Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft
File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json)
Hash identifier: KyTWulfERkJ3zH19eGrqqqZy+Rf2JRZAStiq85XgVcU=
Subject key identifier: B1:77:2E:1C:85:AD:AC:F4:52:85:E0:3D:13:02:EA:39:B0:A8:C7:4F
Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4
Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4
Certificate serial: 1DAC0A23661F39F54045ED4C451CA5DD2FA46F49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft
Manifest number: 019D
Signing time: Thu 30 Jan 2025 18:10:49 +0000
Manifest this update: Thu 30 Jan 2025 18:05:49 +0000
Manifest next update: Sun 02 Feb 2025 20:24:49 +0000
Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: mtf1xMtoJbLE8Jx2IVqXk1cBVj2Aj8ZoG4gK6+pogqs=)
2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: AZ/EAP7jjFcJ/yzrOglFsmCj3RQ5Ctn9UfFjoYdWDOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ac:0a:23:66:1f:39:f5:40:45:ed:4c:45:1c:a5:dd:2f:a4:6f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4
Validity
Not Before: Jan 30 18:05:49 2025 GMT
Not After : Feb 2 20:24:49 2025 GMT
Subject: CN=B1772E1C85ADACF45285E03D1302EA39B0A8C74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:e4:b9:60:f4:f7:aa:78:6a:9e:59:c3:76:
c1:ce:c7:1f:8d:17:52:50:fc:ae:db:ed:0c:b4:2c:
27:54:68:0b:f7:32:ef:1c:20:7e:85:eb:9e:e0:6b:
2a:19:56:75:d3:27:e1:e0:70:1f:e7:11:30:a1:29:
c4:f8:64:06:9d:5c:ba:bb:2b:4d:65:57:4f:b8:d1:
55:d6:c6:a5:e1:c2:92:ce:53:87:8a:e2:93:75:9f:
ce:20:1f:e0:86:4e:46:f0:36:90:8f:5f:ef:e3:c5:
9f:39:cd:60:3e:fa:4f:2f:f5:c6:2d:ac:a7:54:3a:
2f:de:c4:8f:7b:a1:78:82:7d:85:69:c0:36:30:7c:
26:15:0a:23:5f:c0:65:2c:7a:e9:df:84:f8:f7:08:
f9:6a:df:f2:17:05:4b:e7:57:a6:b2:16:1e:f6:19:
b0:db:53:5e:0f:ce:c5:97:27:7f:85:f0:94:a8:41:
20:98:a6:ce:68:a3:8e:99:d2:ea:a1:02:8a:e7:90:
4b:c8:44:fc:1d:40:bd:25:c2:52:ad:80:52:c5:6c:
a7:69:46:4f:fd:c6:ee:ba:ed:b7:06:67:c1:62:71:
fb:c0:e1:8c:67:5f:e7:4f:17:9e:43:e9:13:fb:72:
29:97:72:f0:e1:6e:e6:7e:dd:b4:40:09:c9:f7:09:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:2E:1C:85:AD:AC:F4:52:85:E0:3D:13:02:EA:39:B0:A8:C7:4F
X509v3 Authority Key Identifier:
keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:52:c0:e6:d0:bb:74:01:91:62:70:63:06:c3:4e:e4:09:69:
f9:5b:68:17:32:bc:55:a9:bc:db:b1:0a:c3:29:5b:78:6f:63:
19:1d:cd:41:ac:4d:30:d1:17:d2:e8:2b:e2:58:21:48:80:66:
aa:7c:38:b4:4b:7b:a4:26:a0:d6:12:ca:1a:14:ea:69:8b:cc:
f9:b1:dd:33:c5:85:a3:f4:73:0a:e3:e1:60:98:7b:db:0c:7d:
c6:86:8e:6a:33:20:d1:4a:d5:e8:39:90:32:26:00:92:75:20:
05:7f:81:2e:52:34:cc:a6:a6:ea:fa:21:6c:e8:0f:96:c3:2c:
d9:a0:13:bb:65:b0:c0:7d:66:7d:a7:8f:6f:86:cc:12:ce:30:
90:4e:09:64:10:11:6f:16:f9:aa:f1:6f:ff:72:d4:06:1c:2e:
98:1b:3e:e5:7e:50:71:4d:1a:4a:03:e3:8d:d9:86:7c:10:55:
bd:09:a4:b0:cb:33:48:32:90:d4:36:d4:c1:56:64:73:7d:66:
df:c5:2a:0e:35:48:68:a8:8e:82:3f:bd:41:da:34:94:e7:3b:
4b:b8:b8:a2:0d:32:2b:c0:bb:4f:ea:62:11:27:ab:8b:94:73:
06:3e:a4:3b:0d:c4:fc:da:f6:08:ce:03:51:34:cc:87:f8:bf:
03:61:59:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHawKI2YfOfVARe1MRRyl3S+kb0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3
QzVCRDJBNDAeFw0yNTAxMzAxODA1NDlaFw0yNTAyMDIyMDI0NDlaMDMxMTAvBgNV
BAMTKEIxNzcyRTFDODVBREFDRjQ1Mjg1RTAzRDEzMDJFQTM5QjBBOEM3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3uS5YPT3qnhqnlnDdsHOxx+N
F1JQ/K7b7Qy0LCdUaAv3Mu8cIH6F657gayoZVnXTJ+HgcB/nETChKcT4ZAadXLq7
K01lV0+40VXWxqXhwpLOU4eK4pN1n84gH+CGTkbwNpCPX+/jxZ85zWA++k8v9cYt
rKdUOi/exI97oXiCfYVpwDYwfCYVCiNfwGUseunfhPj3CPlq3/IXBUvnV6ayFh72
GbDbU14PzsWXJ3+F8JSoQSCYps5oo46Z0uqhAornkEvIRPwdQL0lwlKtgFLFbKdp
Rk/9xu667bcGZ8FicfvA4YxnX+dPF55D6RP7cimXcvDhbuZ+3bRACcn3CSm7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsXcuHIWtrPRSheA9EwLqObCox08wHwYDVR0j
BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD
MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC
RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5
MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB
QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAZSwObQu3QBkWJwYwbDTuQJaflbaBcyvFWp
vNuxCsMpW3hvYxkdzUGsTTDRF9LoK+JYIUiAZqp8OLRLe6QmoNYSyhoU6mmLzPmx
3TPFhaP0cwrj4WCYe9sMfcaGjmozINFK1eg5kDImAJJ1IAV/gS5SNMympur6IWzo
D5bDLNmgE7tlsMB9Zn2nj2+GzBLOMJBOCWQQEW8W+arxb/9y1AYcLpgbPuV+UHFN
GkoD443ZhnwQVb0JpLDLM0gykNQ21MFWZHN9Zt/FKg41SGiojoI/vUHaNJTnO0u4
uKINMivAu0/qYhEnq4uUcwY+pDsNxPza9gjOA1E0zIf4vwNhWRs=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:09 2025 by rpki-client