Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json)
Hash identifier: zEnYnbnLa8Q0JsECp3G5BI4ZFgrQB0aUuf+FiBsVhnA=
Subject key identifier: 95:79:6E:FC:2B:CD:16:D4:1E:51:D4:B0:A0:CF:32:C6:7A:E9:8A:DB
Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16
Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
Certificate serial: 194647F9946FAA3C31ABD51875F06947BEBBEFF0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
Manifest number: 012C
Signing time: Thu 30 Jan 2025 03:20:37 +0000
Manifest this update: Thu 30 Jan 2025 03:15:37 +0000
Manifest next update: Sun 02 Feb 2025 10:40:37 +0000
Files and hashes: 1: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: y6DDdNTwLYs5pexyb3VjHTDAgSYKVRMMWz8l7Tn9rog=)
2: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: e4VLivRpwRAw3w/XKoqUU2cPieLl/kGAAGYs4s86Qxs=)
3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: tAlwrN0RRkATREGU1StDALH0hm3nP8KmjbnqdKRhKXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:46:47:f9:94:6f:aa:3c:31:ab:d5:18:75:f0:69:47:be:bb:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
Validity
Not Before: Jan 30 03:15:37 2025 GMT
Not After : Feb 2 10:40:37 2025 GMT
Subject: CN=95796EFC2BCD16D41E51D4B0A0CF32C67AE98ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:b7:85:f3:21:bc:d0:84:3a:79:26:94:71:
31:1f:4e:48:a5:24:be:01:37:1b:fe:84:07:3f:1b:
68:bb:26:a4:ab:71:5f:c2:ee:9d:4f:d1:d9:8b:63:
ec:2c:a6:ff:75:85:bc:59:1c:5a:33:31:ad:9a:4a:
9d:e9:9a:df:eb:a4:da:1c:dc:48:d3:84:4f:ec:7b:
5e:d3:af:53:1f:0a:de:a3:19:90:1e:c0:7e:0e:65:
a5:48:a8:80:81:fa:bb:3b:6c:db:d9:3c:de:ca:8e:
9b:ba:d1:9c:8f:d5:60:3b:bc:db:1e:e6:79:3a:0b:
10:6a:71:c5:02:63:99:b9:02:14:f4:a5:7f:1c:84:
07:4f:76:f2:64:0f:c3:e7:3a:8d:ac:81:8a:49:28:
4a:0c:9d:1c:98:ea:1a:58:88:35:0f:f6:03:94:07:
f5:af:05:af:1c:49:9f:a7:d1:60:5f:be:4e:88:dd:
97:d3:2d:73:b6:24:4e:b4:f1:b2:e6:af:3f:a5:d6:
57:c4:06:e8:82:f5:39:fd:56:cb:db:b1:87:35:77:
c2:d3:18:ca:3d:ad:02:f5:25:9b:b4:06:e5:cf:de:
bb:03:3b:57:c1:5c:bf:1a:57:9a:d6:14:3f:70:1d:
c5:1d:1a:94:b9:df:64:73:6b:ca:52:d8:b2:f4:bb:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:79:6E:FC:2B:CD:16:D4:1E:51:D4:B0:A0:CF:32:C6:7A:E9:8A:DB
X509v3 Authority Key Identifier:
keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:55:f9:2f:42:bc:3f:ae:b8:4c:6f:14:07:6b:6c:c9:ad:7f:
d2:f8:75:cb:c5:dc:12:77:cc:84:e2:c6:2d:37:81:16:c4:18:
52:91:0a:35:a5:42:08:7f:66:9e:11:13:e5:e5:df:42:3b:d7:
86:6a:51:e3:08:45:c8:16:97:d7:3f:39:14:0d:c3:0b:12:4c:
98:32:fc:3a:0f:bb:58:c4:32:0c:f1:75:a9:a2:6d:45:ca:ac:
6f:56:a3:0b:14:f4:06:c6:ec:9b:4f:57:67:99:a2:80:89:23:
39:64:e9:73:b9:e6:c0:80:ad:95:91:fb:56:29:91:30:0c:b0:
d9:15:f8:4b:74:00:3e:f1:b8:2f:f3:fd:19:d1:ea:cd:ab:4d:
11:44:05:e8:1a:c2:c9:56:ee:46:43:8b:c9:0b:13:71:97:cc:
9f:5f:cb:d4:e6:05:aa:22:2a:16:94:32:a1:98:df:46:83:0e:
c4:8c:f9:90:45:cc:5a:68:4b:d6:0d:c2:69:e2:37:2d:75:63:
94:28:2d:9c:14:b9:7d:2d:94:02:30:3d:b4:d3:7e:f2:96:ae:
73:cf:eb:59:c3:b0:39:1c:39:28:14:94:7b:aa:cb:8c:05:e2:
28:16:77:d3:a5:4e:09:94:f9:a9:07:f5:60:4d:2f:ca:b1:c1:
f1:46:c4:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGUZH+ZRvqjwxq9UYdfBpR7677/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz
RjNFNkYxNjAeFw0yNTAxMzAwMzE1MzdaFw0yNTAyMDIxMDQwMzdaMDMxMTAvBgNV
BAMTKDk1Nzk2RUZDMkJDRDE2RDQxRTUxRDRCMEEwQ0YzMkM2N0FFOThBREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdR7eF8yG80IQ6eSaUcTEfTkil
JL4BNxv+hAc/G2i7JqSrcV/C7p1P0dmLY+wspv91hbxZHFozMa2aSp3pmt/rpNoc
3EjThE/se17Tr1MfCt6jGZAewH4OZaVIqICB+rs7bNvZPN7Kjpu60ZyP1WA7vNse
5nk6CxBqccUCY5m5AhT0pX8chAdPdvJkD8PnOo2sgYpJKEoMnRyY6hpYiDUP9gOU
B/WvBa8cSZ+n0WBfvk6I3ZfTLXO2JE608bLmrz+l1lfEBuiC9Tn9VsvbsYc1d8LT
GMo9rQL1JZu0BuXP3rsDO1fBXL8aV5rWFD9wHcUdGpS532Rza8pS2LL0uwadAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlXlu/CvNFtQeUdSwoM8yxnrpitswHwYDVR0j
BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0
RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF
NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk
YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2
NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEdV+S9CvD+uuExvFAdrbMmtf9L4dcvF3BJ3
zITixi03gRbEGFKRCjWlQgh/Zp4RE+Xl30I714ZqUeMIRcgWl9c/ORQNwwsSTJgy
/DoPu1jEMgzxdamibUXKrG9WowsU9AbG7JtPV2eZooCJIzlk6XO55sCArZWR+1Yp
kTAMsNkV+Et0AD7xuC/z/RnR6s2rTRFEBegawslW7kZDi8kLE3GXzJ9fy9TmBaoi
KhaUMqGY30aDDsSM+ZBFzFpoS9YNwmniNy11Y5QoLZwUuX0tlAIwPbTTfvKWrnPP
61nDsDkcOSgUlHuqy4wF4igWd9OlTgmU+akH9WBNL8qxwfFGxPk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:24 2025 by rpki-client