Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft
File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json)
Hash identifier: 5HqTXBgUGljHX4AfvelcEMpYCJTEh2Wi8A8HabRZpqk=
Subject key identifier: 09:88:8B:79:45:4C:8A:74:33:FF:8E:C1:79:1F:53:65:27:63:F3:FB
Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14
Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14
Certificate serial: 30568034E1BEA0962D7ADB97A18F1587D588413F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft
Manifest number: 01E5
Signing time: Thu 30 Jan 2025 07:02:02 +0000
Manifest this update: Thu 30 Jan 2025 06:57:02 +0000
Manifest next update: Sun 02 Feb 2025 11:57:02 +0000
Files and hashes: 1: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=)
2: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=)
3: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: VxJrfGsb5JL/NNGS7Uzy8KmeGUjKm/7DatRlJ2BRAu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:56:80:34:e1:be:a0:96:2d:7a:db:97:a1:8f:15:87:d5:88:41:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14
Validity
Not Before: Jan 30 06:57:02 2025 GMT
Not After : Feb 2 11:57:02 2025 GMT
Subject: CN=09888B79454C8A7433FF8EC1791F53652763F3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:20:d6:d7:24:2a:db:ce:bf:78:ce:f8:bf:
28:77:70:bc:40:c3:d0:1c:c0:d0:9f:5e:c7:6d:59:
24:37:cb:87:88:3d:f9:5f:bd:9d:66:a5:f9:58:71:
76:60:8d:20:95:06:7f:6d:3b:d5:94:88:94:b9:99:
fa:82:a7:14:a8:c9:b1:e2:69:14:77:a8:c4:63:1f:
cb:1f:28:18:7a:23:a7:6c:6b:dc:dd:01:00:bd:79:
1a:9d:89:72:86:37:98:9c:d1:23:3d:83:71:8c:d7:
db:25:ba:b0:bd:e4:e4:df:67:6b:21:ee:cf:88:fa:
f1:dc:89:bb:4d:3c:d7:cb:51:af:ca:21:4a:fd:89:
cf:0b:d5:5c:47:2c:65:f2:1a:61:f7:34:7a:c7:94:
30:48:98:f4:83:9c:fd:a8:55:a0:e6:ec:d2:5d:57:
5a:7b:5c:da:35:6a:7e:a1:cc:bb:46:67:ce:ef:f5:
d6:a1:7c:18:47:a5:eb:12:55:37:5c:30:44:07:16:
8b:3b:b2:10:89:2d:94:40:46:34:fe:8d:8a:99:ca:
19:cc:2c:44:e4:e0:15:46:13:51:11:b3:74:2f:94:
d0:fc:a8:b0:61:a1:1b:6a:16:14:cb:84:b8:72:b2:
de:48:45:78:05:cd:54:7b:22:4f:28:1d:0b:0f:bc:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:8B:79:45:4C:8A:74:33:FF:8E:C1:79:1F:53:65:27:63:F3:FB
X509v3 Authority Key Identifier:
keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d6:c3:35:77:d7:60:e5:ef:06:02:0b:14:f0:e1:72:e5:01:
04:2d:96:e9:33:81:7f:55:c7:99:48:0c:51:22:6b:38:91:51:
54:64:8b:b1:94:07:32:c1:3a:ab:ea:05:db:82:4d:88:a1:23:
d4:56:4d:78:9d:85:b4:dc:8d:fa:5f:56:65:c1:ad:ad:4d:ff:
1c:0b:ed:6a:26:71:9b:e1:7c:1b:f5:ad:88:e8:89:35:99:59:
76:34:5b:a7:77:a6:df:04:b6:49:92:11:2a:82:a2:4e:f8:53:
bc:01:8f:70:23:86:dc:e6:54:e7:a5:14:e6:4b:65:82:ba:af:
b5:6b:00:a9:aa:70:9c:a8:27:53:89:6b:fb:00:f8:5c:86:5b:
6f:e5:1c:ff:b7:a7:f2:ce:1b:94:c1:f1:01:95:c6:15:49:bd:
a2:3a:51:46:60:ce:c1:f4:ea:0b:b4:bf:ff:f5:f2:05:1f:c5:
eb:45:b4:8d:9f:e8:19:cd:06:3a:75:72:08:58:ba:cb:5e:3b:
9d:28:a1:40:0e:cd:9f:ea:e9:2f:2a:fd:e3:4d:43:8f:57:0d:
98:07:66:18:fd:ae:5f:19:bd:ee:85:2d:41:cb:77:5e:22:f9:
40:71:b5:a3:10:b1:4a:b7:52:4c:c2:ec:84:e9:b4:18:39:d0:
4f:38:61:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMFaANOG+oJYtetuXoY8Vh9WIQT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw
MEJBOEYxNDAeFw0yNTAxMzAwNjU3MDJaFw0yNTAyMDIxMTU3MDJaMDMxMTAvBgNV
BAMTKDA5ODg4Qjc5NDU0QzhBNzQzM0ZGOEVDMTc5MUY1MzY1Mjc2M0YzRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JiDW1yQq286/eM74vyh3cLxA
w9AcwNCfXsdtWSQ3y4eIPflfvZ1mpflYcXZgjSCVBn9tO9WUiJS5mfqCpxSoybHi
aRR3qMRjH8sfKBh6I6dsa9zdAQC9eRqdiXKGN5ic0SM9g3GM19slurC95OTfZ2sh
7s+I+vHcibtNPNfLUa/KIUr9ic8L1VxHLGXyGmH3NHrHlDBImPSDnP2oVaDm7NJd
V1p7XNo1an6hzLtGZ87v9dahfBhHpesSVTdcMEQHFos7shCJLZRARjT+jYqZyhnM
LETk4BVGE1ERs3QvlND8qLBhoRtqFhTLhLhyst5IRXgFzVR7Ik8oHQsPvCXlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCYiLeUVMinQz/47BeR9TZSdj8/swHwYDVR0j
BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD
NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB
OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk
YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx
RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABfWwzV312Dl7wYCCxTw4XLlAQQtlukzgX9V
x5lIDFEiaziRUVRki7GUBzLBOqvqBduCTYihI9RWTXidhbTcjfpfVmXBra1N/xwL
7WomcZvhfBv1rYjoiTWZWXY0W6d3pt8EtkmSESqCok74U7wBj3AjhtzmVOelFOZL
ZYK6r7VrAKmqcJyoJ1OJa/sA+FyGW2/lHP+3p/LOG5TB8QGVxhVJvaI6UUZgzsH0
6gu0v//18gUfxetFtI2f6BnNBjp1cghYusteO50ooUAOzZ/q6S8q/eNNQ49XDZgH
Zhj9rl8Zve6FLUHLd14i+UBxtaMQsUq3UkzC7ITptBg50E84YRk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:36 2025 by rpki-client