Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json)
Hash identifier: 8m9cgRvaNfUbwRJs4WSyFXLUBQEDNPDu++dNXjga398=
Subject key identifier: 91:0C:DB:5C:33:EC:98:FF:33:AC:00:26:63:25:77:2B:80:D2:73:8B
Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Certificate serial: 6B5759D70697269FE7339DBFA18999B2CD233BCC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
Manifest number: 4A
Signing time: Fri 31 Jan 2025 14:40:54 +0000
Manifest this update: Fri 31 Jan 2025 14:35:54 +0000
Manifest next update: Mon 03 Feb 2025 15:34:54 +0000
Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: aVkWtYQeXbkRmk1yznzgBe7fvpPNXwFmp2M48sE9A+g=)
2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: OIW5ZxZgg4zePsv5VjchEv4C1dk5VO2lORi7UxbMklU=)
3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: 9AjR9tv/q/qBFX1qgM3Ou/29ijQlZf2Xh16VQ5oOJiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:57:59:d7:06:97:26:9f:e7:33:9d:bf:a1:89:99:b2:cd:23:3b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Validity
Not Before: Jan 31 14:35:54 2025 GMT
Not After : Feb 3 15:34:54 2025 GMT
Subject: CN=910CDB5C33EC98FF33AC00266325772B80D2738B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:15:1f:5d:f9:6b:44:d0:ff:40:e8:f3:39:
8f:64:cf:f0:88:0b:f3:14:35:70:dd:6c:45:8e:65:
a9:44:f7:ca:cc:df:cd:ac:11:db:48:63:d4:9c:d1:
10:31:d9:e9:0a:c3:2f:fc:ee:c7:94:ab:df:4e:3f:
14:cf:6b:62:5e:3e:80:64:60:8f:2d:30:0f:c9:db:
ea:46:6c:c5:d1:ad:88:a6:28:95:24:e3:1e:70:73:
d3:51:4e:27:3c:86:5a:f8:2c:80:70:95:3f:cd:d1:
7a:02:7f:de:2e:00:42:7c:cf:4f:37:d6:35:e5:65:
01:7f:fb:4a:a6:6b:bb:c0:59:8b:d3:3a:56:90:1e:
86:ce:25:17:80:4b:07:9f:0f:00:fc:47:c0:28:74:
38:3a:9f:4f:90:f7:f3:d0:fb:38:ba:53:6b:69:8b:
2c:1a:5d:30:e4:f6:e9:07:db:12:c2:ee:86:c6:5e:
56:e3:59:c7:aa:52:a7:c9:b6:b2:df:f3:61:78:75:
83:2e:d2:94:84:ea:ec:23:e1:c5:ce:85:cc:da:96:
8f:4d:de:e2:3b:cb:60:e9:d0:78:3d:42:74:04:93:
f1:0e:79:69:1a:53:d6:3b:ef:5e:39:52:e8:ea:89:
7a:fc:59:70:cf:9b:2b:3d:a2:dc:31:19:89:23:19:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:DB:5C:33:EC:98:FF:33:AC:00:26:63:25:77:2B:80:D2:73:8B
X509v3 Authority Key Identifier:
keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:49:ac:b6:14:4a:2d:fd:ff:6d:a3:b8:3a:51:06:c8:0e:13:
4e:10:a4:e5:33:bc:54:c8:7f:b0:0f:f5:11:d1:58:35:37:15:
0b:47:6f:9f:73:99:56:a3:0e:ae:04:86:36:00:ac:ac:56:df:
83:9b:95:e3:ac:d4:25:d5:10:93:c1:69:22:f7:92:51:03:0b:
60:05:df:fa:b8:3b:a0:a5:04:80:6a:ef:47:20:6a:ec:51:f4:
34:ba:d6:77:d1:a1:05:8d:32:15:af:3d:a9:72:fe:eb:4d:f8:
8c:16:86:68:04:59:19:05:56:2e:f3:19:8c:74:2e:f7:30:16:
31:f6:fe:2c:9b:5c:6e:24:38:88:23:62:a5:a6:21:41:d1:d6:
df:d6:dc:4a:97:54:2a:4d:8f:d9:61:90:66:d5:b4:57:5c:6b:
98:ca:37:32:11:ec:02:75:46:35:b2:ae:b0:d9:dc:a0:e3:8e:
e1:46:40:8a:fb:35:bc:1f:89:56:f1:a8:10:86:7a:29:86:1a:
ca:37:5c:53:46:85:26:ba:f6:b9:64:18:41:98:4a:37:e0:52:
99:9e:f5:b2:34:7c:08:08:f4:ee:00:fa:79:b4:77:72:d6:c3:
de:63:48:30:e3:c7:44:57:e8:e0:59:ea:b9:c9:96:d4:57:87:
d2:22:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:47 2025 by rpki-client