Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json)
Hash identifier: EMYtk3xE/vsleNP6hOyz67jcpK5uqfw5KGenZLhTOTQ=
Subject key identifier: A5:F2:BE:0A:29:34:1D:BD:C6:AC:50:48:31:8A:01:84:9D:F1:D1:C1
Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1
Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
Certificate serial: 6487C0B7FD3D36FDF155AA6BC108D9F326FEB231
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
Manifest number: 0320
Signing time: Wed 29 Jan 2025 17:41:50 +0000
Manifest this update: Wed 29 Jan 2025 17:36:50 +0000
Manifest next update: Sun 02 Feb 2025 00:32:50 +0000
Files and hashes: 1: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: ebAK5L4tIsBW1nRCmmklnbjS34okZQKG2r4eXgvrg64=)
2: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: cht8R/iqaCD9kq0d6hnemIMotf2+Dd/TcJOdLZkBdcs=)
3: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: 5fH5YxljF6F0G4TVWbHmIu6Dns+NXwWmiKFQdiPtmGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:87:c0:b7:fd:3d:36:fd:f1:55:aa:6b:c1:08:d9:f3:26:fe:b2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
Validity
Not Before: Jan 29 17:36:50 2025 GMT
Not After : Feb 2 00:32:50 2025 GMT
Subject: CN=A5F2BE0A29341DBDC6AC5048318A01849DF1D1C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:8f:ac:6e:e3:ce:65:c0:44:78:0a:99:29:
05:97:af:36:22:c5:1d:98:24:13:b1:7a:97:df:4a:
c1:17:45:9e:7d:b5:c5:22:1e:76:32:4b:a9:02:85:
e1:41:91:f4:46:76:02:3c:50:ca:40:bc:1e:62:4f:
0d:a8:61:6f:69:ee:77:da:83:7a:90:74:ad:d8:65:
97:4b:3f:ca:53:79:0d:3b:79:25:d9:b2:ba:d2:8b:
34:28:8b:f2:ec:df:91:ee:8a:97:a3:a5:95:9a:70:
91:be:d0:31:f2:63:ba:ed:c4:6e:ba:cc:fc:4d:7e:
6b:f3:49:fc:cf:24:22:8b:43:62:fa:3f:70:6c:cb:
97:e5:70:25:2f:77:9d:9e:03:3c:c8:e9:c8:16:3b:
b8:b9:5f:84:08:61:fa:96:44:40:6a:ad:68:19:d4:
0f:cc:d9:64:c8:ec:38:07:7a:83:67:cb:29:ab:1d:
f3:6a:a2:e2:e0:ca:94:29:ff:ea:e3:b9:7c:87:6d:
dd:d1:fe:3b:63:0a:5c:e0:7c:6d:bf:6b:d8:ca:cc:
d3:9c:85:e1:d1:5a:e7:24:87:50:dc:9d:d8:6f:c4:
f6:86:45:0c:9a:00:23:de:f8:ad:a0:16:eb:86:57:
dd:20:f4:b2:91:c0:5d:13:af:89:6f:ec:d7:b5:6d:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:BE:0A:29:34:1D:BD:C6:AC:50:48:31:8A:01:84:9D:F1:D1:C1
X509v3 Authority Key Identifier:
keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:be:74:9e:45:08:6e:5c:9f:fc:7c:45:e6:8c:b5:63:9a:14:
86:7e:31:88:e4:e2:ff:c6:e0:57:1c:04:1b:03:1c:7b:99:54:
e2:9a:6a:2c:2d:1e:0d:7c:51:1f:53:7d:95:1f:56:a6:42:5c:
09:74:4b:5a:84:e1:88:1e:58:69:1e:de:e9:85:7e:50:bc:a0:
c3:d9:04:85:61:c9:66:42:31:43:72:c3:84:07:79:04:74:73:
e3:e5:07:91:2f:84:01:51:74:be:73:2f:66:45:03:07:ee:50:
63:e6:5a:58:c7:d0:db:2e:e1:5e:d6:5b:bc:4a:d6:1d:a6:95:
a6:04:43:58:4a:f2:53:37:1d:09:e0:ca:ca:c0:40:df:10:83:
49:3c:b2:fa:bd:90:48:f1:dc:f0:1e:43:21:de:45:68:ff:84:
69:aa:40:cf:5c:1a:9b:c9:81:d5:6d:a1:d5:e5:89:17:9b:25:
0c:69:7a:13:b9:9a:b4:92:fc:cb:74:fb:70:2b:42:e0:d1:56:
cc:4a:22:98:ff:21:dd:a5:27:16:79:bc:97:79:41:24:81:7a:
52:b1:44:f9:1c:ee:27:65:df:33:0d:3b:6d:48:d7:28:28:72:
49:26:0e:d5:df:18:8e:9f:ef:19:68:ee:a7:49:2f:aa:6a:9a:
43:a4:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:16 2025 by rpki-client