Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json)
Hash identifier: tyEOrus3uBHiymbODKNyPTIlaMg1zRnDJ4C+dUDnHzA=
Subject key identifier: 31:FA:AD:17:3E:97:76:94:8F:EC:E6:E5:D1:E4:FD:79:6A:EE:88:0D
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial: 6B73E830E911FFEBBDA1984B42DBFA8F971474BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
Manifest number: CB
Signing time: Thu 30 Jan 2025 03:41:21 +0000
Manifest this update: Thu 30 Jan 2025 03:36:21 +0000
Manifest next update: Sun 02 Feb 2025 03:50:21 +0000
Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: 5Hz3DyrO7wQwpXeRffEbosBkCXLVJDhMxl5XYFRTw18=)
2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: HqoFLqQTCKU4cORLO+ItGdYYwIE+m/xw0UJLEPlmioY=)
3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: tzUv6ZoVBauP5SIKaVDlU1vK/lJ77kKziRyhRQRActU=)
4: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: 8bywDJHpdH0I3nlqj1VD5DYtN7qCcGzBMvEtnFC+d0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:73:e8:30:e9:11:ff:eb:bd:a1:98:4b:42:db:fa:8f:97:14:74:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Validity
Not Before: Jan 30 03:36:21 2025 GMT
Not After : Feb 2 03:50:21 2025 GMT
Subject: CN=31FAAD173E9776948FECE6E5D1E4FD796AEE880D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:d8:f6:2b:a7:0c:18:d2:99:6a:04:66:74:
49:7c:e8:71:15:5c:be:e1:a4:5c:5c:64:9e:ff:8a:
1f:cc:d2:18:c6:61:3a:c9:57:6d:39:9f:7b:57:03:
eb:fd:17:b5:a9:3c:17:18:ac:cb:ec:c2:00:02:e7:
4d:b8:29:9d:e0:4c:7e:f3:ea:bf:01:0a:8b:d2:6a:
90:0a:70:47:82:4b:9b:b6:28:26:07:a0:0f:5c:30:
d2:72:28:e0:ea:8a:25:cb:20:0c:1c:d0:13:3d:79:
cb:37:48:92:b8:86:38:f3:34:78:5d:69:9f:bb:ed:
86:e0:b4:14:92:c6:4f:21:33:7b:e6:f4:a4:c1:ed:
45:03:12:aa:e4:3c:9b:27:ae:89:07:11:32:c7:88:
22:09:1a:44:5d:f5:8d:38:6e:19:80:0c:91:c5:74:
b3:6e:de:4a:8e:80:50:9b:23:ff:d1:41:6e:f1:c4:
a9:71:26:81:77:7e:1a:43:94:90:56:47:b1:a5:f4:
98:67:db:ed:b4:40:3d:3a:6f:8e:a0:bf:12:a3:1e:
92:97:29:9d:0f:cd:29:7a:8c:71:1e:da:31:c8:e5:
75:9c:ed:18:e0:21:2c:bd:35:7c:2f:f7:ac:e0:cb:
c3:00:e2:46:e0:71:dc:8a:37:d2:fd:c3:ce:20:aa:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:AD:17:3E:97:76:94:8F:EC:E6:E5:D1:E4:FD:79:6A:EE:88:0D
X509v3 Authority Key Identifier:
keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:af:67:a2:95:7c:4a:05:ad:eb:0e:ed:08:1e:6e:9f:3f:
d4:6d:43:1c:24:91:3b:6a:20:b4:f6:75:16:53:e9:66:96:da:
2f:31:b5:2f:9a:1f:1d:cb:2c:3b:d7:b9:0e:f9:09:82:63:8e:
93:37:b1:f8:e3:a1:73:a9:8e:2a:b7:2a:7f:82:84:cb:da:10:
99:c9:5f:81:dc:84:3e:55:e7:d4:db:32:8d:24:8d:d5:ba:2a:
45:29:ec:d7:c6:85:7b:38:eb:63:24:70:4b:03:f0:1a:25:b0:
5f:4d:f6:38:f4:37:72:5d:1b:fa:fd:a3:af:75:1b:93:95:61:
1d:56:03:3e:3e:9b:55:97:8e:da:42:cb:52:14:10:24:ba:71:
cb:4d:50:55:4e:19:5f:14:fc:ae:99:8b:3a:9a:15:d1:dc:15:
fa:ac:92:cd:25:e6:2b:e6:0b:c0:90:83:ab:85:3e:54:a3:ca:
82:90:fc:e6:52:63:3c:a1:da:7a:dc:04:38:c1:96:e3:52:a8:
e0:bd:b2:f1:2a:9f:26:14:73:d3:6e:aa:2a:2c:08:f0:74:fb:
bf:2d:e0:dc:31:c0:a0:c8:b7:d6:2a:d2:af:54:db:06:1b:a4:
d2:ad:e1:27:24:9a:ff:f6:16:03:e5:36:0f:71:b7:08:1d:4e:
24:a9:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:06:59 2025 by rpki-client