Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json)
Hash identifier: 1iuLdhWKyUYWxdVERJbjXMwXoImViA62Q8T3qYHhBns=
Subject key identifier: 57:2E:63:F3:6F:35:E5:EB:95:13:CF:EC:12:59:03:93:B7:C7:69:DD
Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19
Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719
Certificate serial: 58D7E0B92BAB7256F93A814925527207AF4F8476
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
Manifest number: 3E
Signing time: Fri 31 Jan 2025 02:01:17 +0000
Manifest this update: Fri 31 Jan 2025 01:56:17 +0000
Manifest next update: Mon 03 Feb 2025 02:09:17 +0000
Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: bRxB1/XYWBuRDsFTyowa+aqFQkf4scGUR4oQ2TVJrXQ=)
2: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: hkucRLLjBLrhlM6SQCQN4kuX0c0WpJ4ENX9XknJiTDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d7:e0:b9:2b:ab:72:56:f9:3a:81:49:25:52:72:07:af:4f:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719
Validity
Not Before: Jan 31 01:56:17 2025 GMT
Not After : Feb 3 02:09:17 2025 GMT
Subject: CN=572E63F36F35E5EB9513CFEC12590393B7C769DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:67:e5:51:d9:5f:87:62:27:a5:7c:12:64:
41:d0:43:a7:8e:c8:7f:61:a8:e7:83:01:94:02:80:
02:d0:dc:e5:37:5f:91:b5:1e:fa:50:ef:8c:65:da:
fd:22:3d:ca:1c:9a:5c:02:9e:0b:a8:8e:ef:7a:50:
80:a8:92:22:31:0a:f3:d0:f9:aa:99:22:b7:65:c7:
fb:69:6b:1c:6c:ff:e1:4a:a3:8b:b4:04:00:6a:0b:
5b:45:ed:fa:b5:f5:aa:57:b0:17:9e:d1:46:b6:3f:
05:e0:2e:ed:7e:1a:d3:a2:48:71:73:46:44:42:cb:
78:d5:c3:eb:3f:c8:63:23:0a:f9:f1:70:5a:12:5c:
37:c6:65:b4:2f:2d:c5:64:46:c1:97:88:55:9f:af:
6f:1e:b3:e3:cc:08:12:66:9d:89:3b:f1:61:5c:9c:
3d:3c:f0:6f:04:bb:35:dd:24:fe:df:1b:af:6a:0f:
16:70:a8:65:e7:da:66:46:10:c9:58:40:74:60:ff:
7a:30:19:14:98:4d:81:f3:ab:5c:d2:a5:bc:df:03:
6a:2b:ed:b5:05:ae:28:af:be:1e:df:93:94:34:c7:
9d:cc:32:df:8e:2d:e3:eb:16:2b:88:76:46:03:5f:
9b:ad:6e:f7:54:48:f4:7c:cd:65:c6:aa:b0:aa:ed:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2E:63:F3:6F:35:E5:EB:95:13:CF:EC:12:59:03:93:B7:C7:69:DD
X509v3 Authority Key Identifier:
keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:32:8e:d8:79:aa:db:bb:e6:d6:e3:b8:8f:b5:1a:0d:12:7d:
00:7f:e6:a6:ba:d5:c1:99:8e:e3:a6:04:1b:54:e2:da:09:46:
fc:64:66:70:3e:a8:0a:ad:bc:9a:b3:65:17:d9:00:03:23:f0:
5c:6b:24:46:f3:62:ad:12:b7:78:fd:2e:43:ae:c1:13:00:69:
e5:ae:19:a5:f2:d1:2e:f4:73:22:d3:58:f7:fd:3d:c7:f0:5e:
b2:47:78:ca:40:c5:4f:41:9c:de:77:d5:f0:10:6b:d7:56:e9:
99:9d:8c:13:f9:67:9c:f4:76:1d:4f:73:8c:e7:ac:86:6a:4f:
0c:51:e1:ee:fb:13:b9:8c:b9:ec:06:47:4e:2e:7a:28:ff:76:
66:b4:a9:08:a3:9f:45:47:95:e0:6d:93:11:d5:52:d9:15:a9:
a1:89:88:27:7e:aa:87:d7:16:09:1f:53:51:2b:c4:56:11:04:
27:0b:ac:13:03:89:c4:fc:3b:49:65:44:bf:d0:2f:d8:d3:49:
33:d6:16:09:21:42:34:90:e1:a4:0a:35:5a:dd:40:cf:6d:fb:
65:3c:f2:47:8c:a2:61:5c:19:b2:a1:ba:e4:34:48:dd:fb:10:
0d:b2:fa:57:aa:3d:5d:c2:7b:81:74:ac:51:d5:b0:78:d8:66:
d7:e8:f2:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWNfguSurclb5OoFJJVJyB69PhHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy
NTJBOTcxOTAeFw0yNTAxMzEwMTU2MTdaFw0yNTAyMDMwMjA5MTdaMDMxMTAvBgNV
BAMTKDU3MkU2M0YzNkYzNUU1RUI5NTEzQ0ZFQzEyNTkwMzkzQjdDNzY5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZmflUdlfh2InpXwSZEHQQ6eO
yH9hqOeDAZQCgALQ3OU3X5G1HvpQ74xl2v0iPcocmlwCnguoju96UICokiIxCvPQ
+aqZIrdlx/tpaxxs/+FKo4u0BABqC1tF7fq19apXsBee0Ua2PwXgLu1+GtOiSHFz
RkRCy3jVw+s/yGMjCvnxcFoSXDfGZbQvLcVkRsGXiFWfr28es+PMCBJmnYk78WFc
nD088G8EuzXdJP7fG69qDxZwqGXn2mZGEMlYQHRg/3owGRSYTYHzq1zSpbzfA2or
7bUFriivvh7fk5Q0x53MMt+OLePrFiuIdkYDX5utbvdUSPR8zWXGqrCq7cInAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVy5j82815euVE8/sElkDk7fHad0wHwYDVR0j
BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2
OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB
OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll
MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz
NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGoyjth5qtu75tbjuI+1Gg0SfQB/5qa61cGZ
juOmBBtU4toJRvxkZnA+qAqtvJqzZRfZAAMj8FxrJEbzYq0St3j9LkOuwRMAaeWu
GaXy0S70cyLTWPf9PcfwXrJHeMpAxU9BnN531fAQa9dW6ZmdjBP5Z5z0dh1Pc4zn
rIZqTwxR4e77E7mMuewGR04ueij/dma0qQijn0VHleBtkxHVUtkVqaGJiCd+qofX
FgkfU1ErxFYRBCcLrBMDicT8O0llRL/QL9jTSTPWFgkhQjSQ4aQKNVrdQM9t+2U8
8keMomFcGbKhuuQ0SN37EA2y+leqPV3Ce4F0rFHVsHjYZtfo8s8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:19 2025 by rpki-client