Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json)
Hash identifier: WKlBe/c2EmoCZBTALdc0W7YBGqvEORpBlg3cjh3tWhA=
Subject key identifier: E4:EA:5E:68:E6:3F:20:BA:5F:42:2F:46:BF:99:BA:6B:FE:F0:06:40
Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8
Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
Certificate serial: 155678DF472CC5DED65204F56C3FE7E81ED2AFAB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
Manifest number: 040A
Signing time: Thu 30 Jan 2025 19:01:01 +0000
Manifest this update: Thu 30 Jan 2025 18:56:01 +0000
Manifest next update: Sun 02 Feb 2025 20:07:01 +0000
Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=)
2: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: dDiXrnklIeVxSQZdLVkC9gsWVMf7JYgjjelm9zgUDAw=)
3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:56:78:df:47:2c:c5:de:d6:52:04:f5:6c:3f:e7:e8:1e:d2:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
Validity
Not Before: Jan 30 18:56:01 2025 GMT
Not After : Feb 2 20:07:01 2025 GMT
Subject: CN=E4EA5E68E63F20BA5F422F46BF99BA6BFEF00640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:2e:5f:aa:ec:b0:ad:ee:ff:d8:b4:30:68:
5b:f9:19:95:bc:80:95:2d:4f:d2:99:a4:ec:7a:f3:
b5:99:8a:da:11:89:e4:92:33:b4:9d:4d:f1:fb:70:
02:d8:36:6f:f0:d5:d4:58:4a:db:a3:52:30:d3:8f:
ce:2d:77:4e:31:47:8b:ec:30:f0:04:05:f0:dd:a5:
81:ca:64:12:55:92:8b:a7:f5:13:da:cc:bb:fc:d4:
32:5c:f1:f9:12:62:e6:69:fb:c8:4d:7d:92:02:74:
a8:03:d7:92:bd:a1:17:93:d3:54:c7:6a:1b:08:6f:
3a:b3:c2:af:57:ba:e8:1b:84:c7:ec:37:a7:a7:5a:
4b:26:ea:c7:ef:6d:66:e3:f2:f1:ec:aa:a8:c5:be:
48:04:9d:e5:60:57:33:19:4b:13:61:aa:16:62:53:
1b:31:b5:db:bd:3e:b0:43:70:35:8e:83:f0:a0:ff:
f5:c4:b2:6b:62:e3:82:3a:ee:c6:ee:22:ad:b7:77:
7d:a9:1f:8e:ee:94:b3:93:6a:d3:2c:30:c0:b5:37:
33:55:06:3a:f5:3a:e0:f3:c1:b3:c9:74:74:c9:cc:
2a:a4:fd:0a:d4:eb:83:fa:83:a6:f4:22:0f:de:c7:
ef:15:bd:2a:b4:25:e7:62:5d:b6:50:d5:75:cc:ad:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:5E:68:E6:3F:20:BA:5F:42:2F:46:BF:99:BA:6B:FE:F0:06:40
X509v3 Authority Key Identifier:
keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:29:26:14:66:54:1c:a1:70:ac:28:d9:f4:cf:7f:fd:18:e1:
3f:0d:92:67:91:db:d9:48:6f:33:eb:da:88:f5:d2:28:a9:67:
e3:75:9e:71:30:94:32:5a:61:dd:71:86:f4:84:57:58:4c:66:
77:53:c2:0d:af:e1:96:95:f3:c3:f6:77:f9:f6:3a:33:be:44:
b8:b2:13:e2:59:da:28:f4:24:47:dc:dd:dd:69:55:ba:8e:46:
11:46:19:3d:6e:c7:65:70:03:dd:fb:6b:6b:65:ce:1d:49:71:
d1:11:72:be:36:5f:eb:94:7f:97:6e:4f:55:89:a5:dc:41:47:
1e:59:ee:61:08:20:30:c8:3e:67:60:da:c3:60:31:1d:0b:2d:
b8:5d:53:9d:12:8a:75:53:97:55:36:0b:48:ab:8d:4f:5e:0b:
15:6c:7a:84:aa:ef:8a:c8:8e:8c:23:d8:24:53:3b:98:95:6e:
c3:6a:b7:62:b8:51:79:07:3f:48:f6:e7:76:00:cc:67:4e:82:
64:98:2b:cb:a6:12:58:d1:2f:73:a0:39:c1:69:81:fe:fb:e6:
50:7e:37:e9:4d:b7:2d:c9:49:65:09:0b:c2:59:d3:ed:25:d1:
f7:df:b6:6d:d9:b6:93:f0:2c:df:2a:a5:44:de:3f:b4:fe:f3:
bd:e4:1a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:30 2025 by rpki-client