Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json)
Hash identifier: MCgwEYpls88cXLsci2K0KPXEVsiQQrtABiOib3t0dEo=
Subject key identifier: 39:DB:4C:07:6A:1E:FB:97:50:D0:49:28:1D:4C:02:C6:42:7A:16:E3
Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D
Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
Certificate serial: 55FF4531886EAB41AB6387DA187F798C1658DA3D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
Manifest number: 0148
Signing time: Thu 30 Jan 2025 18:11:02 +0000
Manifest this update: Thu 30 Jan 2025 18:06:02 +0000
Manifest next update: Mon 03 Feb 2025 05:40:02 +0000
Files and hashes: 1: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=)
2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=)
3: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: Ntyg7P5giqWWIZz4UdAr6yKJjrr990pqYEj2I4xZyRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ff:45:31:88:6e:ab:41:ab:63:87:da:18:7f:79:8c:16:58:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
Validity
Not Before: Jan 30 18:06:02 2025 GMT
Not After : Feb 3 05:40:02 2025 GMT
Subject: CN=39DB4C076A1EFB9750D049281D4C02C6427A16E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:5e:01:7a:bf:71:50:8d:45:04:09:8c:f3:
c1:15:0d:8c:b7:aa:b3:c6:d3:b5:b8:94:9b:7f:32:
91:59:1c:bf:d7:2d:66:83:71:ee:02:09:27:b7:b2:
f5:e2:2c:03:0f:51:70:86:99:e0:05:1c:dd:85:24:
18:cc:69:6a:f5:b2:9e:46:57:5f:36:a4:8f:5c:90:
8a:0f:98:75:d8:e2:ba:7a:66:54:c1:85:bb:e0:a0:
42:f1:c2:7d:95:4a:20:a3:bb:d9:9e:a6:d6:36:5d:
1e:65:c9:ad:c3:a4:41:06:b3:11:18:ee:69:a6:22:
ba:b6:ef:ae:ff:78:fc:8d:de:b2:57:20:ce:81:fc:
2d:c0:64:5e:3d:b2:1e:b0:99:22:e5:57:eb:17:68:
57:11:51:44:9d:d3:64:df:dd:26:d5:73:69:a5:80:
44:4e:d2:7d:9c:36:cc:c1:8c:1a:26:3d:69:8d:61:
92:94:73:e6:1e:b2:4c:ae:f9:ab:d3:f6:99:70:90:
dd:c3:b4:f5:c5:24:28:32:a9:1f:3f:cd:fb:af:8d:
72:c6:aa:b7:3f:17:94:e4:7c:e9:99:3a:53:93:df:
1b:47:db:11:71:83:0f:d7:c8:2d:09:5a:96:16:ef:
a7:81:27:14:fa:d4:f0:1b:98:fc:ee:c0:94:41:2d:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:4C:07:6A:1E:FB:97:50:D0:49:28:1D:4C:02:C6:42:7A:16:E3
X509v3 Authority Key Identifier:
keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:6f:cc:35:21:33:b2:50:53:4f:7c:4f:c3:9c:84:d6:cc:dd:
0b:e7:fd:48:4b:dd:28:09:bd:33:84:fe:ef:50:dd:49:c9:6c:
43:9a:e6:9a:a4:81:42:90:41:52:65:10:95:d9:d2:99:4e:47:
20:ab:ed:84:15:7b:3d:c4:61:6b:1a:05:57:98:ee:ae:33:43:
c8:2c:75:4e:3f:63:63:4c:f9:52:d6:aa:02:9a:59:fc:ad:af:
ab:cb:18:07:d2:dc:3b:54:ce:d5:36:96:fd:07:d1:c2:6e:95:
6b:c3:d0:94:50:72:ad:46:c6:6a:bd:04:db:4b:a6:0c:9c:2d:
49:68:a0:bb:bc:e0:5d:8d:b7:9b:fd:4b:65:60:66:46:17:b0:
7a:19:88:79:27:82:42:0b:29:c4:00:0e:63:37:11:8f:ce:b3:
f0:b0:71:c2:32:f5:9f:cd:9d:8d:7d:26:37:67:fb:a5:36:8e:
3c:6f:87:f6:48:04:2a:59:4e:8d:f6:4a:56:fc:b6:9c:5a:be:
ee:a1:d1:6b:3b:ad:3a:95:bd:ef:46:3a:8b:76:1e:52:60:dc:
a4:8c:88:e8:70:03:29:c3:b9:cd:40:ce:2b:ed:8f:9a:81:19:
24:fd:05:39:6c:1f:0a:89:a1:7d:4e:89:da:95:02:f4:f7:e5:
97:c6:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:32 2025 by rpki-client