Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json)
Hash identifier: lxHElutvnrfYqXPU3PsLlbX7vm8GUjZXd+n4pnoMN2Y=
Subject key identifier: 08:B6:9B:17:9A:BE:4F:85:46:DF:14:3F:9A:ED:6F:A6:10:92:A0:CD
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial: 0F070B0974E701E1BA88205F3EA1316497EB9130
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
Manifest number: 0124
Signing time: Thu 30 Jan 2025 10:41:13 +0000
Manifest this update: Thu 30 Jan 2025 10:36:13 +0000
Manifest next update: Sun 02 Feb 2025 20:56:13 +0000
Files and hashes: 1: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: KlZJ5jckt5FYQJMvvreG32ZohfgvtBwGxRusjNz2t24=)
2: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: xO1kZQrZJ2Uzb2KKql3ORvfEQsb7SD07YPbbi4hIjF4=)
3: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=)
4: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: oW/3rE8Cks1XxoiBUrrE9hpJZbI18VXj85etX8aBQRQ=)
5: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: cg3OwRmQRteKoDEk12XDw3n5FqcKfvO+ZTifIwU+dg0=)
6: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: iWAupmsQQLXrigdxxw/IpFgXCPNtccM8s1cNilgGMAM=)
7: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: rOrvsqapVd8XY6XV3A85SJQQbPjzrR7RezQToePFDJc=)
8: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: GqpApCZsTZIotGQu+evDyWElqLkFW0uUDaRgMaB4+Yk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:07:0b:09:74:e7:01:e1:ba:88:20:5f:3e:a1:31:64:97:eb:91:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Validity
Not Before: Jan 30 10:36:13 2025 GMT
Not After : Feb 2 20:56:13 2025 GMT
Subject: CN=08B69B179ABE4F8546DF143F9AED6FA61092A0CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:2c:8a:58:e7:91:3b:8d:1e:21:47:df:6e:
8e:61:0a:54:d2:c4:d7:aa:77:b7:2a:fd:4c:16:a8:
a3:96:af:d2:03:87:67:cb:99:58:db:0d:0e:3f:94:
2b:df:d6:75:eb:d8:8a:f2:4f:3f:88:e5:36:c4:c5:
52:2c:12:85:c3:e5:18:00:5d:92:de:ab:86:d5:e7:
8e:4c:fc:4e:99:3a:ec:0e:77:50:43:c5:12:71:4b:
27:58:a3:fe:ca:e8:11:38:1d:6e:c8:61:7f:dc:b9:
12:df:5a:02:b3:59:5d:2d:43:a2:2f:d8:21:40:7a:
61:c3:ad:c8:d8:b3:7a:ac:17:f0:ef:1d:1f:71:05:
4f:f2:5b:f6:d7:73:89:d3:07:54:91:50:aa:1c:28:
7d:4e:af:4d:80:41:05:8c:58:78:7e:18:fb:39:47:
98:2c:ec:21:08:80:af:9d:af:d4:f6:e2:91:58:51:
8e:69:3d:7b:3c:7a:7f:30:fc:54:04:1b:73:18:72:
64:e0:4a:2a:87:92:76:cd:40:2f:c9:06:64:fe:91:
ae:6c:45:b5:4a:ea:46:eb:42:7e:e4:2a:8a:c2:8f:
f0:16:b6:8c:b2:69:bc:11:f2:72:c5:30:fa:64:79:
7d:22:cb:07:66:5b:24:0b:d8:c1:17:23:4b:ab:2a:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:9B:17:9A:BE:4F:85:46:DF:14:3F:9A:ED:6F:A6:10:92:A0:CD
X509v3 Authority Key Identifier:
keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:7d:de:ad:fb:06:21:0f:11:2f:25:75:ee:15:92:8b:8f:
e1:d2:1f:91:35:bf:5c:26:2f:f2:25:3c:5c:e3:53:57:6f:7b:
29:08:3b:b0:03:2b:97:cc:b2:14:63:b1:8d:df:32:91:53:ec:
37:65:67:a7:5d:ae:4e:31:12:c2:72:bf:6d:5f:d9:67:7a:d4:
27:1d:3a:41:7a:2a:cf:12:cf:ae:d6:68:a1:2c:a8:aa:af:a1:
ee:1f:8e:17:ea:00:a8:4e:2c:7c:31:88:83:31:96:98:7e:c0:
c8:16:65:26:f1:06:c1:9e:a7:f4:8d:94:85:c7:c7:3c:85:f4:
bc:d0:66:3f:1c:7c:bd:c1:b9:a8:fa:b0:3b:64:7a:cd:4b:cc:
b8:1b:cc:ae:66:0b:77:e1:e7:36:3d:ed:58:9d:81:e1:45:d8:
d9:61:00:be:b4:b4:70:e8:6f:68:2e:78:71:cd:6f:f0:f8:45:
31:54:5e:78:37:e7:58:3d:62:42:eb:bf:b5:78:24:7f:d2:13:
b7:de:16:48:db:9d:8e:f5:55:ff:c0:d8:c9:25:e5:12:b8:46:
04:bd:96:4e:85:ed:a5:9a:4d:fa:4d:b7:ac:88:7e:17:7a:fa:
64:c6:27:97:85:f9:14:fd:c4:9e:43:06:50:fd:f9:f4:17:bf:
57:49:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:33 2025 by rpki-client