
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json)
Hash identifier: 7VCVPj3YwC0htbHQcBEAEgol3ZC3J13I7Pa/1bHMS7s=
Subject key identifier: 13:10:9C:17:37:84:E0:19:D8:87:0E:31:00:1F:83:C8:0A:4F:80:7B
Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Certificate serial: 448D25349BBD2D3D3A7D771F5A62DC20B3B3442B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
Manifest number: 33
Signing time: Thu 30 Jan 2025 10:51:20 +0000
Manifest this update: Thu 30 Jan 2025 10:46:20 +0000
Manifest next update: Sun 02 Feb 2025 15:32:20 +0000
Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=)
2: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: LprDaP1gZ1bG9gDsFxFWqIonpec4+jOngRkD0oHI7wA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8d:25:34:9b:bd:2d:3d:3a:7d:77:1f:5a:62:dc:20:b3:b3:44:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Validity
Not Before: Jan 30 10:46:20 2025 GMT
Not After : Feb 2 15:32:20 2025 GMT
Subject: CN=13109C173784E019D8870E31001F83C80A4F807B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:6f:15:4d:a4:bd:2a:6c:22:a5:ad:17:97:
27:9c:d1:15:97:a0:09:0c:36:a4:e7:2e:60:31:1d:
d1:19:d5:8a:64:19:f6:60:11:98:e5:95:a0:4c:7b:
74:8b:53:88:6d:74:5c:5d:1e:87:e6:09:94:4b:1f:
b7:e5:97:64:90:0b:a2:c6:0f:9d:f0:0c:c9:a7:10:
5c:ff:8f:94:f5:1e:6a:a8:6e:13:30:71:84:53:dd:
f8:14:bd:7d:3f:5f:0d:9b:be:74:d0:7e:8e:5f:30:
61:17:1b:2f:b7:c4:12:37:92:ad:05:41:27:b5:f5:
41:fb:1c:20:30:d1:cd:f7:ce:ec:e9:c4:03:24:c7:
f3:c3:d3:00:e5:36:83:a1:ae:73:81:39:3e:e4:07:
13:be:ca:ce:f0:2b:7a:59:37:dd:5f:ae:3e:fe:eb:
e0:dd:ab:e1:b7:ae:ae:a3:0d:0d:e6:c3:97:f3:7a:
20:4e:05:f5:3e:89:8a:51:fd:12:e9:94:16:22:56:
6b:8d:e0:08:fb:65:62:97:03:80:e0:1c:30:02:ab:
97:44:70:8c:f3:2a:95:cc:d8:be:51:40:47:d3:8c:
1d:49:56:24:5f:ad:7a:c4:5e:33:20:23:23:d9:1b:
d9:99:d2:5c:f8:dc:ef:39:dd:8c:63:01:1c:42:c1:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:10:9C:17:37:84:E0:19:D8:87:0E:31:00:1F:83:C8:0A:4F:80:7B
X509v3 Authority Key Identifier:
keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:02:cc:b4:ce:b7:e3:62:c4:5d:3f:c4:48:19:9d:6b:d9:
25:c3:ec:05:ad:9f:9f:72:cb:36:09:c2:9f:a1:b3:91:a6:ec:
af:db:d8:b9:45:19:a9:f7:2d:50:fd:07:ad:15:be:36:d0:36:
2f:b8:c2:0a:40:0d:8f:88:0d:02:8d:67:a1:c1:a4:b1:58:2c:
e6:0b:82:c3:14:55:eb:f1:50:e5:4d:7f:89:c7:3a:6d:03:cd:
80:5f:b8:56:81:a0:c6:c3:01:ac:8d:ec:ae:3c:b7:0e:d8:cd:
6f:b9:0f:a7:59:78:00:e6:06:2f:cc:ed:7c:99:b3:f5:62:c8:
2c:e2:a5:11:77:3e:d0:99:8b:7b:40:b4:6e:99:7d:fe:d5:55:
66:f7:46:ca:4c:af:fe:45:c0:46:24:85:87:96:35:aa:7e:5a:
95:77:ab:77:e1:86:23:b0:d2:d8:d2:86:7a:25:61:19:ff:71:
09:89:a5:d9:af:9b:c1:d7:3f:93:3a:bd:09:fe:aa:db:4a:e8:
cf:42:93:7c:08:12:f6:02:34:43:5e:68:ca:59:54:d7:69:99:
8d:80:82:04:67:ef:9e:c7:cb:2a:88:69:1c:55:d2:93:5b:72:
89:15:2f:e0:74:e2:e3:9d:ee:24:23:c1:ae:0d:fa:49:88:75:
d1:12:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:59 2025 by rpki-client