Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft
File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json)
Hash identifier: OpN2E6atENfAFIlOcMZm9Xj6sz7RnIDBZliRxmYK64c=
Subject key identifier: 2F:B1:76:90:C7:DD:A0:29:12:7A:AE:80:83:98:3B:DB:28:F1:2D:AD
Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8
Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8
Certificate serial: 026CFDF05B3D106A1EFA6D7DCEC48BC8A2E4C1D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft
Manifest number: 0122
Signing time: Fri 28 Mar 2025 22:10:35 +0000
Manifest this update: Fri 28 Mar 2025 22:05:35 +0000
Manifest next update: Tue 01 Apr 2025 05:42:35 +0000
Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: kVCI7MaqXhjSTkJ9VJ1XwWK4VohGd9BbFeHUagQUWYw=)
2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: kIIeMyYHLpwRsUVcjh/TOWu2x/y3f9Oc8PMmrWTrStE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6c:fd:f0:5b:3d:10:6a:1e:fa:6d:7d:ce:c4:8b:c8:a2:e4:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8
Validity
Not Before: Mar 28 22:05:35 2025 GMT
Not After : Apr 1 05:42:35 2025 GMT
Subject: CN=2FB17690C7DDA029127AAE8083983BDB28F12DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:2b:94:d0:07:55:61:8c:eb:9b:84:c8:25:
dc:4d:78:39:f1:f3:f1:60:ea:a5:a0:3f:45:a2:a5:
a3:1f:38:d9:2f:33:55:1a:75:f7:38:26:e9:ed:97:
98:c9:d1:fc:cd:24:8b:7f:db:34:bf:56:5f:a7:7c:
7e:0b:86:99:a6:3d:d1:e5:62:3d:db:96:06:0e:9a:
33:26:b6:c9:37:2e:36:c1:ad:a4:93:88:cd:e9:77:
1b:78:3d:bb:88:d1:5b:58:e1:e6:b1:8a:83:19:ca:
a6:19:68:1d:59:e3:ba:89:61:a6:bc:83:5c:28:7e:
61:a5:95:0d:32:5a:19:85:e8:8b:eb:7f:f3:a5:7f:
a1:8e:53:1c:a6:36:38:52:d9:1c:75:f4:ab:62:c8:
27:de:0b:53:0b:6d:3f:76:55:9d:d9:fb:a2:b5:16:
84:4f:49:a9:1e:9e:86:fa:eb:63:cc:9f:b7:ad:4d:
df:8f:79:ba:be:6d:ed:78:3e:97:40:2d:c2:31:53:
b3:1f:68:15:87:f6:6b:28:3b:8c:56:6a:aa:c7:87:
b3:24:ae:32:c0:eb:13:7f:31:d1:05:4b:00:c8:bd:
5a:2c:0b:39:ec:b8:aa:4f:ae:fe:3c:16:37:47:34:
eb:6d:8b:65:a7:73:a6:63:98:00:2b:f9:ad:b0:5d:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:76:90:C7:DD:A0:29:12:7A:AE:80:83:98:3B:DB:28:F1:2D:AD
X509v3 Authority Key Identifier:
keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bb:66:8d:6c:3f:d4:3c:b1:ba:fb:dd:5e:fb:d5:5b:ea:ca:
d4:e4:cd:71:17:ba:ff:0a:9c:d5:8b:78:a9:5f:96:96:44:3f:
b7:b9:33:88:98:7d:9e:0d:f5:19:70:b7:04:a0:d3:f3:a2:74:
91:91:cd:18:f0:30:97:3f:f6:ee:e2:79:40:09:46:75:65:44:
02:f6:96:95:0f:da:d0:60:2b:48:40:45:11:12:cf:37:6a:71:
f1:17:25:4c:f9:41:29:7e:c1:22:e7:a0:2d:51:d8:cb:c5:b9:
44:f0:60:e3:19:6b:a9:54:e0:49:2c:be:29:7c:37:db:09:c1:
af:20:29:d3:8b:59:d7:79:8a:09:4a:92:42:0e:63:5e:c0:a9:
9c:c3:bc:af:fc:22:0e:f4:8f:a1:77:28:49:c5:38:be:33:b8:
f6:ee:aa:7a:89:a7:00:54:5e:f8:20:09:02:6c:b7:20:ce:1c:
d4:a0:a8:fa:64:2d:83:81:10:83:b0:68:eb:75:a2:ac:b6:1c:
f7:04:ac:7a:87:c2:50:bb:b5:1c:57:19:4f:d1:ac:be:20:5c:
4d:9b:25:e2:1b:e1:f3:d1:88:3b:55:fa:c6:ea:29:b9:aa:a0:
65:96:02:64:0c:67:42:df:9d:55:6c:64:28:dc:bc:9e:d2:ea:
62:0d:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:52 2025 by rpki-client