Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json)
Hash identifier: 7xE0cvi8t9sA6Q9eI+74jpVG56qAbzf4nulcLYyvh+c=
Subject key identifier: 1C:A9:90:6D:78:00:99:42:48:FC:D7:D5:6F:42:C1:89:25:77:6C:4F
Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8
Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
Certificate serial: 18FA8FBD5A52DE339F04ACFA0F0CBECA2B3A6D63
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
Manifest number: 0423
Signing time: Thu 27 Mar 2025 16:50:58 +0000
Manifest this update: Thu 27 Mar 2025 16:45:58 +0000
Manifest next update: Sun 30 Mar 2025 19:09:58 +0000
Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=)
2: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: y4n1d598F3wyYCCFLUvB+mARw8oEZTIfdc5C7GeJCgU=)
3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fa:8f:bd:5a:52:de:33:9f:04:ac:fa:0f:0c:be:ca:2b:3a:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8
Validity
Not Before: Mar 27 16:45:58 2025 GMT
Not After : Mar 30 19:09:58 2025 GMT
Subject: CN=1CA9906D7800994248FCD7D56F42C18925776C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:0c:9f:e0:63:ba:c5:84:e3:39:20:ef:60:
33:b3:4e:3a:fe:7c:47:3c:59:4c:f6:78:ed:7b:e1:
b1:43:a9:1b:bc:26:0e:de:43:9b:20:89:59:9d:53:
c2:de:d3:ec:38:11:46:51:21:4a:2d:35:ce:49:11:
cd:95:37:22:a3:0e:82:73:1a:eb:30:39:30:c7:1d:
bb:b9:9b:52:6e:55:19:38:f1:20:fe:da:d9:00:2b:
9c:b8:66:36:4d:0f:d2:28:84:e8:d9:3d:7e:1c:80:
19:3c:df:6b:03:c7:92:45:2f:40:d5:b4:65:0d:30:
79:01:d9:6b:2d:8c:fb:ff:3c:86:7b:ca:a2:bb:1d:
7c:f8:a5:ba:6b:e6:2d:94:6f:32:4b:04:d5:38:f1:
58:41:6c:a9:14:1a:38:8f:d9:d8:3b:94:57:12:40:
09:33:a6:34:77:63:f2:26:b8:98:44:fa:b5:7f:07:
56:39:58:a9:88:ce:fa:0a:30:ef:32:eb:b3:e9:35:
d7:30:1d:14:77:8d:37:6f:5a:f7:49:22:2a:a7:1b:
de:ea:5a:7d:ca:ce:6f:92:fd:11:7c:7a:fa:27:6d:
45:17:9d:e3:de:d7:9d:c6:ab:30:f5:f7:6e:04:7a:
46:96:87:c9:3e:f2:71:1c:29:7a:66:dd:1a:9a:15:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:90:6D:78:00:99:42:48:FC:D7:D5:6F:42:C1:89:25:77:6C:4F
X509v3 Authority Key Identifier:
keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:bc:8d:36:a6:8d:d4:48:a5:2a:fb:62:19:1e:36:1a:b5:
2f:08:07:d1:24:84:0f:2f:7c:d2:a9:6a:0e:2e:70:0b:d8:d0:
84:bb:43:58:12:de:c5:d8:34:8d:ab:66:c1:33:18:58:98:7d:
0c:fd:cc:e5:23:e5:ef:74:af:ff:71:d4:a5:76:df:ff:c1:45:
a2:ca:e5:3e:26:0a:41:ee:3f:3c:68:ec:bb:ec:53:84:53:f5:
13:ca:14:ea:7b:66:d1:b7:05:eb:99:54:62:c7:59:9a:4e:ff:
4b:ae:90:d4:03:5d:f7:19:50:41:8b:48:ca:5c:1d:9c:36:a4:
ca:c5:7f:fc:31:54:c2:5b:bc:82:50:35:4e:c9:cb:ad:8f:22:
e9:3d:9c:e6:72:cf:22:23:98:77:16:b3:53:a6:6a:ee:41:05:
27:a9:73:ea:cc:43:2e:ed:7d:89:d5:f0:f6:07:11:33:95:a8:
ba:7e:d9:43:88:d8:0b:78:f4:90:b5:f0:8e:88:a5:2b:00:dc:
4a:0c:fd:1f:35:30:64:71:c1:96:bd:6d:e6:9c:77:87:56:c0:
12:bc:1e:55:3d:6a:14:6e:f7:b2:37:dd:f3:36:0e:31:81:1b:
5e:00:78:32:39:3f:9f:15:6b:fb:c0:30:00:e6:68:31:a9:9c:
87:ef:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:29 2025 by rpki-client