Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json)
Hash identifier: S5xwSNtMAcW3vK+sxCJ9oHet2ye8BtXnfYaQOAbDwFM=
Subject key identifier: C8:09:B7:53:BD:3E:A7:47:60:60:20:E1:0D:74:D6:92:2E:E4:7C:D7
Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Certificate serial: 25F3119C499733F5E42172DB8198FC6571528F82
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
Manifest number: 04A5
Signing time: Wed 29 Jan 2025 22:01:56 +0000
Manifest this update: Wed 29 Jan 2025 21:56:56 +0000
Manifest next update: Sun 02 Feb 2025 06:16:56 +0000
Files and hashes: 1: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: 9aiJeF03F2zpo2d6gqr5nHFtBKsclixQaw3tnWJ265E=)
2: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: Zdb9MSg3ovXrlsn9s5JQ1VY2vhM2B+QO2J/dGUtVcsc=)
3: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: GQLjyzqSeaPMpwbmMG+hHOVIX1kxT3fObGtrds/C+9M=)
4: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: 8FHuasztaiBgjf8vTeP7NOsj9KO7tgGptX2jJQvDg4Q=)
5: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: rsfdocyFpYgLX4xY5BrOVq+dYwcQsrSghMZpqpv7JCY=)
6: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: aK01biYenKLezQd1JYxPRvNKJKDZxGCWS84l0P9T/2k=)
7: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: iRjHonxZNqRpHeZ0vSjogTmxhWUG8ZWyfMHmIt7qmdQ=)
8: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 1UvdjpJuUo4STbRNQdq27HbHQCfkWFnoyv90N7kJ1CM=)
9: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: 2PTof7HgDvQH3uMSjoYHvBJnE/tgljHy1CUnxbc2tLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f3:11:9c:49:97:33:f5:e4:21:72:db:81:98:fc:65:71:52:8f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Validity
Not Before: Jan 29 21:56:56 2025 GMT
Not After : Feb 2 06:16:56 2025 GMT
Subject: CN=C809B753BD3EA747606020E10D74D6922EE47CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:c9:7d:3a:89:ef:84:49:fb:f2:b8:52:ac:
d7:38:0f:0c:d8:a3:5c:ea:7e:a3:29:73:21:2e:2e:
37:ef:25:fe:53:39:9c:48:6c:90:10:32:54:43:d7:
33:a3:eb:38:ce:72:d6:ba:62:9a:92:9d:cf:ab:64:
06:92:a6:6a:34:5b:f9:65:c5:83:a1:76:b9:91:ad:
6a:b7:75:3e:ad:f2:7d:41:9b:2e:68:47:1d:6b:e2:
4c:c8:82:04:b1:9b:55:8b:57:60:1a:25:44:f1:97:
24:b3:9c:fb:a1:69:6c:ae:5a:0c:f2:6a:8d:95:c7:
c2:9e:41:c1:07:02:a1:ac:bd:b5:45:58:a0:65:45:
46:d5:26:db:f5:59:c5:b2:c6:93:8e:9d:e0:fd:80:
dc:aa:21:40:40:fd:54:5b:17:f6:e0:dc:a1:95:9e:
50:f0:b9:65:39:ae:7a:e4:c4:29:38:8b:c4:e5:33:
a8:5d:81:4d:81:b2:66:78:2a:4f:3a:df:88:4d:7d:
e1:ca:2f:43:53:18:e6:39:ca:2d:75:f3:8a:01:1e:
22:2b:90:fe:b6:88:0b:cb:2b:13:8c:2e:15:61:fc:
15:e2:f2:c5:09:69:92:97:e9:00:76:1a:92:bc:7d:
ca:1c:c1:6a:93:be:0f:1b:97:e5:ce:26:a4:2f:0c:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:09:B7:53:BD:3E:A7:47:60:60:20:E1:0D:74:D6:92:2E:E4:7C:D7
X509v3 Authority Key Identifier:
keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a1:2f:b3:47:40:70:db:8e:68:23:1d:1c:5c:22:0c:52:de:
9e:77:32:38:13:0a:03:fb:6e:07:46:0b:08:72:cc:66:62:78:
22:57:52:56:fe:3d:53:e1:e8:2d:d4:f9:7c:4b:c2:e3:41:cd:
01:2f:1a:a8:38:bb:61:d5:20:15:8f:d8:8c:39:5d:ba:00:41:
93:ba:8e:62:ac:41:21:59:07:2b:e2:c4:23:41:24:b8:35:20:
20:06:cf:db:5a:0f:63:35:66:2f:bb:b6:cc:84:d2:c4:50:3a:
d9:b0:5a:00:b0:21:2f:79:8c:33:db:eb:9b:8c:53:24:a2:2b:
df:0d:a1:73:84:41:bb:63:19:b6:d7:68:bc:0a:e3:8d:6c:ad:
27:7e:b2:00:fd:9f:c1:8c:0a:2e:56:8d:ae:b9:38:b8:f2:9a:
8c:69:07:23:07:34:3e:7b:ff:ad:1e:92:f9:d5:f5:f5:69:1a:
d0:09:d2:df:d8:86:1f:c5:05:58:ee:c0:12:27:76:77:8c:16:
29:d9:9f:76:d9:a9:54:e6:85:30:ea:b9:f6:ad:1b:cf:35:38:
e6:c9:60:38:46:bc:13:80:4d:c0:6a:0b:ee:e3:b7:ca:1e:cd:
4b:bc:25:12:cd:20:b8:ef:5e:42:c1:df:12:05:2d:00:32:83:
2e:5f:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:32 2025 by rpki-client