Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft
File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json)
Hash identifier: v2gwGsF5+L8XawUb2zy/x4W3LGXRcSk8OzwCNycjzfw=
Subject key identifier: 0F:79:43:0A:74:BA:C5:34:D1:BA:5D:9D:59:C7:C7:0A:86:42:DB:50
Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6
Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6
Certificate serial: 45FAC84FB592B5015BDA95C6222F073C243D797D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft
Manifest number: 63
Signing time: Fri 31 Jan 2025 15:32:13 +0000
Manifest this update: Fri 31 Jan 2025 15:27:13 +0000
Manifest next update: Mon 03 Feb 2025 23:35:13 +0000
Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: vvI3HwtCtlhKC+Yha5nW58FM5sUZPVKKRUzXlr+Ol+o=)
2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: 49HTMVxx05wPdArfdbkc8ZuyfBJmlfmMETsXKqg+H4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fa:c8:4f:b5:92:b5:01:5b:da:95:c6:22:2f:07:3c:24:3d:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6
Validity
Not Before: Jan 31 15:27:13 2025 GMT
Not After : Feb 3 23:35:13 2025 GMT
Subject: CN=0F79430A74BAC534D1BA5D9D59C7C70A8642DB50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:2e:73:8a:7d:0a:4b:12:b8:8a:b6:09:ca:
8b:d8:12:38:96:c8:a3:04:ef:69:a5:82:8d:e3:52:
63:2d:1d:82:27:92:e8:d4:63:81:0f:07:b1:ce:af:
c5:e4:03:51:47:1c:cb:8f:a9:2e:4c:2e:35:f0:8b:
5f:6f:d3:5a:0d:ba:d6:d6:da:d4:bd:bf:b4:26:9e:
75:b3:d4:00:12:38:1d:10:e8:e2:8c:b4:d6:f0:9e:
32:57:4e:98:38:dc:04:5d:53:c8:ee:0d:87:bd:43:
50:e2:95:a9:3e:e3:e9:c4:a8:28:ad:f4:d7:c1:57:
af:0a:01:d2:aa:72:84:0a:08:0a:6f:73:79:24:c6:
d8:25:8b:31:88:33:60:b2:14:6a:13:bb:ed:46:51:
3b:d3:0c:d6:1c:35:72:f8:8d:35:62:4e:22:dc:de:
bc:a7:e0:83:e1:59:90:86:81:bb:ea:22:cb:77:26:
d4:24:72:1c:9c:c9:3b:37:40:01:93:b5:a2:f2:a9:
eb:a3:dc:34:99:f0:36:20:bc:e3:54:f9:e6:de:a3:
d3:f2:6d:0e:be:2e:0a:d0:d3:ba:36:54:d8:15:d3:
14:41:cd:e1:b5:b2:b2:5e:0b:51:56:7e:0c:f1:dc:
7b:2c:a3:4f:27:f0:48:85:a2:9b:12:85:3e:a1:f2:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:43:0A:74:BA:C5:34:D1:BA:5D:9D:59:C7:C7:0A:86:42:DB:50
X509v3 Authority Key Identifier:
keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6b:16:3c:b7:e3:ca:cc:50:84:5b:1a:61:37:5c:6d:35:23:
38:df:f1:88:fa:95:68:42:46:a0:a1:01:3c:57:54:e4:03:b7:
79:e1:e7:71:b7:1b:aa:7b:62:4d:7f:f3:ec:35:b6:4f:72:b8:
ea:19:e3:d7:5d:bc:de:10:60:1e:de:c0:ce:30:c2:85:2f:59:
84:72:0d:28:e0:84:c0:d2:4f:3f:d0:3e:25:63:c6:66:e9:c6:
12:19:39:10:94:45:c8:40:de:17:f1:0e:0f:58:f0:6c:8e:19:
69:0e:87:d6:f9:66:f2:67:42:1b:25:49:fe:f2:d7:98:9c:3f:
8c:62:08:65:57:d0:6d:c6:89:ef:af:f2:15:ac:fa:06:6f:cb:
73:85:0d:30:6c:33:c2:e7:58:4c:d2:f9:76:d8:95:f6:ac:af:
6a:df:d4:f1:de:19:e6:7b:30:b3:e0:03:5b:cd:8b:3d:49:4b:
f4:cb:83:8b:3d:d2:4d:d4:44:ae:82:11:01:bb:f3:12:79:47:
ff:15:4b:13:3b:61:11:20:8e:c3:e0:60:54:af:50:30:6c:b5:
16:cc:3a:40:37:74:b4:c3:35:6f:81:d2:ef:27:1b:f0:3d:45:
4f:2a:87:60:57:fe:6a:8a:4a:64:3b:d8:3a:a8:7f:d8:2d:a0:
3b:76:1d:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURfrIT7WStQFb2pXGIi8HPCQ9eX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4
RjM4QkFBNjAeFw0yNTAxMzExNTI3MTNaFw0yNTAyMDMyMzM1MTNaMDMxMTAvBgNV
BAMTKDBGNzk0MzBBNzRCQUM1MzREMUJBNUQ5RDU5QzdDNzBBODY0MkRCNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfy5zin0KSxK4irYJyovYEjiW
yKME72mlgo3jUmMtHYInkujUY4EPB7HOr8XkA1FHHMuPqS5MLjXwi19v01oNutbW
2tS9v7QmnnWz1AASOB0Q6OKMtNbwnjJXTpg43ARdU8juDYe9Q1Dilak+4+nEqCit
9NfBV68KAdKqcoQKCApvc3kkxtglizGIM2CyFGoTu+1GUTvTDNYcNXL4jTViTiLc
3ryn4IPhWZCGgbvqIst3JtQkchycyTs3QAGTtaLyqeuj3DSZ8DYgvONU+ebeo9Py
bQ6+LgrQ07o2VNgV0xRBzeG1srJeC1FWfgzx3Hsso08n8EiFopsShT6h8uolAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUD3lDCnS6xTTRul2dWcfHCoZC21AwHwYDVR0j
BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5
MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4
QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl
ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE
MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGFrFjy348rMUIRbGmE3XG01Izjf8Yj6lWhC
RqChATxXVOQDt3nh53G3G6p7Yk1/8+w1tk9yuOoZ49ddvN4QYB7ewM4wwoUvWYRy
DSjghMDSTz/QPiVjxmbpxhIZORCURchA3hfxDg9Y8GyOGWkOh9b5ZvJnQhslSf7y
15icP4xiCGVX0G3Gie+v8hWs+gZvy3OFDTBsM8LnWEzS+XbYlfasr2rf1PHeGeZ7
MLPgA1vNiz1JS/TLg4s90k3URK6CEQG78xJ5R/8VSxM7YREgjsPgYFSvUDBstRbM
OkA3dLTDNW+B0u8nG/A9RU8qh2BX/mqKSmQ72Dqof9gtoDt2HWE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:34 2025 by rpki-client