Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json)
Hash identifier: W1OpB6D3Ovro8Si0trqy/76NVd6UhidrS+RFsJwg8oA=
Subject key identifier: 3A:1E:FA:96:F0:77:42:08:9B:76:E7:84:4E:05:68:DB:EA:EA:C9:55
Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Certificate serial: 20C55BF7066BDD5B65F6E93C8A7D00D7EFF2F9F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
Manifest number: 02D3
Signing time: Thu 30 Jan 2025 18:11:54 +0000
Manifest this update: Thu 30 Jan 2025 18:06:54 +0000
Manifest next update: Mon 03 Feb 2025 01:56:54 +0000
Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: xmfvEBw1P8sSqglSjh5fK7KpklmguFj/KUnvIPf2TYo=)
2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: 2S1odcJLI/iIU/NsOfi9kDb4785PgmPmYXl39kbW8nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c5:5b:f7:06:6b:dd:5b:65:f6:e9:3c:8a:7d:00:d7:ef:f2:f9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Validity
Not Before: Jan 30 18:06:54 2025 GMT
Not After : Feb 3 01:56:54 2025 GMT
Subject: CN=3A1EFA96F07742089B76E7844E0568DBEAEAC955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:5d:79:be:93:cd:f6:b3:ef:f3:94:34:2c:
05:4f:e0:d2:3b:ef:9b:75:5f:c9:ef:c2:0d:48:e0:
ae:9f:e1:13:82:83:4e:2c:b0:89:ac:93:b9:80:2d:
95:b8:2f:ed:4a:b1:11:b0:25:b9:f2:be:02:e3:98:
d6:16:58:f9:dc:79:2d:00:36:f0:de:bf:29:61:cd:
25:27:56:1c:84:5c:45:ee:51:6d:88:0e:27:94:4f:
f5:27:4a:a0:c5:84:ba:33:13:8c:68:d0:bd:a7:47:
d3:c9:17:12:cb:6d:e2:81:f3:56:34:78:ac:8f:9f:
10:32:c7:df:74:68:ce:26:6a:79:4e:f2:17:be:d1:
a7:13:f8:6a:4a:2c:e3:ac:65:0f:a1:b5:a1:f7:d0:
67:1c:15:13:ad:d8:4c:e0:25:62:ce:fb:ab:5a:58:
70:d7:d0:da:b0:ad:10:f4:06:62:21:b7:9f:84:02:
55:1f:07:fb:48:13:c9:39:c9:e7:c5:a7:c5:47:1d:
02:27:fc:dd:46:4c:e6:f9:8c:89:99:f2:60:2b:a1:
12:ac:cf:95:8f:fb:7c:e5:c0:7c:6f:7f:71:bc:32:
16:f2:4a:9b:6a:d9:9e:c2:ba:01:73:55:97:1d:11:
9c:0d:6e:a2:8d:28:3a:b8:52:f1:ef:97:cb:64:8b:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:FA:96:F0:77:42:08:9B:76:E7:84:4E:05:68:DB:EA:EA:C9:55
X509v3 Authority Key Identifier:
keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:94:45:19:99:fc:c9:8a:fe:6a:bf:cf:67:c0:42:4f:fe:b8:
de:26:21:25:d2:d5:27:ed:bd:43:8e:82:9f:f6:72:ae:97:3b:
b2:f5:0f:e7:42:a4:22:07:b4:06:ee:d0:e2:0b:1f:68:ca:0d:
98:a6:84:05:fd:2b:ba:ad:11:ca:62:77:64:30:62:13:78:89:
c5:fb:3c:6b:4a:73:d9:5d:b9:a6:7c:4e:91:52:75:39:85:8a:
6f:51:62:e0:f4:7c:88:4f:33:6f:94:e4:22:b0:20:6d:1a:d4:
d2:22:43:6f:05:dc:05:43:f9:b7:8b:87:c4:de:dd:f8:f5:0e:
7a:90:91:40:b7:42:f3:1c:87:67:4e:43:19:16:c1:93:2d:99:
e9:24:e6:cb:ff:8d:3a:19:82:8c:48:ae:d5:92:6b:bc:73:b9:
b4:1b:7e:84:c8:b3:5a:05:ae:7d:3c:ff:a2:23:56:d8:cc:7f:
c3:a1:08:ab:62:44:7a:31:bb:9a:16:bc:46:50:34:f3:cd:df:
6b:c0:74:74:7f:d0:35:d8:50:17:12:c3:ae:a9:62:dd:11:ed:
15:e5:6d:3b:49:c4:5c:2e:b7:f0:ad:04:6e:48:59:6f:6c:b0:
69:58:82:62:af:4b:cb:f4:99:46:a0:82:2e:68:03:c8:4e:e5:
c1:de:00:7d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIMVb9wZr3Vtl9uk8in0A1+/y+fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4
Q0I4RkQ1MjAeFw0yNTAxMzAxODA2NTRaFw0yNTAyMDMwMTU2NTRaMDMxMTAvBgNV
BAMTKDNBMUVGQTk2RjA3NzQyMDg5Qjc2RTc4NDRFMDU2OERCRUFFQUM5NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpl15vpPN9rPv85Q0LAVP4NI7
75t1X8nvwg1I4K6f4ROCg04ssImsk7mALZW4L+1KsRGwJbnyvgLjmNYWWPnceS0A
NvDevylhzSUnVhyEXEXuUW2IDieUT/UnSqDFhLozE4xo0L2nR9PJFxLLbeKB81Y0
eKyPnxAyx990aM4manlO8he+0acT+GpKLOOsZQ+htaH30GccFROt2EzgJWLO+6ta
WHDX0NqwrRD0BmIht5+EAlUfB/tIE8k5yefFp8VHHQIn/N1GTOb5jImZ8mAroRKs
z5WP+3zlwHxvf3G8MhbySptq2Z7CugFzVZcdEZwNbqKNKDq4UvHvl8tki5rBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOh76lvB3QgibdueETgVo2+rqyVUwHwYDVR0j
BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2
QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4
RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk
ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2
NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL2URRmZ/MmK/mq/z2fAQk/+uN4mISXS1Sft
vUOOgp/2cq6XO7L1D+dCpCIHtAbu0OILH2jKDZimhAX9K7qtEcpid2QwYhN4icX7
PGtKc9lduaZ8TpFSdTmFim9RYuD0fIhPM2+U5CKwIG0a1NIiQ28F3AVD+beLh8Te
3fj1DnqQkUC3QvMch2dOQxkWwZMtmekk5sv/jToZgoxIrtWSa7xzubQbfoTIs1oF
rn08/6IjVtjMf8OhCKtiRHoxu5oWvEZQNPPN32vAdHR/0DXYUBcSw66pYt0R7RXl
bTtJxFwut/CtBG5IWW9ssGlYgmKvS8v0mUaggi5oA8hO5cHeAH0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:06 2025 by rpki-client