Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft
File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json)
Hash identifier: J6OJ/jg+iPUVYkBram/MNSXZ9mX1dfydR1KuXRKrTVc=
Subject key identifier: 40:1E:AE:D2:3A:86:0F:CC:8C:04:E6:54:AD:B3:17:5E:AC:60:7F:85
Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9
Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9
Certificate serial: 1BAAA446DFE3BB884D9935F8F04B1509DAF90328
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft
Manifest number: 04A4
Signing time: Wed 29 Jan 2025 12:51:17 +0000
Manifest this update: Wed 29 Jan 2025 12:46:17 +0000
Manifest next update: Sat 01 Feb 2025 21:56:17 +0000
Files and hashes: 1: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: SyMDpPF2FoklTI2NijY0LaMf/M6MwmDhQZcOL16c+ak=)
2: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: vzSMLWMHxbHbmKZs1ww72s93hpXFUe/64ZqkfEBoPE8=)
3: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: 4ZQAqwv3D6xv0wZbi1M8yeP/AQMFxtqYLV8/krPMgXw=)
4: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: LMahtEVFw1WQXjV2Jt5sgAVQZXkjGaxRYhPgCUjt0lU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:aa:a4:46:df:e3:bb:88:4d:99:35:f8:f0:4b:15:09:da:f9:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9
Validity
Not Before: Jan 29 12:46:17 2025 GMT
Not After : Feb 1 21:56:17 2025 GMT
Subject: CN=401EAED23A860FCC8C04E654ADB3175EAC607F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:5d:1b:7e:56:d5:b6:ce:d6:96:3d:4c:30:
71:8b:db:cc:0d:05:de:80:2e:be:1d:27:83:3a:a0:
ea:64:de:ea:c2:37:58:10:bf:3e:f3:c9:b6:12:56:
73:1e:b3:40:9e:c2:1a:61:30:b3:4c:e7:e3:63:91:
08:56:6a:3e:ea:17:9f:e5:6b:8c:86:1e:f2:40:c0:
5e:b4:fe:71:26:06:ce:84:02:59:19:46:01:52:37:
73:37:6d:80:cb:99:24:21:a1:e8:33:14:d5:d9:36:
70:97:4b:5c:aa:72:63:0d:4a:44:ad:fc:e8:43:90:
3f:18:f1:39:a4:8f:e1:3d:c2:5d:5c:ff:43:5b:6b:
26:c3:4c:b4:71:8a:5e:6a:a7:78:35:33:c3:b1:f5:
45:d3:a4:f2:82:d0:44:bf:c4:5a:b5:86:a1:59:dd:
81:7f:1b:ff:f8:39:ea:20:43:58:a0:1a:9d:7d:96:
7d:1d:6d:52:76:8d:9f:33:58:dc:49:95:41:00:93:
6b:af:28:6a:27:ea:39:33:8e:e3:65:e6:48:5d:b3:
14:97:10:f3:33:b3:80:75:65:e7:a6:72:13:1e:0f:
6c:7b:9f:af:76:b5:12:08:b9:34:f8:66:f6:ca:39:
48:99:e3:d6:ac:cb:58:68:27:67:47:85:65:1d:b9:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:AE:D2:3A:86:0F:CC:8C:04:E6:54:AD:B3:17:5E:AC:60:7F:85
X509v3 Authority Key Identifier:
keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:76:3d:a7:1f:6c:f8:d7:d5:7a:4b:23:dc:d2:0d:1a:6a:1b:
03:87:f9:57:73:b9:cb:d9:1d:be:16:06:4b:18:2b:fe:e7:bd:
13:d7:93:90:c7:76:1d:cd:10:21:e6:cd:a3:10:fe:52:59:c6:
3d:f8:be:b6:e8:a4:b4:b5:e3:2e:03:e9:72:2f:0f:03:44:47:
c5:e8:ee:dd:76:72:9e:a3:58:9a:0b:c4:9c:5c:61:41:88:a4:
08:7b:36:6d:84:36:7b:8d:fc:2d:5d:6a:cc:7f:76:3d:66:32:
90:12:36:2c:8e:76:3d:d3:93:60:85:57:e2:99:87:99:6b:2e:
fa:c6:5a:9b:9a:d2:92:3e:d2:85:4e:1d:d5:85:e6:e9:94:06:
7d:c9:50:f6:04:c5:de:d5:bf:29:a6:fd:bc:b3:3f:fc:28:77:
90:54:a9:3b:da:21:19:c1:df:50:77:5c:83:e8:52:fc:e9:78:
96:35:58:29:19:6a:41:e9:97:05:61:83:d9:6a:f5:e2:b8:1c:
fd:3b:34:b8:8c:06:95:93:4b:f6:e9:31:59:86:72:b0:b2:ec:
49:b0:f5:8f:a6:87:e4:3d:0a:ce:15:1d:f7:28:ea:49:80:a3:
51:3f:3d:ed:be:a1:a5:9b:0d:95:99:dc:1e:bc:52:ff:a2:c1:
b1:4a:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:02 2025 by rpki-client