Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft
File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json)
Hash identifier: D4LpdTuC5v0cbBDbLEf3W47dZthD5XDUMm2heppxeMk=
Subject key identifier: DD:6C:28:69:76:BD:A0:01:E6:EF:17:EB:95:CB:B4:FE:91:70:67:28
Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E
Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E
Certificate serial: 6E3CA9145F5B1519BB015FFFDF4A88FFB32C540A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft
Manifest number: 01A3
Signing time: Fri 31 Jan 2025 02:00:37 +0000
Manifest this update: Fri 31 Jan 2025 01:55:37 +0000
Manifest next update: Mon 03 Feb 2025 10:43:37 +0000
Files and hashes: 1: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: OYg7qAhuryoyd0ZPI/hBmw2iC9UdebHt/rrBQ3eUY0k=)
2: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: 4Ftajlvx/eVFdjwrxBe2Y5JM/Mjjs+bGXdo7Q/mfmvk=)
3: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: 38zyMiXyq6nG2TpP3RHQtTZp/Prc/SSkc2ejtqKw9zs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3c:a9:14:5f:5b:15:19:bb:01:5f:ff:df:4a:88:ff:b3:2c:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E
Validity
Not Before: Jan 31 01:55:37 2025 GMT
Not After : Feb 3 10:43:37 2025 GMT
Subject: CN=DD6C286976BDA001E6EF17EB95CBB4FE91706728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:2b:cd:b5:c4:29:8d:dd:ae:bd:17:03:89:
c1:b9:72:7e:f9:bc:d6:36:07:2c:23:cd:e8:81:0d:
9e:83:da:bb:96:59:7e:d3:ea:cf:23:c0:38:46:fb:
49:72:e6:7f:91:66:e5:8e:57:14:55:0b:d9:8d:8d:
45:f8:77:08:ae:e1:83:98:30:cd:b2:fa:ba:bd:95:
45:f9:06:16:d0:55:fe:ad:cb:97:8d:f9:b0:58:e2:
23:de:f6:87:e7:e7:79:07:86:b5:2d:9a:81:93:31:
67:55:c9:24:33:7c:0b:84:ce:81:ed:ab:fc:05:e8:
d4:cd:59:ad:a4:5c:5d:d8:9a:12:79:05:1e:fa:a3:
fb:fe:df:88:86:65:01:27:e7:6b:81:03:a6:fe:70:
5b:d7:14:4e:3c:af:d8:23:bb:1f:30:d0:9d:2a:31:
58:31:67:51:ad:fc:56:74:b5:9f:82:24:d8:02:ea:
b2:74:93:d7:3f:8d:f0:c5:3c:6e:2a:31:29:4c:af:
60:d1:59:f8:d2:c9:e8:30:53:c7:ad:95:16:39:cd:
d5:f9:22:33:22:f6:21:80:8d:d5:9c:25:ea:54:19:
34:44:ec:78:7d:63:6f:32:34:de:d7:30:cd:a6:0b:
ad:fc:d6:03:a7:f6:3d:fc:ec:43:97:30:d0:7a:be:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:28:69:76:BD:A0:01:E6:EF:17:EB:95:CB:B4:FE:91:70:67:28
X509v3 Authority Key Identifier:
keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:05:6a:b5:90:f2:24:0b:6a:9b:05:f9:16:23:3b:8a:c1:d2:
2e:cf:53:eb:3e:82:9b:51:b1:cb:5a:5b:8a:0e:05:d0:05:e4:
68:77:72:80:de:c3:a7:9a:54:67:cb:11:80:47:44:4b:7e:51:
6c:9e:ae:f7:c5:13:ba:aa:4c:3c:94:6b:15:bf:5a:a2:1e:78:
c7:1f:26:da:2f:37:d3:c5:c9:5d:c1:ec:1c:3e:65:8d:e3:fb:
77:71:4f:e0:3b:c4:58:15:1e:80:80:06:77:55:67:c6:32:2a:
34:1c:bd:0f:f5:14:b8:93:a1:42:3b:34:e3:a2:b2:0e:1b:f5:
6b:97:5e:57:dd:b6:53:4d:7d:3d:92:cf:1e:c9:a4:5a:ab:87:
5a:a1:76:45:2e:2a:8c:51:04:99:3b:49:21:b8:d8:de:17:65:
b6:2f:bc:65:90:a0:93:36:94:d8:cf:70:e9:74:ec:62:b2:7b:
a1:bd:8b:64:b7:b1:d8:36:c0:3d:83:f9:53:06:b0:d3:ae:94:
0e:42:80:e5:a9:ed:c2:78:16:be:47:4e:f0:fc:85:13:3a:27:
15:5d:c8:ac:4e:c4:87:ba:2e:d6:61:e3:63:d9:b2:87:9a:3a:
08:d9:46:22:35:88:e0:e5:50:d8:d3:89:08:fa:02:0d:78:ba:
ad:bf:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:08:08 2025 by rpki-client