Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json)
Hash identifier: ghjuSgrKt5yEqlyPjtPs+KzVY+5ihbuFkhPYOSDMA7g=
Subject key identifier: 00:90:0C:51:40:3F:3A:55:7E:42:8E:AA:FE:09:E2:A0:13:F0:D9:F0
Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722
Certificate serial: 13564E9283A3ABD64B4A538B011A7CAC3F4138BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
Manifest number: A1
Signing time: Fri 31 Jan 2025 15:41:39 +0000
Manifest this update: Fri 31 Jan 2025 15:36:39 +0000
Manifest next update: Tue 04 Feb 2025 03:09:39 +0000
Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: OImunUrRqPZHjn6PkX8ev+hnAUzuv48xyMcASLSylFM=)
2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:56:4e:92:83:a3:ab:d6:4b:4a:53:8b:01:1a:7c:ac:3f:41:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722
Validity
Not Before: Jan 31 15:36:39 2025 GMT
Not After : Feb 4 03:09:39 2025 GMT
Subject: CN=00900C51403F3A557E428EAAFE09E2A013F0D9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:3f:ef:aa:0b:c5:3d:87:73:e5:f2:15:40:
3a:ee:44:74:33:d9:74:3d:33:0c:33:a4:90:e2:21:
91:af:52:28:45:97:be:30:1b:27:5b:d9:11:1e:56:
75:80:dd:96:8f:7d:2a:fe:39:91:ca:ef:16:99:5d:
c1:a9:83:61:ad:b6:0d:da:38:3e:f9:e9:2d:95:a6:
f5:67:46:14:4f:24:a3:3c:4c:ed:92:8f:b0:be:66:
74:b4:b8:50:88:6f:cf:a9:98:ff:2f:e2:3d:b1:bd:
51:da:00:ff:1f:37:2a:62:b7:4a:a2:34:9d:4b:c9:
c9:53:f2:55:79:b3:c4:61:e3:ee:b1:33:68:54:32:
5c:ea:df:2c:bb:47:ed:45:08:8e:a6:f9:0f:8d:5a:
d2:9d:8c:8b:8b:7c:75:6f:f2:29:21:b0:66:07:21:
50:5c:1b:07:ff:71:e5:18:1b:f3:dc:4e:a7:1a:80:
29:a3:aa:79:d8:9d:74:7d:a1:4d:93:eb:9b:3c:ad:
6d:25:78:bf:be:87:ef:7e:7a:96:53:72:36:b9:cd:
37:00:e3:00:c8:c9:50:99:00:5e:ce:23:0c:ec:e3:
af:c7:a0:25:a5:85:28:ef:9c:d7:aa:2a:d4:a9:06:
49:8c:62:e3:03:aa:da:d9:07:a5:e4:af:4c:cf:2e:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:90:0C:51:40:3F:3A:55:7E:42:8E:AA:FE:09:E2:A0:13:F0:D9:F0
X509v3 Authority Key Identifier:
keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:55:b1:bc:95:01:37:c5:02:a0:bd:4e:dd:fe:33:be:57:
40:6b:c1:74:3c:aa:14:7f:16:51:aa:5b:6b:59:d3:ba:00:6e:
6e:05:07:b4:36:ae:d6:8e:a9:9a:a5:99:ce:a7:3b:d1:d1:2f:
6a:70:d1:10:f6:60:51:d2:7c:b4:f9:59:ff:e8:d7:24:b7:0d:
25:25:31:82:59:08:f5:24:14:30:2a:ec:af:51:1a:9d:5f:ac:
2a:52:09:be:12:a0:6a:74:17:4a:ce:89:63:0b:50:5f:6f:b1:
a3:02:be:23:28:c3:ff:5f:78:b4:71:20:2b:60:43:9a:95:d6:
17:8f:d1:bd:58:0d:84:93:e1:e4:68:e9:f8:6d:3f:cf:e3:ea:
75:0c:50:64:e0:4d:a1:c6:7e:d8:83:4f:fc:97:5e:d1:61:80:
bb:e7:b2:6f:05:b4:30:68:2f:02:e1:84:e3:4d:78:1f:14:d3:
ed:25:33:b1:8b:7a:75:d6:63:97:72:34:32:b1:70:36:71:11:
71:49:02:3e:28:5a:35:32:8b:ba:5f:df:bd:5a:82:21:97:a1:
61:97:e5:2a:b1:b4:98:b1:1b:52:2c:ef:5b:a0:03:4e:51:af:
3e:60:b4:48:d3:c5:a1:00:17:2b:76:ae:15:53:62:37:95:eb:
d5:a0:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:25 2025 by rpki-client