Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
File: BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json)
Hash identifier: T3iqXXB8xTGIbHq1IYIGMZOOg2mXJak0kwvuz6UTihU=
Subject key identifier: BD:54:B4:16:29:6F:86:12:F6:0A:75:9F:6A:67:C6:BA:20:AF:33:56
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Certificate issuer: /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial: 384F7865B1E072208D16730D724538B9E8957D05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
Manifest number: 04A9
Signing time: Thu 30 Jan 2025 02:31:16 +0000
Manifest this update: Thu 30 Jan 2025 02:26:16 +0000
Manifest next update: Sun 02 Feb 2025 14:06:16 +0000
Files and hashes: 1: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: vPGDL5Uz+m1Ri6z0hdVmq01za5aH2UUg8pKyvgRNgpw=)
2: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: /TQ9lPnPYqONrVYXhhohcl7UP563J9mX/0O81vxmXto=)
3: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: pbhhW/T4QYFpANmSbko4Pn15Hrxc5CLsjrjH+moakkM=)
4: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: 7PxedSipsNTZyiV9fxG1frgwTkAEJ+zZ1V+jTL4oKzQ=)
5: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: fLXVT7lGT6QWujn3tIusyMzrLDKrWbnN+mifeaCOu/U=)
6: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: v92EWX5PrX2ocfEiVVqNZStsTUP7VHqvGQh9Jsm+CN4=)
7: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: nt1QsIR2/VTpq/gPzXLelbSl6xD9WFY/MWpy/7R6s+8=)
8: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: BlERiRMKFqkgyqTsj7YKl6ODg1kHmptUNWRLGRCZ1OE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:4f:78:65:b1:e0:72:20:8d:16:73:0d:72:45:38:b9:e8:95:7d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Validity
Not Before: Jan 30 02:26:16 2025 GMT
Not After : Feb 2 14:06:16 2025 GMT
Subject: CN=BD54B416296F8612F60A759F6A67C6BA20AF3356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:be:a9:1a:15:3a:74:1d:ee:d5:06:9f:f0:
f2:6b:06:7f:00:dd:43:6c:d3:89:c9:80:6c:e6:82:
9e:62:3c:e8:0a:97:13:d6:50:97:53:28:2f:57:c2:
4c:05:2d:92:63:f9:c5:77:a8:a1:67:9c:98:0d:fe:
dc:37:0f:27:89:a7:1f:11:99:4c:ed:f1:c8:d9:c9:
2e:22:2d:fa:cc:ab:87:e7:3c:6d:2b:f7:9f:fb:d3:
dc:a7:5a:d8:df:36:59:4b:ec:4e:c4:92:76:e1:e7:
6d:c9:f6:32:04:b9:5b:51:dc:65:1f:4c:36:d6:59:
47:d4:de:ce:43:56:80:c3:ce:83:60:92:81:44:ef:
6a:ad:a9:99:52:59:41:6e:19:c5:ab:5b:f1:db:9f:
93:50:16:96:98:b0:df:1b:ec:e0:7a:77:8f:aa:5e:
e1:0e:93:e2:06:28:35:50:92:b9:bf:01:6c:14:90:
6c:1d:f0:45:65:8d:48:bf:01:e6:fc:bb:8a:cc:72:
6e:ba:f6:62:0c:fd:04:71:9c:15:9d:26:2e:50:a0:
8b:bc:42:60:70:9b:e7:4c:a1:6e:8b:83:a7:d0:e2:
0a:58:79:df:9d:5e:62:2a:20:f0:c8:41:9e:7c:bf:
79:29:74:38:cb:16:ab:c4:1c:61:fb:04:00:d2:02:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:54:B4:16:29:6F:86:12:F6:0A:75:9F:6A:67:C6:BA:20:AF:33:56
X509v3 Authority Key Identifier:
keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e1:72:66:07:87:82:59:1e:80:af:8d:d3:03:66:30:97:d1:
16:e3:79:1d:43:69:fa:39:a5:c3:58:fd:3c:04:73:72:bc:3d:
31:41:90:bc:48:ed:65:c4:69:c5:48:c2:39:8e:18:62:99:0e:
8b:52:0b:12:99:e4:da:6c:78:23:58:3f:3b:b0:11:93:e5:cb:
59:26:34:f3:ae:d9:58:a4:84:5d:f0:1d:4f:4d:27:3d:a3:e6:
b4:8e:3b:97:d0:9c:0e:2d:c9:c8:fa:c9:f8:53:27:2b:92:89:
a4:ef:64:02:05:bc:63:97:8e:46:ba:a9:bb:bb:6c:93:c9:c3:
f9:d5:20:74:27:29:24:a1:2e:83:63:8c:55:e8:b9:34:7c:9e:
8b:c9:b3:8b:cd:c9:f4:37:a7:b2:d2:6e:6d:54:c5:ca:6d:51:
0e:96:8a:85:a1:b6:1e:cb:02:9d:4b:32:f7:b5:bf:7a:09:13:
8b:e0:d3:4e:d3:8e:79:df:84:aa:e4:81:38:80:f3:d8:67:7a:
37:9b:9d:38:a4:9f:82:ac:a8:bc:dc:86:58:94:79:de:de:44:
fb:c8:df:dc:f7:49:a3:f2:79:24:d8:19:c8:f2:43:eb:27:88:
8e:0c:90:1c:a3:8d:f9:f0:46:1a:34:37:6f:8d:95:8e:ef:ab:
e2:01:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:07 2025 by rpki-client