJQWPJWrUTRntjFKAn4=
Subject key identifier: 7E:C6:66:2C:C2:03:73:1B:E4:86:6F:19:0A:03:BE:5A:A0:48:E9:72
Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5
Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5
Certificate serial: 0BEB8EFCD160E0532881E8DC6168BDA841EA79C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
Manifest number: CD
Signing time: Fri 31 Jan 2025 18:31:12 +0000
Manifest this update: Fri 31 Jan 2025 18:26:12 +0000
Manifest next update: Mon 03 Feb 2025 22:52:12 +0000
Files and hashes: 1: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: lxplHllIEQbjFSzZnnx3SEX7vaIurCC8TrKQIq2OFQI=)
2: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: PTVjlqzMd0MWEsZK/e6wEKm/QpfpxAzQ4YMc5Zt/S80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:eb:8e:fc:d1:60:e0:53:28:81:e8:dc:61:68:bd:a8:41:ea:79:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5
Validity
Not Before: Jan 31 18:26:12 2025 GMT
Not After : Feb 3 22:52:12 2025 GMT
Subject: CN=7EC6662CC203731BE4866F190A03BE5AA048E972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:e8:06:1c:fd:ab:5f:ee:47:8c:d6:20:c5:
fa:98:29:b4:04:6e:d4:4c:6c:9c:50:6e:53:2e:27:
bc:fc:30:b5:de:1b:9e:7b:c7:b0:09:94:39:08:9b:
23:a0:86:f2:5c:1f:72:4d:31:ac:17:21:9c:26:4c:
5f:42:2a:aa:42:d5:a7:72:72:ab:24:7b:da:5e:45:
64:bb:c5:9e:a6:e4:25:d7:94:8f:9a:b4:f4:15:1e:
db:5f:f1:54:68:80:73:48:9b:2d:82:5b:a5:09:24:
20:b8:fa:b9:a0:3d:85:27:5c:0e:a6:e6:09:1f:f0:
ea:ec:da:f7:ca:b0:cc:3e:41:11:22:a8:23:bd:a6:
1d:23:9f:e5:7f:27:66:63:24:c5:23:ab:0a:45:04:
94:e1:e7:91:61:f6:c8:81:97:d4:48:be:b4:0b:a8:
57:08:cd:e6:75:da:da:21:97:ca:fd:64:1d:37:22:
f4:e8:d3:c4:7c:31:43:99:15:11:8f:c9:ae:b0:b8:
94:a5:bb:39:ca:4a:2e:ef:4d:90:3d:9d:c4:89:8f:
9f:89:c2:95:7b:33:3a:22:2d:cc:d4:55:c6:ca:10:
ac:7f:5a:78:48:35:b8:cc:40:e1:6f:61:2f:f4:5a:
bf:83:87:d9:9b:d4:80:25:96:98:35:83:df:8f:e9:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:66:2C:C2:03:73:1B:E4:86:6F:19:0A:03:BE:5A:A0:48:E9:72
X509v3 Authority Key Identifier:
keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f8:b5:83:77:68:32:71:f4:5f:47:9f:be:eb:5e:51:08:c9:
ca:32:23:d2:c7:ef:15:26:d8:3b:db:d5:43:25:bd:f4:80:46:
ea:6a:2b:fe:55:79:6a:4b:b5:ec:85:7e:c2:86:b3:72:70:fb:
d9:5e:4f:f3:17:c9:1e:d9:49:ab:64:23:b5:91:04:f5:46:2a:
2a:6d:54:dd:82:9c:ff:4c:ba:95:a5:8f:a2:27:88:86:e2:d9:
f4:bb:a0:f6:b5:a8:dd:7b:f5:f0:ff:84:bf:6f:0d:96:98:d9:
a4:2d:7d:53:11:67:72:50:d9:b7:1c:f6:f0:5d:a6:9f:df:60:
66:28:1c:83:34:df:cc:55:5c:c2:f9:14:01:2d:03:65:f6:a8:
46:ed:6d:da:97:3a:84:b5:cd:bd:13:c4:61:7a:1c:e1:f2:a6:
43:42:6c:5e:bc:93:39:0a:d1:0f:6d:29:07:a8:f3:97:07:72:
4f:84:6f:ff:f4:b0:3b:b0:10:54:ae:fd:28:c1:1a:cb:4f:28:
99:05:4f:00:2a:ca:d5:5c:9e:96:47:2b:33:63:0a:e5:16:16:
5e:43:f9:70:98:fb:e7:a9:8c:93:8a:b8:8e:d8:07:19:a9:cd:
db:6d:6c:5f:ee:7b:c6:13:ca:b3:99:d7:a8:a2:47:9b:3c:8b:
0e:cf:ed:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC+uO/NFg4FMogejcYWi9qEHqecEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2
RjU3MTZGNTAeFw0yNTAxMzExODI2MTJaFw0yNTAyMDMyMjUyMTJaMDMxMTAvBgNV
BAMTKDdFQzY2NjJDQzIwMzczMUJFNDg2NkYxOTBBMDNCRTVBQTA0OEU5NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhegGHP2rX+5HjNYgxfqYKbQE
btRMbJxQblMuJ7z8MLXeG557x7AJlDkImyOghvJcH3JNMawXIZwmTF9CKqpC1ady
cqske9peRWS7xZ6m5CXXlI+atPQVHttf8VRogHNImy2CW6UJJCC4+rmgPYUnXA6m
5gkf8Ors2vfKsMw+QREiqCO9ph0jn+V/J2ZjJMUjqwpFBJTh55Fh9siBl9RIvrQL
qFcIzeZ12tohl8r9ZB03IvTo08R8MUOZFRGPya6wuJSluznKSi7vTZA9ncSJj5+J
wpV7MzoiLczUVcbKEKx/WnhINbjMQOFvYS/0Wr+Dh9mb1IAllpg1g9+P6VWzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfsZmLMIDcxvkhm8ZCgO+WqBI6XIwHwYDVR0j
BBgwFoAUDxvZ1VyBIVivWM5HBTrGoW9XFvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NGUzNzdiOS01ODg5LTRjYjMtYTRjOS0wODcxMmI0ZjY2ZmMvMC8wRjFCRDlENTVD
ODEyMTU4QUY1OENFNDcwNTNBQzZBMTZGNTcxNkY1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2QTE2RjU3
MTZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0
YzktMDg3MTJiNGY2NmZjLzAvMEYxQkQ5RDU1QzgxMjE1OEFGNThDRTQ3MDUzQUM2
QTE2RjU3MTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAED4tYN3aDJx9F9Hn77rXlEIycoyI9LH7xUm
2Dvb1UMlvfSARupqK/5VeWpLteyFfsKGs3Jw+9leT/MXyR7ZSatkI7WRBPVGKipt
VN2CnP9MupWlj6IniIbi2fS7oPa1qN179fD/hL9vDZaY2aQtfVMRZ3JQ2bcc9vBd
pp/fYGYoHIM038xVXML5FAEtA2X2qEbtbdqXOoS1zb0TxGF6HOHypkNCbF68kzkK
0Q9tKQeo85cHck+Eb//0sDuwEFSu/SjBGstPKJkFTwAqytVcnpZHKzNjCuUWFl5D
+XCY++epjJOKuI7YBxmpzdttbF/ue8YTyrOZ16iiR5s8iw7P7Y0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:03 2025 by rpki-client