Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json)
Hash identifier: QXD1m3nbcnCCHRh5XFPIo/juThNg6ewaqFqJTw3Mv64=
Subject key identifier: EA:66:F9:3A:A9:20:38:27:A3:07:6C:8E:E0:33:03:74:27:B1:B6:59
Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF
Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
Certificate serial: 1C1AE07CB92D05D27C3911D646735557E86CA3F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
Manifest number: 0235
Signing time: Thu 30 Jan 2025 22:12:09 +0000
Manifest this update: Thu 30 Jan 2025 22:07:09 +0000
Manifest next update: Sun 02 Feb 2025 22:55:09 +0000
Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: UzZpQicNLLJE5sObhd6tdidlfFhmLYYyXE1ROePfgkY=)
2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: 1jgLlaBezLH1bN98QVh+doY7e4FkZJNvq1+3PndysYw=)
3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rBHXQQE56sq6EsG7xu2y3Ai8w3KX+cJsV+YvOEbZG7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1a:e0:7c:b9:2d:05:d2:7c:39:11:d6:46:73:55:57:e8:6c:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
Validity
Not Before: Jan 30 22:07:09 2025 GMT
Not After : Feb 2 22:55:09 2025 GMT
Subject: CN=EA66F93AA9203827A3076C8EE033037427B1B659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:1a:d1:4b:52:6f:b7:ee:e7:98:f3:eb:95:
f5:07:81:5b:2c:42:f6:c5:85:74:ea:c9:3b:e6:11:
e0:fb:dd:4d:54:d0:67:f5:f2:53:c3:ff:8e:67:75:
2f:d4:32:0a:a8:cc:ac:6c:22:53:85:b8:c1:d2:99:
ce:47:ee:05:22:b4:5f:12:c5:a8:2f:28:d9:fe:1a:
0a:90:d9:97:1a:33:03:af:e7:fa:5e:9d:3e:7c:88:
81:12:68:41:c4:2a:92:2f:81:25:3e:0e:31:87:c1:
e3:3b:81:08:d5:1c:94:b4:1f:70:7b:a2:f5:2b:ce:
51:fa:b6:c2:df:3e:a8:bb:f1:aa:01:fd:9e:18:7d:
80:84:99:e3:89:ed:03:b0:d1:02:96:7c:18:40:62:
1c:c7:ec:eb:62:e5:d9:9d:ec:d8:e9:9f:9f:4b:01:
f1:64:f2:5d:17:80:c6:78:0b:04:4a:47:29:6c:ef:
7e:5c:18:02:8f:b8:72:fc:6e:da:32:7a:ae:3b:8a:
5a:66:7f:52:44:ff:7b:26:a6:fa:58:36:06:b5:04:
06:d2:a3:9b:2d:c5:96:e8:67:b1:7a:3c:d7:47:f3:
67:04:2b:9a:9f:0b:d7:c9:53:54:74:a7:6b:8f:d3:
dd:aa:7b:90:9e:5d:f0:ef:34:6e:a7:a2:85:ee:84:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:66:F9:3A:A9:20:38:27:A3:07:6C:8E:E0:33:03:74:27:B1:B6:59
X509v3 Authority Key Identifier:
keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2a:82:7d:48:9e:8f:97:fa:60:70:2f:cd:51:12:10:b3:a7:
c7:3e:b8:dc:0c:40:69:cf:d0:82:9b:01:e4:ab:f4:b2:e3:7d:
7a:ab:09:37:e7:12:58:32:6b:fe:5f:cb:48:4c:94:dc:16:42:
83:d6:74:c8:fa:8b:de:0a:a3:f3:49:79:de:47:e5:a9:b0:0e:
5a:50:71:51:3c:c8:d9:7c:72:39:5e:03:42:5a:8e:a1:0c:c8:
a7:72:47:fa:5e:32:93:96:18:22:ff:fa:e3:a5:d0:3d:45:76:
09:20:4a:6b:a8:19:ab:02:0b:04:b7:1b:b0:41:04:24:7a:50:
da:8d:53:d2:40:bb:d0:7e:a6:51:24:51:24:a6:29:3b:13:44:
de:76:65:c5:b8:bc:b0:08:7c:eb:93:94:5b:39:9e:c4:46:9a:
93:d5:aa:4c:ef:75:11:d6:a7:87:94:fe:7c:db:f9:8a:d1:00:
ec:48:4e:65:c4:1d:7b:a7:c7:78:72:d9:6a:66:b4:70:09:a6:
ec:24:e3:bd:ca:07:ea:7d:5d:51:0f:94:46:99:e1:66:8a:6f:
eb:80:80:bd:a1:80:94:d1:e5:34:e4:df:52:c1:0b:eb:22:a4:
36:63:bc:f9:e6:c0:87:45:6e:36:56:51:4a:2a:ce:a4:b6:8e:
fa:8b:58:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHBrgfLktBdJ8ORHWRnNVV+hso/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw
OUE5N0RBRjAeFw0yNTAxMzAyMjA3MDlaFw0yNTAyMDIyMjU1MDlaMDMxMTAvBgNV
BAMTKEVBNjZGOTNBQTkyMDM4MjdBMzA3NkM4RUUwMzMwMzc0MjdCMUI2NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOhrRS1Jvt+7nmPPrlfUHgVss
QvbFhXTqyTvmEeD73U1U0Gf18lPD/45ndS/UMgqozKxsIlOFuMHSmc5H7gUitF8S
xagvKNn+GgqQ2ZcaMwOv5/penT58iIESaEHEKpIvgSU+DjGHweM7gQjVHJS0H3B7
ovUrzlH6tsLfPqi78aoB/Z4YfYCEmeOJ7QOw0QKWfBhAYhzH7Oti5dmd7Njpn59L
AfFk8l0XgMZ4CwRKRyls735cGAKPuHL8btoyeq47ilpmf1JE/3smpvpYNga1BAbS
o5stxZboZ7F6PNdH82cEK5qfC9fJU1R0p2uP092qe5CeXfDvNG6nooXuhDpJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6mb5OqkgOCejB2yO4DMDdCextlkwHwYDVR0j
BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC
QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5
N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3
MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF
MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADEqgn1Ino+X+mBwL81REhCzp8c+uNwMQGnP
0IKbAeSr9LLjfXqrCTfnElgya/5fy0hMlNwWQoPWdMj6i94Ko/NJed5H5amwDlpQ
cVE8yNl8cjleA0JajqEMyKdyR/peMpOWGCL/+uOl0D1FdgkgSmuoGasCCwS3G7BB
BCR6UNqNU9JAu9B+plEkUSSmKTsTRN52ZcW4vLAIfOuTlFs5nsRGmpPVqkzvdRHW
p4eU/nzb+YrRAOxITmXEHXunx3hy2WpmtHAJpuwk473KB+p9XVEPlEaZ4WaKb+uA
gL2hgJTR5TTk31LBC+sipDZjvPnmwIdFbjZWUUoqzqS2jvqLWAw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:19 2025 by rpki-client