Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft
File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json)
Hash identifier: 1ZFDF8kRHCX6zf87YK2dSwj+0g+xMTKX5ekSFT04FdU=
Subject key identifier: 30:35:B5:D4:02:CC:B3:C3:4D:EB:95:2F:78:5D:E0:F2:BD:7F:3E:C2
Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C
Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C
Certificate serial: 1FCB269A2EC8771B015C1394E70E0E2FFB917925
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft
Manifest number: 2F
Signing time: Fri 31 Jan 2025 14:02:00 +0000
Manifest this update: Fri 31 Jan 2025 13:57:00 +0000
Manifest next update: Tue 04 Feb 2025 01:08:00 +0000
Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=)
2: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: CdABLeQdDQXFMU9S6HHQsb1NySCB0Fz660iPiNG7giU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cb:26:9a:2e:c8:77:1b:01:5c:13:94:e7:0e:0e:2f:fb:91:79:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C
Validity
Not Before: Jan 31 13:57:00 2025 GMT
Not After : Feb 4 01:08:00 2025 GMT
Subject: CN=3035B5D402CCB3C34DEB952F785DE0F2BD7F3EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:73:b4:a0:73:af:39:43:35:83:a7:09:6e:
50:20:58:26:ed:78:ab:23:a5:3e:2c:fd:ce:c0:1a:
bc:80:80:65:f6:da:10:64:cc:f0:2f:e8:de:11:b4:
48:df:0c:2b:c3:9c:47:29:a4:0d:af:18:3b:a3:dd:
cc:2c:5e:4a:21:94:05:d5:66:b4:8e:8f:81:3b:8d:
54:5f:77:a6:b5:9f:b6:81:b4:ce:5e:a7:37:6e:01:
cf:83:63:56:5c:77:cf:f7:3d:d9:fe:88:41:70:9d:
a7:57:8d:6b:c2:e9:aa:78:fe:b0:91:9f:dc:d9:75:
40:83:fd:f2:6a:77:a6:ba:cd:4c:fb:87:69:7f:98:
06:26:d1:87:1a:49:dd:98:5c:56:06:33:4f:b9:71:
f5:f2:1c:76:ee:1b:37:f9:5f:b1:22:2a:ca:8e:c2:
bc:a9:33:96:7a:c3:cf:61:0b:98:36:a8:42:93:ef:
5f:dc:f8:e5:32:3e:2d:86:17:3b:3f:3a:6e:4f:d8:
1f:83:21:8a:e2:43:87:a9:e9:e0:bd:dd:60:d2:66:
26:75:ba:35:0b:73:77:eb:a0:2b:c3:f0:c0:5d:a1:
7f:ec:79:e5:56:dc:16:24:72:f3:f2:e9:5c:d2:c0:
84:1e:ef:b7:10:c2:04:d0:7a:e7:fa:18:b1:0e:af:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:35:B5:D4:02:CC:B3:C3:4D:EB:95:2F:78:5D:E0:F2:BD:7F:3E:C2
X509v3 Authority Key Identifier:
keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:a6:21:c4:8f:d6:a7:3f:b5:e7:11:17:d5:51:86:53:e9:
42:43:b7:0e:86:4c:2a:8b:d2:31:49:58:df:6b:e4:bb:e9:6b:
31:91:91:e8:6c:1c:30:6a:74:0a:64:90:c0:4b:00:a4:55:d2:
81:9b:15:5e:e3:1a:1c:3b:d3:95:ab:7f:8c:a7:3b:91:03:c6:
c1:dc:78:ed:c5:76:e8:fb:12:52:69:06:d3:b8:36:f7:fa:ef:
ad:db:f7:29:72:2b:fa:c0:b6:b5:c8:65:7a:6b:b5:11:ee:2d:
e4:ea:4a:bf:58:d9:b8:c8:f8:63:44:0a:0a:ae:f6:cb:5d:4f:
00:d4:04:c8:4a:e8:20:74:84:b6:dc:7b:7d:73:c3:5a:f4:bf:
64:1f:3e:33:ba:15:e1:ff:d8:aa:da:87:b9:29:06:f7:dc:c6:
0d:c1:bd:da:ab:54:7b:b0:3d:2a:55:7e:38:26:51:b9:39:82:
50:9f:a5:96:ef:54:09:72:fb:62:18:3f:c5:cd:bf:47:9e:53:
d4:cb:a4:73:70:ef:ed:cf:2e:fc:a4:af:c0:d8:c1:23:01:17:
a5:2d:e8:ca:ae:3a:18:18:ad:6b:98:4c:db:c7:b6:2a:9f:00:
bc:37:fb:fb:3a:7c:3e:88:77:d4:64:b5:9d:c3:c9:1f:8e:02:
fb:e8:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:13 2025 by rpki-client