Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json)
Hash identifier: ySONuM6k+6Ko0qYDON2jD7J4YoyPXlzjYZ+rMHLtrnE=
Subject key identifier: DE:75:5B:94:54:FA:E2:60:29:F6:AF:C5:5B:68:17:CC:25:35:68:C9
Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Certificate serial: 7450B4CB5F3CA235247B99A7CE670025025190D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
Manifest number: 025A
Signing time: Fri 31 Jan 2025 00:20:55 +0000
Manifest this update: Fri 31 Jan 2025 00:15:55 +0000
Manifest next update: Mon 03 Feb 2025 01:30:55 +0000
Files and hashes: 1: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: 4hTYB6oeBmhzrslyPSwrX3Ek6Lkwqv8RzR59ex14KTA=)
2: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: vJN17h6zHlw8lhqv4ICIcSweY39vapLLmQqw71/RhS0=)
3: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=)
4: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=)
5: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 7LF1a7D5EDLG17ihfLxfwJXRWol/1ek+UfoMR7jTEuA=)
6: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: yBaA0+xOkr+iculo5l4/62QXBhceh7/LNqxDxugk/Cg=)
7: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: ptSpa0yORFDFTGktJ23ziYaQuqfcwcD6+X4WfU20Bt4=)
8: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: +z3L2F6eZTNSmc02Xtdda7QlQBfCpld+Pd7nQWWv+Rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:50:b4:cb:5f:3c:a2:35:24:7b:99:a7:ce:67:00:25:02:51:90:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Validity
Not Before: Jan 31 00:15:55 2025 GMT
Not After : Feb 3 01:30:55 2025 GMT
Subject: CN=DE755B9454FAE26029F6AFC55B6817CC253568C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:d9:e7:a5:4d:5a:93:dd:a4:49:e8:6b:17:
a6:81:80:54:7d:aa:8f:3e:f3:e2:1d:53:90:ff:71:
3a:a2:69:a5:a6:25:7a:7f:18:0b:28:84:59:2b:de:
09:38:3d:9e:43:77:0d:05:ba:ec:cc:94:22:96:c0:
8d:e3:3c:9d:39:37:aa:ad:ad:12:27:56:a7:5b:b0:
27:e4:2b:3b:ae:39:9d:40:c3:12:7f:fa:78:7b:6c:
02:e3:dc:a8:e1:ec:ae:46:ba:eb:25:a9:3b:e6:3d:
1e:25:c0:02:f5:1f:7b:f6:cf:3e:9e:62:a3:d1:f9:
3f:f5:e0:c4:33:98:cc:92:33:a8:de:1a:f3:11:75:
a7:00:e9:26:0c:cc:8f:ba:60:7c:ac:24:7f:e7:7b:
e4:4b:0a:11:da:ae:73:89:bb:33:d3:63:55:2e:da:
1f:05:b6:15:34:9f:2d:53:8b:21:0b:d6:c1:0b:31:
d4:a1:e7:46:ca:69:f0:89:e7:bc:08:1e:77:b6:3f:
45:84:4c:7c:22:44:99:4f:9a:f9:10:1d:f5:6b:47:
26:f0:09:a9:92:69:be:ae:2a:76:f9:84:dd:53:5c:
a6:d9:59:7a:d7:5d:37:3a:dc:4f:cc:e1:c9:e1:95:
61:d4:b1:98:bd:8d:ee:2d:a8:be:39:76:31:e9:77:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:75:5B:94:54:FA:E2:60:29:F6:AF:C5:5B:68:17:CC:25:35:68:C9
X509v3 Authority Key Identifier:
keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:18:7f:31:0c:25:71:ce:74:80:20:41:f9:ac:c1:9e:11:3c:
3d:e3:9c:8d:d6:b9:1c:60:73:a3:de:8a:c1:ce:d6:1f:12:62:
29:02:04:3f:dc:a1:55:8a:5c:12:aa:17:e0:2f:53:d6:06:01:
18:e2:ff:a3:db:d6:f2:c2:54:c4:3a:d9:83:57:cc:fd:14:74:
a9:73:c0:e8:71:96:f6:a6:cd:c3:6c:55:87:d6:97:d2:38:d9:
5d:63:1e:c5:38:5c:84:c7:8b:6e:09:eb:28:5f:ff:9d:0e:dc:
23:08:34:cd:78:e3:f2:74:15:95:c3:f0:f6:86:75:0f:9b:2f:
05:32:82:06:70:c2:78:b5:c7:1e:32:03:de:1b:8e:86:cf:24:
7d:ee:65:81:61:a5:3c:a0:12:7d:89:a1:d0:a1:e4:10:8a:35:
f6:8d:bf:1e:91:03:98:6b:15:f2:3a:25:92:71:04:34:ca:03:
96:0b:91:f0:5e:a9:10:fa:f6:fa:1c:35:40:40:e4:55:76:2e:
50:1c:a9:11:7b:e0:86:c5:40:d7:a1:f1:de:c4:62:b5:04:df:
4f:ef:65:74:16:49:cb:7d:96:bc:75:29:6d:3a:df:4c:6c:ef:
e9:0a:74:00:b3:04:e4:7b:62:a9:47:f9:e5:22:bd:1b:9f:25:
9c:38:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:40 2025 by rpki-client