Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json)
Hash identifier: tDQcSqFWlt1F5sZ7FPQvKk7gH7tM16758JRKN/sxyEM=
Subject key identifier: D4:7C:89:AC:4B:7E:05:AD:E7:34:44:DA:44:7E:ED:C9:CB:50:12:73
Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E
Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E
Certificate serial: 05D7B86C33A6679EE76805A3E37117192613C978
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
Manifest number: 031E
Signing time: Fri 31 Jan 2025 06:01:57 +0000
Manifest this update: Fri 31 Jan 2025 05:56:57 +0000
Manifest next update: Mon 03 Feb 2025 16:53:57 +0000
Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: +JB4xjkXbgweSU7X29CnYlRjnbB6M5XtdFb5z4Dimtg=)
2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: q6eK2EYtg3mAjaJatP+6u55kj1ur/L66B8Q9li12fUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d7:b8:6c:33:a6:67:9e:e7:68:05:a3:e3:71:17:19:26:13:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E
Validity
Not Before: Jan 31 05:56:57 2025 GMT
Not After : Feb 3 16:53:57 2025 GMT
Subject: CN=D47C89AC4B7E05ADE73444DA447EEDC9CB501273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:98:ee:d4:70:e1:1f:58:b4:3b:ae:f3:eb:
95:c8:0e:f4:04:6f:ce:17:9a:97:74:40:fc:d8:9d:
0d:16:21:ae:78:1e:b4:a7:be:d0:1e:39:46:aa:63:
c6:8b:84:39:fe:af:22:ce:89:ca:6b:16:c6:44:2a:
d5:a5:c0:4c:62:c0:2d:24:49:48:ed:f3:30:8c:be:
7a:6c:50:03:19:f6:84:d0:5c:e4:87:1d:a8:19:8c:
0f:95:ed:95:6d:b1:7a:a2:c3:f0:82:1d:c1:27:21:
0a:42:d2:14:3f:d0:14:91:44:b3:c1:39:cf:65:77:
f2:4d:18:fa:fd:80:06:94:86:a1:da:48:cd:87:cf:
3e:0f:b5:67:2f:4f:76:54:1b:24:5d:14:6a:e4:f1:
14:ee:af:d2:da:82:3b:81:05:69:9c:9d:51:0d:06:
b3:3e:1c:f2:4b:30:d4:58:0f:a8:cf:db:d6:1f:75:
f5:94:70:c3:69:4b:2f:f4:30:31:8d:f1:c7:a0:d3:
08:2c:0d:d0:40:4a:32:f8:6b:e9:90:b1:c5:de:59:
e2:5b:52:eb:93:4f:ce:be:42:dc:0a:b7:4c:10:62:
eb:d8:70:d0:16:c6:33:e2:c4:af:c1:b7:a0:9a:b9:
3e:f5:8d:51:7e:19:45:25:dd:c3:2d:2b:5d:35:16:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:89:AC:4B:7E:05:AD:E7:34:44:DA:44:7E:ED:C9:CB:50:12:73
X509v3 Authority Key Identifier:
keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:57:bb:6a:ac:58:d7:fd:b6:0e:40:eb:89:54:18:5a:54:0c:
ba:8a:22:10:39:0f:72:70:92:a5:16:35:9e:84:f3:60:de:70:
04:b4:af:eb:1b:28:52:4d:a1:81:7b:1c:61:ad:3e:21:48:a8:
07:d5:db:34:8c:f9:2d:02:cd:5a:52:4d:3d:3f:f7:56:3b:e9:
6c:2b:32:0e:59:ed:28:25:10:48:39:ae:0d:db:56:eb:05:df:
0a:a3:e0:4d:b5:0f:37:4a:9d:2f:72:82:e8:4f:69:43:e2:f1:
cf:50:cb:5d:79:b5:eb:c5:40:50:9c:b8:dc:28:cc:02:44:ab:
39:57:90:6f:95:aa:6f:34:dc:53:7c:e3:30:11:87:cd:7b:8c:
7b:87:37:c2:7f:2a:7f:d6:0f:ce:2a:7a:2c:ba:73:ee:0c:2c:
4f:61:ea:67:ff:8a:f1:cd:54:9d:24:c4:9f:83:da:33:d4:2a:
c0:41:b7:8b:ec:45:19:7e:c7:17:ce:66:49:17:d0:19:74:f6:
2b:13:4d:74:a3:c2:ab:46:39:72:2f:5a:1b:7e:e7:84:54:60:
90:fa:a6:60:0b:34:1b:4e:ed:09:57:a9:f6:85:89:3d:b0:b2:
b4:93:ab:fa:cd:18:be:ee:81:43:1a:58:cf:b6:07:9f:44:ac:
f2:cb:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:09 2025 by rpki-client