Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json)
Hash identifier: 6An0ir2IlKx1I9kDm/svWCCLq9wr4wzKLngump4UIIo=
Subject key identifier: 5D:3C:40:86:1E:3E:7F:33:45:33:0C:F4:DA:75:4A:8C:E7:C8:29:4D
Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Certificate serial: 74DD396AE90A3A3BDBD0D8F689624A867C11D5C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
Manifest number: 01B1
Signing time: Thu 30 Jan 2025 12:11:02 +0000
Manifest this update: Thu 30 Jan 2025 12:06:02 +0000
Manifest next update: Sun 02 Feb 2025 18:30:02 +0000
Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: Ga0rBdPz5bO0bDBkCeQq0d6YumWHubVRq3a8/jDMBKk=)
2: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: qAdtYdSMdla6RLr7bOqAQe/jaxXmAcOR1nTy3vg/Cz4=)
3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: k8LPKavn2jpgCCIKamnb82qp+kRRRyndZdhtxlhOO+I=)
4: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: GN/8pIfiMmiFGyqhWyUqtLQ5uPCwSXqTWNWQmMSer9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:dd:39:6a:e9:0a:3a:3b:db:d0:d8:f6:89:62:4a:86:7c:11:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Validity
Not Before: Jan 30 12:06:02 2025 GMT
Not After : Feb 2 18:30:02 2025 GMT
Subject: CN=5D3C40861E3E7F3345330CF4DA754A8CE7C8294D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:96:b0:d8:71:6e:07:37:7a:d1:62:8a:67:
e6:e4:5c:85:82:27:92:2b:bd:80:17:00:77:25:92:
e9:51:f8:0a:b9:c2:d1:12:29:57:8e:fd:21:08:91:
9f:87:ff:b1:86:08:e2:60:bc:16:d1:5a:94:16:d9:
41:5c:1d:c5:29:4a:78:12:fc:fc:d6:e0:c1:0c:b9:
89:ad:32:96:1d:7a:6c:68:34:c4:bc:90:3b:5f:52:
84:7f:fc:d6:52:0c:e4:fa:1b:12:40:df:99:4b:48:
8c:78:9f:45:1f:f6:70:b0:38:70:09:a9:7c:00:f4:
a2:ec:fb:bd:ed:1f:1f:1d:0e:5d:4d:bb:7d:94:fe:
93:6e:74:98:da:8d:2d:9c:b2:18:7c:9e:cc:86:e6:
75:7f:20:3a:ee:b6:67:c7:60:ac:64:04:9e:00:7a:
f4:f8:ae:36:b7:24:d8:a5:7f:09:2e:45:eb:5c:c7:
e5:94:50:51:89:f3:8d:6e:87:88:af:41:ad:6b:3c:
ee:70:8e:d1:5a:20:80:0e:01:7b:61:a2:a0:fb:a6:
28:af:38:4f:1b:6c:91:77:c1:64:fc:9a:38:10:26:
d7:68:a9:08:ad:36:35:9a:11:01:ce:46:4d:de:22:
1e:98:7a:30:43:22:f8:dd:d4:81:e1:3b:cf:84:e9:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:40:86:1E:3E:7F:33:45:33:0C:F4:DA:75:4A:8C:E7:C8:29:4D
X509v3 Authority Key Identifier:
keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2c:da:80:d5:41:11:98:06:a6:38:78:61:2a:15:71:b6:1b:
bc:f5:45:ac:f6:f9:6c:01:12:63:8a:4a:3b:81:94:48:aa:c8:
79:5a:e7:b5:f4:5f:e2:f3:b0:ba:2f:2d:7c:ab:63:c7:fd:0e:
ca:dc:0e:8e:50:d3:8b:ff:90:2a:64:f9:34:e1:c7:c0:7c:24:
4c:40:ce:49:5d:31:ca:6a:53:db:ce:b2:0e:8b:24:32:98:e1:
5c:bb:28:0e:39:0f:4b:66:08:f5:11:8c:7a:7c:a1:c9:53:43:
9e:5a:d7:78:34:ae:7c:54:d1:03:69:d7:2c:71:27:8a:6e:9e:
0f:6c:29:a1:8b:83:57:1d:81:ee:f4:4d:60:56:01:36:3c:fa:
2f:79:51:a3:aa:5f:1b:08:c3:2e:e7:bd:39:d9:87:a6:fe:ba:
33:a2:75:0b:c3:b5:08:bf:d0:ef:23:19:e5:eb:a5:f9:7c:f1:
03:ed:53:67:fd:0c:92:88:87:ac:96:8f:1a:9f:b3:83:5c:16:
9d:94:5f:a2:a3:e2:9e:a3:6e:a6:da:b0:57:6f:c6:74:b6:fb:
df:cb:82:4d:c3:db:65:bf:01:14:68:39:87:4f:ac:09:e3:2f:
d1:45:9a:31:65:b7:26:f7:10:b7:d4:f8:66:ff:e1:31:e2:c0:
28:10:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:06 2025 by rpki-client