Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft
File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json)
Hash identifier: u/+X+TLLjosy61Sb5POOieEKIILWGpzc2nUk0yJXTNs=
Subject key identifier: F9:ED:14:71:F0:33:BF:8A:1B:53:86:ED:80:F9:D3:8D:DB:D0:5D:C2
Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65
Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365
Certificate serial: 79370354C444F59232C0165D607088479526B08A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft
Manifest number: 0132
Signing time: Fri 31 Jan 2025 04:03:41 +0000
Manifest this update: Fri 31 Jan 2025 03:58:41 +0000
Manifest next update: Mon 03 Feb 2025 10:07:41 +0000
Files and hashes: 1: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: eRm8ddtsmSedKqcG2G82Bp1EhiRufznAWG1/ZjydYPs=)
2: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: IlEiGcTNRfLgc+5n98afB5648nnwVHDEvCuqj1ZmYkQ=)
3: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: +T+pV+w4sy/AcyrcZ47zD+xcb+FuTkZiEDOZ+MS5pI8=)
4: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: 6cuCKyRJn4rHyjhWlg5fY83pfoc9boGFW7m72WmX+54=)
5: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: LJJmQ3IpNYQsnV1W/Zv1L/PVf+QgwjQT7fa0MGcCAsI=)
6: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: 6TBRWvV0MXiO3oTl1QlT4g/ofldIZCFPAsjFaJgzcqE=)
7: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: 5w42C5j8nFPLQ8/TklJq72CWwX+rLT7sVOkbeuIVTnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:37:03:54:c4:44:f5:92:32:c0:16:5d:60:70:88:47:95:26:b0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365
Validity
Not Before: Jan 31 03:58:41 2025 GMT
Not After : Feb 3 10:07:41 2025 GMT
Subject: CN=F9ED1471F033BF8A1B5386ED80F9D38DDBD05DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:97:51:5d:58:f0:1c:3d:68:a1:36:a8:b0:
06:2e:02:0e:37:fc:ff:22:f1:03:a2:dd:f8:25:8c:
3f:be:04:45:58:37:42:db:0d:36:c8:6e:c4:87:14:
25:b3:c4:a2:6d:76:68:54:d0:f1:af:38:ed:5f:85:
ba:87:c6:ac:84:fb:93:a4:64:cf:64:4b:f5:2c:33:
09:ec:b5:67:c9:38:5b:a5:7b:63:a1:93:3d:11:41:
2d:88:75:0e:aa:85:2a:26:f6:c8:a4:f7:aa:08:87:
43:12:8c:3d:5c:89:5f:9e:9b:57:69:9b:c2:39:f4:
db:bc:ae:dd:0f:45:55:74:66:96:bb:5c:70:dc:5a:
52:38:d3:63:49:53:b4:a3:99:86:98:67:85:e6:d2:
a9:71:6f:8a:3f:43:07:02:04:b8:4c:25:67:df:24:
1c:26:5b:cb:5e:80:29:51:35:2a:d1:f9:4b:db:24:
ef:e2:4a:25:fe:0b:3a:4d:c9:b3:05:9e:ff:6d:65:
73:7f:5d:0f:64:d6:f4:81:21:b9:3b:11:b5:60:6c:
4a:da:1c:2b:8a:30:e1:e5:52:02:8c:95:e1:1f:3f:
97:f0:2e:71:b1:30:f6:5e:ec:c1:a5:3c:6a:43:e9:
31:34:69:8b:ac:4d:c3:3c:e5:f2:d0:d0:b2:e7:56:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:14:71:F0:33:BF:8A:1B:53:86:ED:80:F9:D3:8D:DB:D0:5D:C2
X509v3 Authority Key Identifier:
keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f5:7d:25:a0:f6:0a:d7:cf:40:47:02:c6:a1:b3:96:ad:6a:
75:ee:e9:58:16:9b:57:a9:77:c2:4f:2f:45:da:5f:f1:99:a9:
83:1b:68:94:0b:95:de:cc:20:c8:4a:9b:45:d7:41:d8:9d:88:
b0:61:34:40:89:b0:b5:b0:ee:d1:d6:9c:90:5e:4b:e5:f1:a6:
24:5e:2a:47:4b:2e:f2:6c:8a:b0:de:50:b8:7e:42:1f:75:38:
ca:86:b8:11:a1:1e:c1:ba:a1:19:96:14:3e:1f:96:14:ea:d1:
53:b9:83:ae:b2:b3:d8:d2:1f:9f:e0:c7:62:26:d3:4f:f9:c8:
09:bf:8d:0d:49:18:a4:ed:4f:df:50:90:85:cb:07:97:bf:2e:
de:12:0c:e7:3f:20:c5:b6:08:16:0c:58:9c:f4:b0:2f:48:cc:
7e:8b:58:cb:8e:64:b4:6f:c9:03:79:9a:23:9c:c5:cb:f7:ba:
b2:ef:68:04:64:69:40:2b:ea:db:3b:46:c2:1b:c8:20:fe:a9:
a0:a1:12:f2:dc:82:90:de:fb:d1:94:a3:c7:67:4b:f4:e6:d2:
96:38:f3:1b:ea:c9:2d:0e:ed:7c:91:93:0e:70:70:ae:0e:33:
2f:92:4a:a8:a4:df:6c:3b:62:8a:4d:fa:8d:16:47:41:d0:01:
c1:7d:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:11 2025 by rpki-client