
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft
File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json)
Hash identifier: Y2KXZwn7adaR8LI9FPJ/1ZucMyXY5XumcP+wpW5u0IM=
Subject key identifier: 3E:0D:91:37:28:21:87:92:8D:F3:70:A6:ED:5B:C2:C5:2A:68:68:A8
Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F
Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F
Certificate serial: 4408A130C6C1A8892D7C83C4077A1A921388E56F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft
Manifest number: 0168
Signing time: Thu 30 Jan 2025 23:10:43 +0000
Manifest this update: Thu 30 Jan 2025 23:05:43 +0000
Manifest next update: Mon 03 Feb 2025 04:13:43 +0000
Files and hashes: 1: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: CkxDKmPgjCnb1AbBB4f32fmjNY+69gPOWAu0xvaQ2Sw=)
2: 3130332e33312e3131382e302f32332d3234203d3e20313530323633.roa (hash: 9DtyQOYPh7GLf+XRfVmsdw0aXiZ8+Ri4mucHCX341ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:08:a1:30:c6:c1:a8:89:2d:7c:83:c4:07:7a:1a:92:13:88:e5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F
Validity
Not Before: Jan 30 23:05:43 2025 GMT
Not After : Feb 3 04:13:43 2025 GMT
Subject: CN=3E0D9137282187928DF370A6ED5BC2C52A6868A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:cc:b6:ca:5d:1b:59:d2:56:40:7e:d2:b8:
db:88:f0:c0:2e:21:e0:b6:0a:c9:c4:f3:d5:31:8d:
7e:4b:64:e2:d5:b6:51:6f:8d:44:91:4e:9c:2e:b2:
90:8e:a4:f1:2c:6f:81:61:d6:24:1e:16:b0:d3:ea:
f1:8d:06:2a:8f:17:f6:89:2b:a8:05:7f:72:eb:2d:
6e:72:59:e4:32:bc:62:d7:80:4f:ea:4d:d1:5f:eb:
4c:ef:42:db:3b:44:84:a9:56:78:31:e6:3c:81:f3:
3b:b9:88:bb:63:95:04:ed:e3:d3:3a:af:1c:92:1e:
6e:58:20:99:8e:be:ae:ab:9d:ad:cf:fc:b8:4a:28:
96:35:b0:52:51:1e:be:17:78:66:75:b4:5e:96:d1:
a3:82:73:e2:7f:bb:68:91:74:b6:9d:dd:57:64:5b:
31:8e:5a:89:10:19:31:6e:80:16:15:3d:3c:4d:ef:
7b:1d:61:59:2b:39:7e:01:4a:10:e6:72:ee:e1:25:
68:da:8a:e0:82:e3:6e:c7:9d:54:83:76:5e:b1:11:
7d:cb:04:00:24:ba:26:65:2d:5e:5d:19:19:61:08:
f1:a1:d6:97:ce:f9:b7:59:07:ce:d8:5d:65:3c:63:
46:89:a6:1d:75:53:49:d7:00:d1:5f:bc:06:ef:e6:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:91:37:28:21:87:92:8D:F3:70:A6:ED:5B:C2:C5:2A:68:68:A8
X509v3 Authority Key Identifier:
keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:8c:f0:01:22:df:a4:17:2f:26:12:a9:cb:cc:71:67:07:
de:81:c9:97:ab:b1:20:43:44:9b:7e:d7:72:96:d9:4f:82:ef:
64:88:36:4d:d8:87:9d:55:b0:ad:04:15:7c:f2:86:66:4d:b1:
28:cd:6e:c5:e1:ce:ca:40:8f:f7:70:60:e8:02:1c:34:95:5f:
e6:5b:b0:b5:cc:3d:b5:4b:a3:2b:24:5d:d8:0e:0c:30:0e:c4:
25:3d:30:79:e6:d4:aa:27:62:3d:4b:50:11:fc:e9:67:55:39:
29:99:98:13:75:7f:2f:f4:a9:a3:20:87:05:6e:00:6d:d8:8a:
ab:9d:22:11:9d:ff:02:2e:2c:6f:fa:08:0c:ba:4a:5e:a8:27:
a7:d3:ee:69:c6:f8:f3:84:e2:24:e9:b6:12:9f:86:f4:7f:b1:
ae:34:99:66:79:d4:8b:d7:8c:0d:d5:64:b1:08:b3:1e:ff:3e:
5c:66:78:48:50:0c:42:5f:1f:9c:e5:7f:aa:a4:a0:40:47:f3:
0b:a9:0a:85:36:e8:b2:4c:1d:6e:5c:9d:42:60:29:cb:78:f0:
6f:8e:62:08:48:ca:0d:79:15:ad:f6:aa:e9:4c:fb:79:d8:d7:
1e:e7:4b:a9:1c:c6:73:2c:41:d9:f2:e5:59:9f:f9:84:9b:77:
41:09:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:02 2025 by rpki-client