
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json)
Hash identifier: b4/TkVchQlaqSmS8S0xyPZjE5ZIbg1h1LR6rZ0FJuQU=
Subject key identifier: 31:A4:8A:B7:34:67:4B:FD:57:B6:F3:ED:CD:F9:34:A3:E8:DE:D2:D6
Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Certificate serial: 05E2F845D0F5FBF9C4A032D66DF843DA84DFE24B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
Manifest number: 0323
Signing time: Fri 31 Jan 2025 13:32:06 +0000
Manifest this update: Fri 31 Jan 2025 13:27:06 +0000
Manifest next update: Mon 03 Feb 2025 22:08:06 +0000
Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 0C8pRCsymjTTrJFNZEJzyFd4IOGqdzBKqs9DQmpJI/s=)
2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: eK77vrCG0jnVjqjlvDNz1P7SyegRM25EwO1iKtwo7Ps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e2:f8:45:d0:f5:fb:f9:c4:a0:32:d6:6d:f8:43:da:84:df:e2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Validity
Not Before: Jan 31 13:27:06 2025 GMT
Not After : Feb 3 22:08:06 2025 GMT
Subject: CN=31A48AB734674BFD57B6F3EDCDF934A3E8DED2D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:69:eb:e6:f0:12:e3:4f:b7:71:17:17:05:
d8:0b:29:cd:67:4f:64:39:d7:ca:22:cb:b9:c6:37:
3e:28:73:a7:23:42:e5:d2:7e:73:e1:db:2d:09:ac:
74:f9:d5:2f:f2:36:de:a6:32:14:07:12:56:43:88:
07:31:a2:8f:32:3a:a9:1f:a5:53:f5:c0:9d:f6:1a:
a8:11:f5:6b:75:64:d5:ed:f8:36:af:ee:9e:ec:b8:
27:5a:f6:f9:7d:96:6f:1f:f3:b3:41:80:5a:c9:90:
8b:7c:19:49:a0:86:3b:5c:e1:05:d0:01:09:86:11:
2b:49:6e:90:2c:92:70:bb:0d:a1:65:c2:d2:14:16:
a9:25:5d:ab:0f:68:27:99:8f:67:e6:64:b1:8c:bf:
ab:da:0e:c3:fb:03:59:c3:88:a8:60:60:5a:3c:fc:
f4:ff:5a:9f:6e:e4:ee:bb:b4:fd:ed:fa:cb:0b:fe:
b4:97:b3:53:42:01:2d:f0:db:03:c3:fd:f6:5d:d5:
da:a4:6c:46:0a:cd:5a:6e:2e:b9:b3:7d:31:c7:b5:
68:22:71:98:2f:cf:73:4a:8f:08:c0:c5:c4:e8:8d:
f3:80:49:31:29:7c:9c:9c:89:4e:78:76:36:be:26:
4f:12:c8:b9:8e:63:88:db:ea:f0:0c:d7:a2:3a:b0:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:8A:B7:34:67:4B:FD:57:B6:F3:ED:CD:F9:34:A3:E8:DE:D2:D6
X509v3 Authority Key Identifier:
keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f8:a3:8d:88:95:d3:8c:b6:49:89:11:42:47:88:4f:c4:85:
62:23:08:fe:2a:95:71:74:d3:7d:d1:12:20:2c:d4:90:91:6c:
a1:3b:30:6d:23:97:72:8b:1c:95:23:70:e8:58:45:f9:d6:b2:
fd:b1:4a:8b:6b:e0:a9:4b:83:81:af:94:77:74:21:fa:cb:2f:
d3:fd:09:6f:52:1f:93:1b:53:a8:78:b2:85:67:8f:11:00:ef:
72:8b:06:ea:e7:49:9f:8f:09:00:7b:c6:94:44:32:52:85:de:
cd:bf:32:25:b5:a5:ee:c9:fb:65:eb:6c:17:55:74:4a:2b:13:
25:7d:91:68:99:af:6a:0e:31:0d:75:9a:b8:0d:27:1a:f0:aa:
17:3a:2b:68:c0:c9:00:54:9f:11:04:9b:6c:f8:2f:28:27:b8:
4f:fe:36:83:e5:52:d5:35:3f:15:26:70:30:d0:dd:ad:6b:c6:
b7:41:1e:cd:d6:37:de:e2:66:f6:32:83:36:c6:6b:a6:d2:74:
d0:12:b3:a6:2a:df:1c:27:c6:ea:f0:41:cd:20:5c:3b:17:0c:
ea:85:6e:e5:7e:d5:bf:18:83:fb:23:a2:67:32:9e:f0:0b:1e:
a0:3d:bb:14:1b:e3:a1:a3:cb:42:5e:6f:89:f4:4c:93:2b:74:
5c:53:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:58 2025 by rpki-client