Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json)
Hash identifier: 5Q33dsB8NwTwMCPZ70MiT3JRWNAEcCGp8tIrX/en6lY=
Subject key identifier: 7A:34:D8:3A:77:90:07:82:A6:DE:87:40:3E:21:2C:54:73:F3:D2:0B
Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2
Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
Certificate serial: 71BA799497118A4F715A2231B12336E7B40A5E73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
Manifest number: 035D
Signing time: Thu 30 Jan 2025 18:11:08 +0000
Manifest this update: Thu 30 Jan 2025 18:06:08 +0000
Manifest next update: Mon 03 Feb 2025 04:10:08 +0000
Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: WSTz5ogr3h2jPOJvkikKcIkFynOkdUVZnpcINI4dCbg=)
2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: aSJRxiwfzwmlmtJC0KTLu/JJWqKQRrQQ+76kQCk1R8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ba:79:94:97:11:8a:4f:71:5a:22:31:b1:23:36:e7:b4:0a:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
Validity
Not Before: Jan 30 18:06:08 2025 GMT
Not After : Feb 3 04:10:08 2025 GMT
Subject: CN=7A34D83A77900782A6DE87403E212C5473F3D20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:79:00:be:ac:0b:3f:82:d1:31:9d:61:b9:
b9:e7:bd:75:5f:cf:dc:29:0c:7a:c6:cb:8e:36:85:
ec:16:b4:10:48:01:ff:f8:66:07:0c:6d:ae:44:d4:
c7:7e:5f:df:f5:74:59:31:f0:d7:2d:6c:c7:ef:99:
6d:8c:cb:70:41:ef:22:1a:b3:11:e5:2c:69:c0:f5:
a8:7a:fe:9a:51:f5:cf:68:83:49:c6:2d:f2:11:98:
7e:73:7b:1d:db:ee:11:e0:b7:3a:5a:7a:9e:00:19:
53:28:94:e1:b4:16:05:c2:27:43:04:8b:c9:15:4f:
9f:e7:95:45:72:3e:ce:0c:a6:c5:8a:ec:bc:71:47:
81:84:1e:77:d0:63:3c:e8:a4:6e:8f:55:a6:ee:73:
16:9d:b1:b3:f1:f0:2c:43:57:94:54:01:5f:cf:52:
fe:2a:e6:e0:d5:d4:17:d6:73:8c:10:20:c8:ba:7f:
de:6b:b9:69:a2:90:3e:56:f2:6d:13:2f:eb:b9:16:
e8:ae:f0:5e:62:75:f0:84:5a:1d:8d:33:fd:a1:60:
de:da:01:ff:1f:53:bb:ec:c4:0b:32:f0:41:11:4f:
d2:1d:ca:0b:c7:2a:ee:c7:12:c9:19:28:37:3b:a7:
dc:78:ba:06:92:bd:f3:94:38:e6:c5:95:90:2c:9e:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:D8:3A:77:90:07:82:A6:DE:87:40:3E:21:2C:54:73:F3:D2:0B
X509v3 Authority Key Identifier:
keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ae:60:d2:26:e2:61:27:6c:af:0f:67:cb:21:ec:f2:2e:ca:
01:9a:16:91:32:c4:a2:87:94:53:f9:bc:53:24:ba:d3:6e:d2:
8e:ca:03:c6:46:c5:c9:65:36:c5:a6:59:3e:f7:ac:72:b6:ce:
b9:3d:35:c3:b1:f2:7d:d9:39:27:05:14:a5:00:0e:43:b1:95:
87:98:89:74:a2:19:c4:07:52:75:b5:30:2e:ee:cb:6c:c6:c3:
de:a7:67:8b:94:6f:75:c5:39:57:85:d4:17:5c:ae:49:a6:4a:
e8:0f:39:39:23:f3:13:c7:18:5d:29:83:06:15:a1:bb:d3:61:
0a:f2:64:5d:bc:ce:a2:fd:55:1f:8f:a9:74:ab:3a:80:c4:4a:
a0:15:6d:b6:84:17:62:29:68:3e:82:88:17:bd:a8:f3:5c:5d:
d4:7d:91:60:29:56:85:48:ad:66:c9:f9:a4:46:93:d5:8a:82:
fe:5e:65:99:af:e3:b0:32:52:17:a6:9c:78:43:20:a7:60:d4:
e0:78:72:5a:de:b6:d5:1c:2b:bc:99:b1:bc:ca:64:d1:16:b6:
77:b9:6d:32:b1:63:38:a5:b1:61:b0:06:ac:88:da:ac:bd:2f:
8f:49:de:09:98:63:cd:fb:2f:df:f7:58:70:fa:6d:bf:c8:85:
86:41:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:35 2025 by rpki-client