Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json)
Hash identifier: 3Tyyk4YshdNkxZw2/TadHcJUkdgFWfDrGlgNSMjwM68=
Subject key identifier: BA:3A:5C:17:1D:31:9E:38:C4:E9:04:3A:5E:3E:D8:5E:05:27:D7:12
Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Certificate serial: 68AB72B495004761FD34A3FD6EC1F56E519A12EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
Manifest number: 033C
Signing time: Sat 29 Mar 2025 02:32:07 +0000
Manifest this update: Sat 29 Mar 2025 02:27:07 +0000
Manifest next update: Tue 01 Apr 2025 10:36:07 +0000
Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 0C8pRCsymjTTrJFNZEJzyFd4IOGqdzBKqs9DQmpJI/s=)
2: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: K+JdCoW2Am8AQkDFth/JzQn5GqqNkiyXmoduDq6Aupw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ab:72:b4:95:00:47:61:fd:34:a3:fd:6e:c1:f5:6e:51:9a:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Validity
Not Before: Mar 29 02:27:07 2025 GMT
Not After : Apr 1 10:36:07 2025 GMT
Subject: CN=BA3A5C171D319E38C4E9043A5E3ED85E0527D712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:d9:fd:6d:d4:75:56:1d:37:52:f2:a2:38:
a1:ed:f0:3f:b8:25:10:51:0e:a5:48:23:b1:74:65:
1b:c0:d2:4c:3f:1e:94:dc:11:86:3f:ad:71:7b:44:
fd:dc:d9:dd:24:17:65:e9:ff:c1:39:43:5a:c2:d2:
36:ad:91:e6:76:8a:d1:f3:24:77:b3:81:55:a3:3d:
56:bc:8b:e1:ea:e7:e4:9a:9f:70:30:1b:ce:2b:ae:
01:2b:6e:76:9d:80:e1:4e:a7:d4:b5:90:5b:a6:38:
fc:84:71:6c:e9:71:31:37:ae:01:9b:79:f8:2f:07:
28:b1:e0:8a:cf:db:01:99:e8:0f:4b:5d:a8:33:08:
b5:d6:78:6b:d3:b4:91:7e:54:db:a5:30:b3:9a:f9:
e4:ba:ca:c7:b0:e3:30:8f:a8:04:f4:95:82:87:76:
78:3b:07:ba:c2:3f:f7:bc:27:40:1d:21:22:c7:54:
96:1c:71:48:7b:66:f7:ff:64:e4:2e:41:f7:13:78:
b5:2e:ad:c0:99:06:81:cf:d9:c7:91:1d:ae:60:fd:
fd:3e:65:4d:03:d7:f3:b9:32:b2:62:2c:0b:40:75:
ce:bd:8f:4e:79:f1:d6:27:b7:66:cc:c5:c9:18:48:
dc:b3:ae:2b:b6:13:62:69:98:37:0e:f2:e7:b6:30:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:5C:17:1D:31:9E:38:C4:E9:04:3A:5E:3E:D8:5E:05:27:D7:12
X509v3 Authority Key Identifier:
keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e4:7f:ff:03:e9:1e:42:1b:c7:b2:d7:bd:6d:73:94:dd:c3:
85:ae:f3:c2:4f:78:50:de:8b:88:4a:f1:19:dc:17:a4:06:5c:
ec:2d:0b:61:53:3e:25:ad:ab:da:b5:f8:0c:f7:4c:9f:2c:a4:
eb:32:77:ed:e6:33:ca:3e:3e:92:4a:4e:6c:e0:80:48:bc:bf:
eb:21:79:c2:9a:5a:b8:e8:3e:f2:8d:36:6a:ad:9c:4b:c0:df:
c3:ec:bd:bb:23:7f:8d:2d:67:f2:0a:2c:18:f3:b5:84:ac:3b:
a8:15:0a:8b:16:52:da:a7:dc:1e:1a:44:27:cf:3f:17:37:38:
77:6a:15:8b:62:70:11:c8:73:73:55:fa:ba:31:d9:28:26:1c:
87:ec:77:f3:17:37:db:ee:21:94:0b:56:86:9f:fb:f0:d9:10:
3b:57:cf:ed:be:af:e5:24:10:b3:d9:37:a1:c5:bf:69:76:bd:
a9:80:9d:05:47:3a:ed:5e:85:3d:38:6c:a1:5a:b2:27:f9:03:
09:2e:0a:34:48:fe:41:fc:a7:9f:f8:77:db:9c:09:14:cf:28:
17:c9:f7:39:fd:15:9b:a7:71:08:0c:a3:d4:61:2d:74:ce:fd:
7a:a8:f1:dc:55:9a:74:e8:01:02:8e:06:8f:a8:58:7a:a0:92:
c2:1a:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:39 2025 by rpki-client