Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json)
Hash identifier: Pq1XoZ61Z9I0+UxxLiENRXRcpHuamRFvsVaFR7NrRVs=
Subject key identifier: D9:4E:9F:EB:6A:31:EB:A1:4A:0D:8E:99:3F:AD:46:69:A2:7B:D5:83
Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Certificate serial: 321930C91B15519CD5D0B2E2AA0E7C10AC360E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
Manifest number: 01A1
Signing time: Fri 31 Jan 2025 05:21:04 +0000
Manifest this update: Fri 31 Jan 2025 05:16:04 +0000
Manifest next update: Mon 03 Feb 2025 13:10:04 +0000
Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: P4N2tUhdv+XXmXUHdV/K1pZuUMXP31PU+chKdfkYMCQ=)
2: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: q2xB95iTNqym/YVFy+PLBJpwNMJrTMJPfA5KIE8Ssec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:19:30:c9:1b:15:51:9c:d5:d0:b2:e2:aa:0e:7c:10:ac:36:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Validity
Not Before: Jan 31 05:16:04 2025 GMT
Not After : Feb 3 13:10:04 2025 GMT
Subject: CN=D94E9FEB6A31EBA14A0D8E993FAD4669A27BD583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:72:c5:71:8a:6e:f7:b5:bb:86:02:29:6a:
30:62:8c:b5:df:9b:cc:e4:04:9e:0f:fe:c9:d0:60:
5f:ab:7f:e9:e3:5e:44:83:e8:8c:3a:2b:90:bf:b7:
7d:ec:8d:c9:d5:3f:b9:e3:e4:75:f1:c3:01:95:19:
de:ba:19:ca:11:3f:c0:0d:e7:9d:45:2f:fa:10:d8:
a0:b1:a4:fa:49:b4:c2:c6:8f:6d:67:fd:8c:3a:60:
39:b1:e9:83:f7:ee:a1:a9:f4:28:9f:b2:6c:c2:8b:
99:bf:cc:de:43:6e:19:1e:02:9c:ac:33:c8:f4:ae:
a2:15:96:5d:ed:2e:e5:2d:8a:28:3c:84:6b:d7:d8:
b6:a5:0d:94:f3:b9:32:fa:0c:72:6a:de:3d:74:7f:
5f:54:02:45:8e:f0:bc:e3:85:d2:2c:5f:26:1e:9b:
a0:aa:af:fe:da:d4:dd:dd:a7:ea:8a:60:59:6c:62:
90:05:0f:8e:ea:58:e3:77:a5:53:98:38:db:14:d9:
dc:11:17:15:3d:be:35:9c:5b:4a:9b:7e:df:a3:7a:
2e:1b:71:c5:3a:3d:a3:21:a0:8b:d6:03:65:da:60:
59:cd:3b:45:c7:f5:35:af:15:69:b3:b8:49:84:cc:
22:43:2c:89:88:1c:47:89:b3:1b:fd:e7:19:6f:b6:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:9F:EB:6A:31:EB:A1:4A:0D:8E:99:3F:AD:46:69:A2:7B:D5:83
X509v3 Authority Key Identifier:
keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:8b:5e:ab:d3:94:d2:5d:15:d8:2f:98:b8:89:14:52:57:
f8:29:b8:c7:ca:f5:33:0e:bf:7e:9f:ca:aa:38:9a:c7:c9:ab:
f7:e0:cc:32:2b:1c:7f:ea:3a:d2:58:a6:8e:60:5e:60:19:95:
dc:b4:1b:08:01:61:71:e1:98:27:88:55:92:8c:52:90:1c:8f:
b2:12:1f:2f:2c:83:c2:94:01:aa:56:10:c2:50:e3:d7:bf:3f:
07:92:ba:8e:4e:00:f4:09:2d:fb:7e:2a:b2:4d:20:14:da:cb:
2a:32:d4:5e:bd:14:dc:0b:53:45:bc:25:02:ff:aa:bc:ce:cc:
37:72:35:86:10:50:dc:04:74:a2:10:f8:d2:b3:dc:9a:74:76:
ad:f2:26:94:a7:eb:e0:24:72:63:74:ac:35:8c:de:5e:6e:82:
ac:64:9c:e6:7d:57:86:c9:97:96:7e:7b:f2:4c:77:f0:45:16:
be:d7:73:3b:17:aa:05:fe:8b:12:5f:b7:01:74:3f:33:d9:04:
59:66:79:38:87:ed:38:e4:d6:47:d3:99:76:11:c6:dc:f5:7d:
a5:6f:78:66:8e:35:b9:56:33:a5:62:1e:4b:07:b6:63:1c:08:
3f:f2:7d:02:1b:8b:ec:c6:19:7a:fb:99:b1:e6:a4:6d:79:82:
9a:1a:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:58 2025 by rpki-client