Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json)
Hash identifier: aehFGxFirnCev6wEAXO1tFUy1Wh0bZNsCNgSsCXZwig=
Subject key identifier: 45:D0:B9:7E:61:61:4A:F9:85:7F:2E:A1:2B:FC:69:41:48:3A:50:C6
Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771
Certificate serial: 5C00291CA3FF3DDE1E97C8791B3AA90C45E0DC6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
Manifest number: 94
Signing time: Fri 28 Mar 2025 22:21:23 +0000
Manifest this update: Fri 28 Mar 2025 22:16:23 +0000
Manifest next update: Tue 01 Apr 2025 03:58:23 +0000
Files and hashes: 1: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: z0tus+WlM7AzZiwFKPeSjTA3W4w2FlY9TB70e/Ldx84=)
2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: N/5ZvVZ0rYgeXmpV1zrbx8ChyoSwszYN8MPi6zIhM8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:00:29:1c:a3:ff:3d:de:1e:97:c8:79:1b:3a:a9:0c:45:e0:dc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771
Validity
Not Before: Mar 28 22:16:23 2025 GMT
Not After : Apr 1 03:58:23 2025 GMT
Subject: CN=45D0B97E61614AF9857F2EA12BFC6941483A50C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:23:9c:8e:71:e3:0c:7d:53:3a:41:a1:bc:
32:16:8f:3a:e6:f0:70:87:8a:c3:02:55:b7:e6:29:
ed:b6:22:8d:35:47:d6:72:0d:22:c4:88:61:22:8c:
9c:bc:f1:77:80:7e:a9:1b:60:07:1f:b1:64:4f:7f:
8f:91:86:21:75:ff:72:33:b7:50:3d:3a:02:9b:cd:
3d:d5:f2:f4:fb:9a:c7:52:35:9b:56:ab:39:87:72:
5a:03:0f:bc:13:eb:c7:cf:0d:56:06:71:96:fa:cb:
e9:b4:a0:27:bc:ba:cc:f2:af:02:4d:67:20:88:ee:
19:85:25:3b:73:5d:76:e6:46:7f:66:c3:3a:73:68:
df:dd:4d:b3:41:03:fb:69:91:4f:8f:e1:bd:ae:73:
00:62:66:73:5a:b3:e2:d0:07:24:32:3f:b0:19:c5:
a1:5a:c3:a2:db:48:79:b5:a7:67:30:ac:1a:5d:e1:
14:c1:52:a6:67:13:37:74:ef:43:c4:6e:ee:0b:e9:
2d:96:43:f3:79:80:f9:65:32:bb:b6:c2:3e:71:d5:
32:48:e0:02:d3:b2:b0:29:70:36:b0:4f:df:e0:b7:
12:1f:c9:21:9f:cb:ce:18:69:35:8c:41:74:8b:2d:
4d:0b:b0:d7:df:54:21:89:f8:78:44:46:8c:1f:97:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:B9:7E:61:61:4A:F9:85:7F:2E:A1:2B:FC:69:41:48:3A:50:C6
X509v3 Authority Key Identifier:
keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:70:e9:0f:7c:89:8f:af:5e:39:fb:d1:e6:ca:b4:cd:8b:de:
62:b6:c0:c7:4e:70:3a:33:20:f6:20:a8:31:f7:9c:46:5f:7a:
d9:08:f9:52:49:26:f1:0a:8b:15:1f:c8:05:41:f0:72:08:09:
31:6f:70:fb:a8:a5:a7:17:37:e6:63:45:e7:4a:55:6f:dc:f4:
c1:72:eb:dd:c7:b8:a7:cb:68:ee:13:20:53:a9:9c:83:18:67:
56:87:6d:ea:53:ca:0b:2f:cc:ac:54:0f:87:c2:f1:fd:76:8f:
fd:b6:69:b5:b2:0d:69:bb:18:1f:99:83:4e:57:d8:93:ec:9f:
d9:3c:73:7a:eb:68:7b:7a:5d:f7:e8:87:93:bc:6d:40:00:4c:
da:15:bd:7a:bd:87:ad:e9:79:54:46:0f:47:41:c7:f0:22:36:
ee:47:88:9c:b7:25:9a:56:0b:52:93:86:9f:89:a0:87:3f:af:
54:f3:0c:ff:4d:cd:e4:c9:09:36:f6:9a:b8:53:d1:eb:e7:e2:
8a:d7:1f:41:28:d7:e2:f3:c7:25:dd:f4:b2:c9:ea:80:a1:9b:
f8:21:85:f7:ec:d5:70:09:91:8e:33:d8:ea:2b:06:25:65:e1:
04:52:84:25:66:36:17:94:8c:85:0b:22:99:b1:f6:65:19:3b:
91:f3:ca:b4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXAApHKP/Pd4el8h5GzqpDEXg3GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3
NjRFMDc3MTAeFw0yNTAzMjgyMjE2MjNaFw0yNTA0MDEwMzU4MjNaMDMxMTAvBgNV
BAMTKDQ1RDBCOTdFNjE2MTRBRjk4NTdGMkVBMTJCRkM2OTQxNDgzQTUwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeyOcjnHjDH1TOkGhvDIWjzrm
8HCHisMCVbfmKe22Io01R9ZyDSLEiGEijJy88XeAfqkbYAcfsWRPf4+RhiF1/3Iz
t1A9OgKbzT3V8vT7msdSNZtWqzmHcloDD7wT68fPDVYGcZb6y+m0oCe8uszyrwJN
ZyCI7hmFJTtzXXbmRn9mwzpzaN/dTbNBA/tpkU+P4b2ucwBiZnNas+LQByQyP7AZ
xaFaw6LbSHm1p2cwrBpd4RTBUqZnEzd070PEbu4L6S2WQ/N5gPllMru2wj5x1TJI
4ALTsrApcDawT9/gtxIfySGfy84YaTWMQXSLLU0LsNffVCGJ+HhERowfl4fZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURdC5fmFhSvmFfy6hK/xpQUg6UMYwHwYDVR0j
BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5
QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF
MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1
YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC
NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAItw6Q98iY+vXjn70ebKtM2L3mK2wMdOcDoz
IPYgqDH3nEZfetkI+VJJJvEKixUfyAVB8HIICTFvcPuopacXN+ZjRedKVW/c9MFy
693HuKfLaO4TIFOpnIMYZ1aHbepTygsvzKxUD4fC8f12j/22abWyDWm7GB+Zg05X
2JPsn9k8c3rraHt6Xffoh5O8bUAATNoVvXq9h63peVRGD0dBx/AiNu5HiJy3JZpW
C1KThp+JoIc/r1TzDP9NzeTJCTb2mrhT0evn4orXH0Eo1+LzxyXd9LLJ6oChm/gh
hffs1XAJkY4z2OorBiVl4QRShCVmNheUjIULIpmx9mUZO5HzyrQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:37 2025 by rpki-client