
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft
File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json)
Hash identifier: K2tLAufkh8cXc0iu+eDF0Uwz1NcF9HtkjTuM2k/Dhq8=
Subject key identifier: 48:7A:3B:16:DC:BB:47:9C:BF:75:2E:11:D1:B0:53:7A:DE:7A:C9:36
Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76
Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476
Certificate serial: 6CC5D817F2EAF55D57739FFA34DFFFBF9E21D0A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft
Manifest number: 71
Signing time: Thu 30 Jan 2025 05:11:52 +0000
Manifest this update: Thu 30 Jan 2025 05:06:52 +0000
Manifest next update: Sun 02 Feb 2025 08:52:52 +0000
Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: lIhOfDlhY7ud3f2ucps1dnKr2eXlY5TAtD2eXgI+z04=)
2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: mNyigsx6fiPTgdjz6nFdMMBq/cl8SacZCUjTw8QheXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c5:d8:17:f2:ea:f5:5d:57:73:9f:fa:34:df:ff:bf:9e:21:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476
Validity
Not Before: Jan 30 05:06:52 2025 GMT
Not After : Feb 2 08:52:52 2025 GMT
Subject: CN=487A3B16DCBB479CBF752E11D1B0537ADE7AC936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:39:6a:7f:49:95:49:18:e0:24:09:bc:79:
f2:ed:e4:d4:a4:8b:b1:0a:09:80:83:7d:37:72:50:
21:81:2e:52:d4:92:36:49:f0:db:bb:34:9c:0e:17:
bb:07:b3:2f:be:96:b3:ad:c1:3a:0b:5e:e7:32:97:
0e:c9:8c:af:d8:2a:76:47:b1:26:8b:31:15:5e:72:
2b:c6:a0:39:65:e3:ae:54:10:59:1a:34:ec:38:a5:
b1:8e:44:05:d2:6f:1b:54:59:ed:a8:f8:61:41:e3:
5a:29:f2:66:fa:f9:a7:77:70:86:73:f7:5d:c7:9a:
7d:21:4d:b1:ce:0b:75:27:0a:ed:88:a5:72:b8:91:
0c:b8:72:a4:2c:aa:30:14:5e:1b:2d:44:1e:05:50:
d2:f5:36:c2:49:bb:90:38:46:af:10:f4:9a:50:fa:
cb:81:b6:a8:da:c1:ab:b4:ea:3a:d4:a9:a5:f6:96:
35:6f:b1:b6:09:e3:1b:55:f8:bb:51:ac:3b:31:d2:
73:61:6e:75:2c:f5:cf:ef:82:7c:c7:ab:25:5c:68:
96:6a:a9:48:8f:6c:d8:32:ec:9d:62:ee:b5:53:91:
c9:05:c6:e1:16:02:65:8a:e6:3d:3e:3e:02:47:f9:
84:b5:fa:75:e5:62:da:f9:27:9d:a8:53:dd:19:03:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7A:3B:16:DC:BB:47:9C:BF:75:2E:11:D1:B0:53:7A:DE:7A:C9:36
X509v3 Authority Key Identifier:
keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:fc:ba:fc:62:ab:b3:2a:80:03:34:68:31:58:a5:b8:86:
07:a6:ab:ce:02:40:9b:90:7c:11:c9:c2:05:ba:d9:bb:f7:e9:
ce:30:c5:3f:0f:dc:c4:0c:84:7f:69:ec:c5:a5:15:a3:4e:b3:
98:05:d1:38:8f:aa:0e:08:42:22:70:51:3a:44:51:e1:c8:d8:
3c:43:ba:9d:00:3a:61:b5:dd:31:c6:47:f1:d3:19:72:43:29:
a0:38:e6:32:2e:39:dc:c6:59:20:fd:9a:44:5d:61:f9:e9:98:
6b:5a:ff:3b:d0:ed:87:df:7a:47:a5:8f:39:28:18:92:26:1f:
10:c9:9b:91:1d:5c:e2:1e:fb:40:bc:d5:d5:ac:6e:df:93:3e:
f2:89:9d:e8:d3:ea:e6:0e:3d:2a:1b:e2:63:2c:7b:8f:ab:1e:
d3:1b:e0:a6:ba:02:52:04:8e:dd:7e:e8:05:4c:6a:2f:f2:24:
e7:7e:ea:04:de:b0:76:0f:cb:83:55:46:2c:18:25:97:26:0f:
28:a6:22:30:e6:c8:7a:6d:98:e2:10:3b:2f:52:f2:2d:c4:7d:
a0:08:d0:b3:31:b5:c1:12:26:de:49:80:3c:7a:72:b3:cc:af:
49:18:e1:00:af:cd:32:e7:ae:cd:1d:40:b7:31:34:67:c6:a7:
1c:c4:5f:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbMXYF/Lq9V1Xc5/6NN//v54h0KUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx
MDIxQjQ3NjAeFw0yNTAxMzAwNTA2NTJaFw0yNTAyMDIwODUyNTJaMDMxMTAvBgNV
BAMTKDQ4N0EzQjE2RENCQjQ3OUNCRjc1MkUxMUQxQjA1MzdBREU3QUM5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmDlqf0mVSRjgJAm8efLt5NSk
i7EKCYCDfTdyUCGBLlLUkjZJ8Nu7NJwOF7sHsy++lrOtwToLXucylw7JjK/YKnZH
sSaLMRVecivGoDll465UEFkaNOw4pbGORAXSbxtUWe2o+GFB41op8mb6+ad3cIZz
913Hmn0hTbHOC3UnCu2IpXK4kQy4cqQsqjAUXhstRB4FUNL1NsJJu5A4Rq8Q9JpQ
+suBtqjawau06jrUqaX2ljVvsbYJ4xtV+LtRrDsx0nNhbnUs9c/vgnzHqyVcaJZq
qUiPbNgy7J1i7rVTkckFxuEWAmWK5j0+PgJH+YS1+nXlYtr5J52oU90ZA7LNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSHo7Fty7R5y/dS4R0bBTet56yTYwHwYDVR0j
BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF
OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx
QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm
NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4
NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIsM/Lr8YquzKoADNGgxWKW4hgemq84CQJuQ
fBHJwgW62bv36c4wxT8P3MQMhH9p7MWlFaNOs5gF0TiPqg4IQiJwUTpEUeHI2DxD
up0AOmG13THGR/HTGXJDKaA45jIuOdzGWSD9mkRdYfnpmGta/zvQ7Yffekeljzko
GJImHxDJm5EdXOIe+0C81dWsbt+TPvKJnejT6uYOPSob4mMse4+rHtMb4Ka6AlIE
jt1+6AVMai/yJOd+6gTesHYPy4NVRiwYJZcmDyimIjDmyHptmOIQOy9S8i3EfaAI
0LMxtcESJt5JgDx6crPMr0kY4QCvzTLnrs0dQLcxNGfGpxzEXys=
-----END CERTIFICATE-----
Generated at Tue May 6 23:28:17 2025 by rpki-client