Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json)
Hash identifier: Nf5SkjaSCrgglswvTXZTERIhsK6O5dokLROyi5anYz8=
Subject key identifier: FC:CE:CB:F5:C6:0D:CA:83:C5:85:73:93:30:7B:AD:82:3A:34:94:DA
Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259
Certificate serial: 5ABFB3A46B76B8B64C99B0B6AFFA03B93808B43D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
Manifest number: BC
Signing time: Fri 28 Mar 2025 07:11:25 +0000
Manifest this update: Fri 28 Mar 2025 07:06:25 +0000
Manifest next update: Mon 31 Mar 2025 10:01:25 +0000
Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=)
2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: hZPc2jUJT9DQS/pwLE/bRSGkjMPEj8JigLeyDZNJ5g0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:bf:b3:a4:6b:76:b8:b6:4c:99:b0:b6:af:fa:03:b9:38:08:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259
Validity
Not Before: Mar 28 07:06:25 2025 GMT
Not After : Mar 31 10:01:25 2025 GMT
Subject: CN=FCCECBF5C60DCA83C5857393307BAD823A3494DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:48:cc:66:e9:35:31:eb:f4:10:69:1c:6c:
89:e8:cb:6a:92:d7:b7:d7:d1:da:a1:0b:07:e0:db:
21:28:d1:a4:61:59:aa:3e:85:8e:41:fa:7b:a9:d6:
32:1a:05:53:c4:bd:1f:5e:71:3d:ac:4c:4f:ef:5c:
1a:84:ff:34:3b:0f:68:d9:8d:f7:0a:2c:74:d5:f8:
8c:3d:75:45:4e:cf:76:2e:74:c9:e0:ab:e5:22:93:
85:71:65:74:26:64:66:7d:6b:94:d0:f6:aa:2f:26:
e5:c1:15:85:59:4d:42:f5:1d:61:8c:ec:7d:8d:ad:
6f:6f:23:49:7f:5a:78:41:03:cd:44:cc:34:60:5d:
1f:a9:39:2c:7c:36:81:ff:2f:00:79:08:40:b0:94:
7d:2f:3c:87:86:ae:a0:55:37:2e:91:75:87:6f:66:
db:17:6d:c1:9d:cd:93:7d:76:44:f4:eb:7c:30:c7:
59:f2:ac:ba:64:3d:9a:5b:7e:98:83:5b:7b:9a:5f:
4d:7a:be:6e:98:37:6e:41:fa:85:5c:e3:14:73:c7:
5d:17:be:10:d9:aa:87:da:a3:46:e8:00:0a:52:45:
b3:4f:d8:f1:ef:e1:70:c1:46:41:4c:a0:42:b8:2e:
79:71:d3:7c:ba:ce:4f:72:f2:55:09:b2:c2:f7:3c:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:CB:F5:C6:0D:CA:83:C5:85:73:93:30:7B:AD:82:3A:34:94:DA
X509v3 Authority Key Identifier:
keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f3:d4:83:55:b7:4a:9a:0c:49:83:f9:f1:39:2d:6b:38:fb:
c7:83:33:a2:9c:ce:77:7e:9c:ba:f7:38:de:44:d0:c1:61:77:
57:bc:8b:2a:55:f3:59:ac:b8:70:b0:35:46:a2:06:dc:72:7d:
e0:85:99:3d:00:0b:a3:73:07:2f:75:e6:8d:b5:17:cd:d0:ac:
a6:2d:74:11:3d:fc:39:52:90:92:41:22:e9:19:2c:f0:dc:d0:
31:02:1c:9e:2e:4b:d0:f2:db:9b:ee:4d:3b:7c:63:50:5b:5f:
18:21:17:ea:42:d1:8d:67:1b:5f:b2:60:23:71:cc:b1:bc:07:
b1:6f:bb:b9:de:03:fb:7f:57:48:28:a3:86:a5:df:a0:c5:9d:
4c:b6:70:e4:6f:34:6a:a1:3f:e2:bf:fe:31:99:e5:59:8f:5c:
38:9c:6f:bb:56:29:a4:c8:8c:cf:47:42:17:ca:f1:89:8e:03:
5c:45:a0:a9:f4:75:30:6c:b1:1c:6a:3f:ff:bc:57:05:fd:3d:
e5:25:6d:95:4e:84:dc:a3:97:2b:12:1f:0e:35:58:2c:b0:e0:
f0:33:9b:19:ac:4a:53:82:a4:fb:e1:7f:cd:fa:a1:bb:f8:fb:
c9:7a:6c:08:e5:0d:2b:d3:dc:6b:82:05:bb:69:9e:76:49:39:
7d:34:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:00:31 2025 by rpki-client