Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft
File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json)
Hash identifier: z0RFMSTO6O3AlGpZVDSTA6D4uvdtA4E3aRnwaEKB5N4=
Subject key identifier: 1E:3D:9D:65:18:D0:0E:04:5D:95:A6:A1:94:41:F3:8E:2B:DC:8F:AC
Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B
Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B
Certificate serial: 44C219B1D55BBEF574E144D4DDE5FE02681E3810
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft
Manifest number: 01A2
Signing time: Thu 30 Jan 2025 19:51:56 +0000
Manifest this update: Thu 30 Jan 2025 19:46:56 +0000
Manifest next update: Mon 03 Feb 2025 00:55:56 +0000
Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: o8akybxztPyS9GO04qReiUPGZjGM2Q2IHNPu1w2ALCA=)
2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: bESiVh1gzvoB5pX1Ez8u5t1dFZk82mVkGTr2T1T7baQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c2:19:b1:d5:5b:be:f5:74:e1:44:d4:dd:e5:fe:02:68:1e:38:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B
Validity
Not Before: Jan 30 19:46:56 2025 GMT
Not After : Feb 3 00:55:56 2025 GMT
Subject: CN=1E3D9D6518D00E045D95A6A19441F38E2BDC8FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:7f:d2:aa:6f:e2:f3:2b:7f:b3:8d:0f:58:
ec:ed:5e:df:2f:6b:17:cc:9d:d4:39:0f:e1:e3:bf:
32:76:8b:86:6b:b4:a4:03:6f:1f:45:49:8a:5c:5b:
c0:7a:ea:a9:a6:80:85:b6:26:c7:0d:c1:45:97:30:
3e:c7:dd:bb:6b:b0:af:40:4c:cd:14:ed:22:5f:2f:
e7:8d:b3:8a:14:d2:f6:0a:de:67:90:76:f0:c3:95:
bb:54:3c:48:6b:52:7c:27:dd:63:6b:df:27:a2:57:
9b:69:47:56:10:9a:4f:59:e5:02:7c:1a:5b:08:64:
8e:e7:b5:77:6a:14:97:31:75:88:47:1c:90:a4:27:
8c:1e:c5:09:86:5b:e1:0b:a0:11:c0:a1:b5:a2:ac:
14:d3:1a:ab:91:48:6f:ae:74:ea:80:69:24:a2:55:
b7:e5:c6:3f:ed:c9:55:f1:13:3a:8b:9e:a2:15:ab:
5d:5f:72:8c:0e:44:af:ed:9d:c2:df:44:00:b2:e7:
62:6d:85:ae:5b:ea:31:b4:9a:43:06:d4:55:a2:3f:
43:1c:bb:73:57:ba:d2:79:1a:dd:43:01:aa:e1:d6:
d7:d4:be:95:4c:d4:a8:45:70:0e:af:8c:48:43:99:
f6:9d:08:86:b5:52:86:d9:0e:b4:4c:f0:9c:70:c7:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:9D:65:18:D0:0E:04:5D:95:A6:A1:94:41:F3:8E:2B:DC:8F:AC
X509v3 Authority Key Identifier:
keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:26:12:b9:5c:9c:20:c3:06:21:f3:c5:7f:cf:46:aa:59:de:
84:82:e7:b0:94:d3:34:19:80:48:0b:88:d5:d7:f7:5c:51:4d:
9a:57:01:11:b9:7b:03:00:2a:67:ad:88:b9:21:19:b8:1c:69:
af:fd:95:f8:b1:c0:5f:31:4d:e5:9c:a2:ea:7a:5c:9c:e6:74:
d7:c3:3d:a9:1a:95:24:28:75:60:a0:32:3e:03:c1:e5:79:72:
4c:dd:c4:32:1e:b4:b5:78:ce:d1:49:4e:bc:b3:e9:82:25:ab:
30:07:2d:a7:9b:63:57:0a:cb:af:6a:15:b2:6a:dd:67:ac:1e:
55:be:6d:ff:58:e2:ef:d8:0e:9d:0b:04:c8:b1:ba:80:df:dc:
40:0c:3f:f9:d2:19:10:16:e7:1f:59:9d:ba:12:0f:eb:62:ca:
a5:cf:95:97:26:76:5a:67:f7:dd:dc:9f:69:e1:ba:56:77:73:
fe:84:ac:ca:8d:7d:4a:55:84:d2:e0:91:70:2a:35:27:47:36:
78:fa:53:03:9e:04:0f:93:26:46:3c:da:c4:03:94:63:4a:a5:
84:ec:ec:ef:db:a2:59:54:7c:09:04:f7:00:4e:7d:2e:a2:ae:
58:d3:45:8f:df:55:9e:4d:5c:a9:75:a4:19:57:ec:54:42:0d:
64:66:09:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURMIZsdVbvvV04UTU3eX+AmgeOBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE
RjVENzM1QjAeFw0yNTAxMzAxOTQ2NTZaFw0yNTAyMDMwMDU1NTZaMDMxMTAvBgNV
BAMTKDFFM0Q5RDY1MThEMDBFMDQ1RDk1QTZBMTk0NDFGMzhFMkJEQzhGQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF3/Sqm/i8yt/s40PWOztXt8v
axfMndQ5D+HjvzJ2i4ZrtKQDbx9FSYpcW8B66qmmgIW2JscNwUWXMD7H3btrsK9A
TM0U7SJfL+eNs4oU0vYK3meQdvDDlbtUPEhrUnwn3WNr3yeiV5tpR1YQmk9Z5QJ8
GlsIZI7ntXdqFJcxdYhHHJCkJ4wexQmGW+ELoBHAobWirBTTGquRSG+udOqAaSSi
Vbflxj/tyVXxEzqLnqIVq11fcowORK/tncLfRACy52Jtha5b6jG0mkMG1FWiP0Mc
u3NXutJ5Gt1DAarh1tfUvpVM1KhFcA6vjEhDmfadCIa1UobZDrRM8Jxwx2ZvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHj2dZRjQDgRdlaahlEHzjivcj6wwHwYDVR0j
BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE
M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE
NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx
NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2
RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGgmErlcnCDDBiHzxX/PRqpZ3oSC57CU0zQZ
gEgLiNXX91xRTZpXARG5ewMAKmetiLkhGbgcaa/9lfixwF8xTeWcoup6XJzmdNfD
PakalSQodWCgMj4DweV5ckzdxDIetLV4ztFJTryz6YIlqzAHLaebY1cKy69qFbJq
3WesHlW+bf9Y4u/YDp0LBMixuoDf3EAMP/nSGRAW5x9ZnboSD+tiyqXPlZcmdlpn
993cn2nhulZ3c/6ErMqNfUpVhNLgkXAqNSdHNnj6UwOeBA+TJkY82sQDlGNKpYTs
7O/bollUfAkE9wBOfS6irljTRY/fVZ5NXKl1pBlX7FRCDWRmCc4=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:42 2025 by rpki-client