
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json)
Hash identifier: /3mnDbQpqjVgBo9y1A7HEmGy//giuUB0lXL2C1+Kqos=
Subject key identifier: 07:21:B8:F3:EA:A1:6E:AA:8C:DC:50:0B:63:CA:D9:F4:F5:36:49:78
Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98
Certificate serial: 2EC7D7BC825D9EA4E9E597845BBAD605D228E4F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
Manifest number: 0321
Signing time: Wed 29 Jan 2025 18:41:21 +0000
Manifest this update: Wed 29 Jan 2025 18:36:21 +0000
Manifest next update: Sun 02 Feb 2025 03:25:21 +0000
Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: RaWAC4T1fmxsZsTfduRWIKsU4O9nN+6aPnnPPTHOi8o=)
2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: 917q9xASWWKWYAUlkV/uoQrBHJSAYbEK6xpVsND1eY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c7:d7:bc:82:5d:9e:a4:e9:e5:97:84:5b:ba:d6:05:d2:28:e4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98
Validity
Not Before: Jan 29 18:36:21 2025 GMT
Not After : Feb 2 03:25:21 2025 GMT
Subject: CN=0721B8F3EAA16EAA8CDC500B63CAD9F4F5364978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:da:3b:b8:a9:9e:f8:1c:02:02:aa:28:0e:
fb:55:39:4f:da:4d:84:8d:c5:9f:83:40:22:bd:d8:
3b:cf:91:ec:22:96:94:0b:cd:6e:79:d0:6c:39:2e:
d5:16:4e:58:3c:f1:22:a9:14:5f:c8:d5:85:ba:1f:
03:c8:1a:4d:cf:c8:2a:99:46:04:18:41:fe:37:09:
2a:4d:16:70:92:1b:9f:4f:f9:b4:2b:f2:34:02:fa:
6f:ff:c7:ca:69:c1:1d:a2:7b:40:c7:c5:0e:f9:8a:
35:3d:fb:54:2e:86:dc:b2:e7:5c:c4:e4:88:b4:3e:
b6:25:64:eb:12:3b:b8:c1:c3:a5:e6:0b:3b:b5:fc:
4d:f7:1d:43:27:64:02:20:ef:7f:a9:06:0d:b0:13:
45:20:2c:4c:a6:5e:2a:85:3e:ce:6e:0b:f9:36:f2:
bf:a0:fd:bf:64:6b:3a:ff:2e:5e:01:e2:84:fe:75:
78:5e:38:fd:14:fc:37:b4:aa:38:92:09:24:a5:3f:
6b:ee:31:77:aa:a0:5e:ec:aa:32:77:c2:70:d9:7e:
6c:02:89:66:61:78:12:bf:2f:23:9f:30:27:31:e0:
d0:43:61:32:9f:7f:d9:8d:d6:d5:3b:c4:a1:9e:e8:
c6:0a:7f:cc:78:ef:4e:23:74:84:3e:4c:c3:e8:14:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:B8:F3:EA:A1:6E:AA:8C:DC:50:0B:63:CA:D9:F4:F5:36:49:78
X509v3 Authority Key Identifier:
keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:f9:09:79:7a:89:67:b3:14:42:9a:9b:5a:a1:e3:5a:28:
6c:5e:49:c5:e3:a1:10:0e:6d:55:b8:68:2e:4f:95:b1:22:7f:
4c:f7:26:93:15:f4:47:9e:36:1f:bc:00:e0:1d:55:90:04:03:
7c:6b:d1:b0:7d:ca:c1:62:d2:4d:b9:8d:2e:0c:92:d4:ba:d4:
ca:33:2c:be:53:5b:09:b3:3b:2f:e6:41:dd:93:68:4b:05:43:
54:84:6e:44:a2:87:4a:25:00:cd:74:5e:cc:b4:f1:b2:10:e4:
2f:49:1c:21:c4:f5:70:26:12:5f:a6:9d:8f:eb:d4:01:d8:fb:
60:b7:bb:98:29:2a:81:06:c8:4b:8a:ef:04:69:d7:e2:89:00:
bd:be:b3:a1:41:c1:c8:63:0a:30:d5:ab:56:e4:be:3d:af:d2:
ab:b4:f9:f0:95:85:fb:b6:12:8d:eb:31:52:ca:42:1c:fb:3c:
a3:39:8b:ef:d5:8f:d8:eb:4b:99:ed:53:6e:3a:61:a2:83:5e:
55:76:b0:c2:71:73:a5:18:92:e7:1c:da:aa:6a:70:5c:ae:d1:
75:fb:ab:41:c6:11:4e:8a:df:64:f5:9e:e4:c6:8f:94:73:a5:
96:ae:c4:cb:92:19:41:49:74:a6:d3:cc:cd:11:e0:10:0e:04:
d9:1f:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:16 2025 by rpki-client