Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft
File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json)
Hash identifier: cGxDeXXErBTVKnnqRq7L/15LiWQxNsfong06H0oZ9rg=
Subject key identifier: DB:FF:5F:DB:97:EF:3D:EC:E7:73:C6:F9:75:F4:24:B4:B9:83:5E:7C
Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22
Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22
Certificate serial: 30284A6E2AF23A6AFE5B894E489EBB2D87B09D8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft
Manifest number: 018A
Signing time: Wed 29 Jan 2025 20:41:04 +0000
Manifest this update: Wed 29 Jan 2025 20:36:04 +0000
Manifest next update: Sun 02 Feb 2025 07:26:04 +0000
Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: S0XNuCJ0ClIVbPAh2SoO9/dqAfZW7iXGuANvdc/PNhw=)
2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: yZTOcXBkGCXgKprLwFpmf211S49vRO43pg0K+2x6c9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:28:4a:6e:2a:f2:3a:6a:fe:5b:89:4e:48:9e:bb:2d:87:b0:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22
Validity
Not Before: Jan 29 20:36:04 2025 GMT
Not After : Feb 2 07:26:04 2025 GMT
Subject: CN=DBFF5FDB97EF3DECE773C6F975F424B4B9835E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:4c:3e:e7:f8:03:fb:54:ec:1f:0b:a4:e6:
7c:ab:57:2a:d6:3f:96:b7:59:f2:dc:22:7f:89:8f:
d3:3a:31:21:aa:8e:fb:ae:ff:d1:42:00:3b:9e:82:
cf:dd:69:09:b7:2b:7f:21:b6:45:25:48:d6:06:2f:
b6:46:9e:e8:af:45:ff:b1:4e:22:69:9f:5b:35:d4:
cd:02:5f:24:b0:c5:be:8e:5d:6c:cc:ab:09:95:d7:
dd:0f:ba:e3:24:f2:07:46:de:56:cd:1d:eb:12:41:
fd:8d:3d:e1:30:84:d1:40:8e:ee:5e:26:90:a9:c6:
21:38:37:b3:fd:af:0c:92:e0:7b:8a:ec:b1:6f:a3:
11:17:cd:b0:b0:f0:01:1a:d4:90:d8:b5:8e:b1:a5:
72:b7:7f:3b:79:09:6f:14:6c:51:f0:58:16:3b:8e:
7b:75:54:ee:af:08:d0:76:17:15:94:b4:4d:fc:03:
97:bd:89:d2:3b:e3:bc:96:d6:ba:a2:8b:20:05:a8:
ff:b9:75:fe:e6:62:02:ba:af:63:a6:57:96:a8:4c:
8e:c6:b9:a2:1c:7a:ea:d6:47:04:e5:44:c6:82:e8:
17:40:5d:71:f8:11:00:57:16:9e:4f:bd:77:45:3a:
28:31:0c:37:0b:1b:54:7c:aa:b4:b0:01:b4:b4:3c:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:5F:DB:97:EF:3D:EC:E7:73:C6:F9:75:F4:24:B4:B9:83:5E:7C
X509v3 Authority Key Identifier:
keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:a4:8d:f9:40:50:bb:f2:1f:c5:bf:6c:03:a3:65:e6:92:
27:a2:97:d5:40:c9:10:38:04:c6:f7:13:6e:5e:d0:81:d2:73:
8e:5b:77:2b:9f:35:bb:96:d6:ae:6a:a0:9a:64:88:ab:fa:e3:
99:88:81:6d:05:05:c0:da:a1:e4:d3:08:26:30:2d:b6:77:46:
d4:1a:3b:f2:31:4b:c5:26:89:51:5c:ec:94:07:31:d6:a0:49:
6b:b8:9d:fa:47:f2:63:38:98:61:f4:20:3a:58:30:06:a6:2e:
17:b1:18:60:05:75:4c:1b:88:60:24:2b:8d:6b:50:c4:fd:a4:
82:f4:85:59:2d:12:5f:78:0b:2e:54:2f:26:a1:e8:04:8f:2f:
90:2e:d5:f0:e4:aa:33:07:49:04:b6:37:88:4b:0e:e9:1f:2c:
86:39:bf:43:7a:4c:1a:01:91:e8:b4:38:6a:cc:9d:5f:00:ac:
26:51:ff:de:4b:aa:ed:55:10:ee:d1:cd:64:c2:ed:14:43:ec:
c0:83:6d:89:9f:bf:53:34:4f:e8:6e:12:70:c5:35:11:30:98:
a5:be:4b:eb:d5:81:a3:0a:f6:92:0e:da:c4:a6:4c:56:ee:35:
32:4c:da:4f:a6:a3:f5:c7:84:cf:7d:a2:e4:79:4c:f4:7d:44:
5e:7a:eb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:23 2025 by rpki-client