Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft
File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json)
Hash identifier: TqZqmIOvPxp+07Jg+UDBJOwgNgIXSAn396suAMCdFMk=
Subject key identifier: 60:D5:11:EF:D2:4A:5C:F8:A5:4C:92:B2:FA:C0:C6:9D:18:01:9C:3F
Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01
Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401
Certificate serial: 5DE50F602A8BB9810CE7EE65907F9D05691790BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft
Manifest number: 01A1
Signing time: Thu 30 Jan 2025 07:42:12 +0000
Manifest this update: Thu 30 Jan 2025 07:37:12 +0000
Manifest next update: Sun 02 Feb 2025 10:23:12 +0000
Files and hashes: 1: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: xqSeg2IKk1bhIqDJq/ppeMqqDdTbglDK57PkVnYRRns=)
2: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: iGlV16PIwRGEMvB9XBdrvDdOO7MQMVmmsByl97dc5zA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e5:0f:60:2a:8b:b9:81:0c:e7:ee:65:90:7f:9d:05:69:17:90:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401
Validity
Not Before: Jan 30 07:37:12 2025 GMT
Not After : Feb 2 10:23:12 2025 GMT
Subject: CN=60D511EFD24A5CF8A54C92B2FAC0C69D18019C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:c7:87:ee:f3:3e:80:8f:e2:2f:e7:b3:7d:
85:16:0a:6e:bd:ae:59:49:c6:5e:45:83:6c:d8:25:
ef:e6:37:0e:00:f7:33:76:2e:51:18:3d:d3:52:34:
6a:e7:d5:d0:72:42:36:1c:17:15:5b:84:4b:c4:38:
72:0e:bd:ac:f9:53:3b:de:d7:0a:e0:31:80:b7:b3:
55:05:07:db:58:02:35:98:41:27:46:b3:56:f6:6d:
d0:b6:a4:fe:88:1a:ec:78:28:9f:d5:fd:8b:eb:d5:
cc:e4:f0:11:31:ee:15:bf:99:a1:00:b9:97:e1:5f:
bf:1c:61:24:8b:73:79:b2:5d:92:58:1e:64:92:7a:
a3:be:cf:59:94:69:cb:2f:91:db:12:39:1c:a2:4e:
07:2a:f1:49:c6:fc:32:a0:cf:11:0b:13:d2:96:c9:
e1:fe:a1:e1:09:ec:3b:aa:7a:88:0c:dc:dc:86:ac:
f1:03:45:cd:17:89:57:e3:e7:5c:e5:98:75:08:16:
4f:7e:0a:8b:05:4c:b7:a5:8e:50:48:ee:e9:c8:34:
ae:5c:ae:b3:ba:c0:7d:b3:bf:2b:88:0f:49:14:43:
df:ed:95:8d:d4:4d:02:70:e2:4f:a2:68:08:1c:44:
41:5d:a5:59:65:00:2c:2e:a5:86:84:b7:2d:ec:bd:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D5:11:EF:D2:4A:5C:F8:A5:4C:92:B2:FA:C0:C6:9D:18:01:9C:3F
X509v3 Authority Key Identifier:
keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:a1:1b:73:81:4a:1b:e0:2b:ab:8d:c5:32:0a:3e:ab:af:
ff:6a:ab:8d:5c:a3:87:45:c7:ab:9f:74:b6:15:e3:7e:5c:16:
24:ea:ee:7f:8f:bf:a5:ab:ad:60:13:c9:95:a9:92:c0:09:3b:
9c:58:a7:00:70:62:bd:cc:4e:0a:8d:60:ab:70:c0:b4:cd:92:
be:bb:2e:8f:ac:de:65:3b:6a:a2:3f:55:35:48:a3:d6:3d:c1:
e0:6c:08:7d:15:b0:95:60:46:e2:bf:1f:15:78:45:6f:f4:78:
a5:68:34:a3:c2:23:63:fc:89:da:43:f4:89:1e:f4:7a:fc:e5:
a0:f5:1d:95:3b:59:45:b7:aa:84:ae:26:57:de:1d:f4:c1:f0:
17:e0:ce:b0:9c:0f:a2:b8:07:52:a7:94:57:90:30:8f:f4:17:
c4:16:00:d1:35:8d:00:cf:2e:bf:95:13:1b:43:a2:1a:28:0f:
d9:80:f8:63:e1:bf:13:31:7f:c3:d0:b1:13:6e:2f:bd:7b:6c:
1b:f2:07:57:99:02:0f:52:56:8b:51:20:d5:1e:56:b9:12:4f:
82:a2:41:b2:ae:0c:ae:f0:dc:79:3d:5a:35:58:69:a1:73:7f:
eb:52:b1:6d:31:5b:c5:0a:4e:7b:ed:b4:d5:31:fb:e4:91:2d:
ec:ff:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:53 2025 by rpki-client