
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json)
Hash identifier: iFiZGUIFrm2YcpQDNlITdc+c9r/HOXDEEOZDwO3b2Fg=
Subject key identifier: 8E:77:E5:B6:E2:4D:A7:FF:19:B2:27:F6:68:74:14:8C:25:23:43:65
Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Certificate serial: 40F9F4495276D809E1ED36151D8EAADDC0BE55DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
Manifest number: 0321
Signing time: Wed 29 Jan 2025 13:41:12 +0000
Manifest this update: Wed 29 Jan 2025 13:36:12 +0000
Manifest next update: Sun 02 Feb 2025 00:23:12 +0000
Files and hashes: 1: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: 4fxeQutAHCIlBP4cv0mvnjFbleyvOk9Tizufv+tSvQo=)
2: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: QDyNAQCsZTwXaCDGrTmKaMOsrFVg55/LS3fiRrnIomg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f9:f4:49:52:76:d8:09:e1:ed:36:15:1d:8e:aa:dd:c0:be:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Validity
Not Before: Jan 29 13:36:12 2025 GMT
Not After : Feb 2 00:23:12 2025 GMT
Subject: CN=8E77E5B6E24DA7FF19B227F66874148C25234365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:36:27:cd:f0:74:01:8c:65:5c:60:86:da:
10:00:96:f2:57:b2:ae:74:2a:b9:17:9b:f0:a0:80:
0b:fd:3a:e0:80:16:0b:66:76:94:5f:15:c6:f2:6c:
5e:1c:c4:97:c0:91:6c:4b:9a:57:80:1d:0c:7e:be:
af:3a:a8:c9:76:da:71:57:71:fc:ab:9c:74:8c:c0:
f2:85:dd:7d:23:3a:43:ad:0a:bd:8a:e7:4a:ca:26:
e4:26:59:fd:5f:de:eb:5d:74:d8:99:19:b4:00:bc:
85:4d:e3:49:cf:9a:bb:f5:fe:e8:e8:9a:81:14:d0:
8a:13:8b:2c:33:64:34:37:3f:a4:e2:1e:94:08:a7:
f0:cc:91:cb:47:dd:55:19:64:ff:c0:57:55:fe:63:
35:8b:d3:39:aa:16:37:fe:78:5d:fe:22:21:b7:32:
aa:61:7d:5b:7c:fd:0e:9a:75:21:67:09:b2:e3:4b:
6b:b6:0d:7d:b9:ac:06:64:a7:1a:8b:15:59:69:c4:
be:36:69:87:8c:f1:46:cb:7d:48:46:b2:97:48:8e:
eb:a3:1b:25:30:82:f8:d7:c4:7a:56:5a:93:43:4b:
5e:21:10:31:5d:09:e0:03:f6:d8:b2:26:8e:a5:13:
33:aa:b2:0f:49:8c:8a:aa:d0:c3:42:d1:82:03:d2:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:77:E5:B6:E2:4D:A7:FF:19:B2:27:F6:68:74:14:8C:25:23:43:65
X509v3 Authority Key Identifier:
keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:39:58:1d:92:e3:0d:08:6f:90:38:33:df:f3:cf:e6:f2:
43:aa:e7:43:1a:41:bc:b7:9e:69:d7:24:7d:9c:cd:f6:0d:4a:
99:ed:72:6a:4d:41:0a:6b:5c:53:67:5a:1b:71:e5:f5:ff:3a:
69:6c:28:0f:0e:54:63:b7:6f:12:0f:51:6d:96:36:97:62:44:
c5:42:0b:31:15:f5:ee:d5:51:f7:d7:85:0f:e0:1e:33:37:fa:
8b:86:df:22:d6:30:f6:b4:9c:67:08:b6:a7:63:fd:6b:79:5d:
a3:b7:15:d5:d9:98:91:b2:03:9e:f3:ed:56:0f:8c:1b:13:3b:
75:e2:50:e9:af:40:25:f1:b6:13:6f:f0:e8:6c:0f:3a:1b:c3:
39:16:63:78:3b:17:b5:dd:8d:83:1e:8a:9d:30:c3:46:96:64:
51:e7:56:38:be:3b:67:ff:7c:ae:19:0e:a5:c3:0a:8c:32:b7:
8f:b3:62:95:f0:c9:d1:a6:12:0e:bc:a3:f1:e4:87:04:67:3b:
a3:d0:43:24:dc:33:6c:0e:cb:0f:fe:91:bd:c9:bb:6d:60:65:
62:7f:f0:70:5f:bb:2c:6d:50:65:fc:65:e5:73:f5:81:02:b4:
ca:b7:50:ee:2a:3e:ed:36:7d:13:98:cc:a6:01:ae:98:97:18:
3a:f0:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:59 2025 by rpki-client