
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json)
Hash identifier: ciuiFJz8kGGGrhCm5J22n+iNepaukw7UeSCyIphgumg=
Subject key identifier: 1F:E4:8A:01:6E:70:00:C0:10:7C:3C:8F:9F:B8:BD:F0:D7:62:F0:76
Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0
Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
Certificate serial: 21AD0A9317025237D76467A1A8C48C173DFA0AC0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
Manifest number: 016D
Signing time: Thu 30 Jan 2025 14:20:42 +0000
Manifest this update: Thu 30 Jan 2025 14:15:42 +0000
Manifest next update: Sun 02 Feb 2025 20:48:42 +0000
Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: awJvMfpFJU98eWUWFeuf5hiKZwFuXoT65yolMyJX4Jw=)
2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: IlQumPK6KomV6cani9MrJtlfXMHdK90m/bkrSah6WGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ad:0a:93:17:02:52:37:d7:64:67:a1:a8:c4:8c:17:3d:fa:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
Validity
Not Before: Jan 30 14:15:42 2025 GMT
Not After : Feb 2 20:48:42 2025 GMT
Subject: CN=1FE48A016E7000C0107C3C8F9FB8BDF0D762F076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:87:de:a1:28:11:f1:54:c5:f6:63:75:5a:
d1:0b:95:8a:d3:c1:75:d4:76:e7:77:81:35:6f:39:
f4:59:9c:50:b0:9b:b1:0a:70:92:e6:d6:3a:fe:09:
af:76:83:ae:c6:99:d3:57:63:8b:79:5f:2b:e7:80:
66:75:91:6c:d6:e6:02:35:9d:aa:2b:1f:59:85:b8:
40:72:f7:f7:50:06:99:c0:a7:b6:70:98:66:34:88:
df:db:09:f7:9f:de:a3:8f:bf:e1:12:2f:15:e8:68:
46:62:35:59:49:4b:21:87:6c:fd:1c:62:30:d7:45:
97:61:a9:78:5f:6c:e7:de:7d:eb:d4:ba:e9:9c:a1:
51:a7:ef:a5:db:f7:78:03:03:b4:41:4b:c5:de:1b:
11:09:41:d0:f4:a6:26:87:00:78:bf:a2:c9:95:51:
34:96:63:0c:35:9d:c2:f3:8e:df:19:df:f9:7d:66:
aa:8f:a8:9d:30:2f:12:b6:0f:6c:81:aa:43:66:76:
0f:6a:90:b6:53:b9:ed:35:a9:e7:c6:fc:c1:f8:27:
5f:5b:c3:38:7f:a8:ba:86:b2:20:9a:61:3f:6f:21:
5d:2c:c9:e0:e9:65:6a:5e:aa:60:6b:ca:7a:51:6d:
b1:1d:bd:cf:11:f2:21:a2:48:a0:da:c0:85:11:b6:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:8A:01:6E:70:00:C0:10:7C:3C:8F:9F:B8:BD:F0:D7:62:F0:76
X509v3 Authority Key Identifier:
keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b7:19:1d:07:08:1c:a7:ed:eb:6c:b0:5b:fc:8d:a2:cc:b6:
61:02:04:6f:fc:4d:96:3b:b4:1c:24:de:d2:f5:bf:fb:2d:d7:
53:28:43:d3:1c:94:82:72:91:35:6b:3e:c4:5a:63:64:49:36:
d1:59:9a:d7:99:fa:7e:fb:ab:d4:f1:e1:67:1b:ca:5a:e9:f0:
82:9d:9f:6a:16:e1:6c:43:da:ce:4f:c7:f3:dd:7c:da:f5:da:
46:65:b2:86:55:78:47:0e:f3:90:29:7a:1c:86:b5:16:5f:7a:
c4:1c:1b:64:53:65:12:26:63:94:a7:ec:47:a3:ec:14:af:ac:
70:31:c3:7a:51:99:29:cb:e0:8e:0f:f3:f2:2f:49:d4:ba:08:
27:36:6e:fb:02:88:78:23:c6:45:56:c4:05:90:16:0e:4d:52:
f6:38:15:44:44:5d:1a:ea:96:2b:47:0b:a4:f2:2b:0b:22:08:
ca:5e:be:6d:18:3c:3e:ea:bb:43:c7:7a:c1:0e:61:a6:aa:be:
0a:66:d7:c6:2e:89:7b:bd:56:45:eb:d7:65:95:a9:53:2f:28:
cf:91:27:da:b2:94:79:d5:69:ca:95:1e:26:47:a3:69:5f:c8:
b6:b8:99:c9:f5:c6:15:54:a5:3d:ac:9d:07:cc:80:69:96:53:
f6:e0:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:15 2025 by rpki-client