Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json)
Hash identifier: uIOJgaX14vXOicYWojr+FIUSij6ufaYO3XZ9YODPwTE=
Subject key identifier: 7E:42:9D:9A:1D:E7:69:58:8A:C7:B8:DF:D9:26:E4:7C:2B:3B:69:C7
Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Certificate serial: 4E3B974C0E066BE262FFEAB4C9CF6E245C3B9BA5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
Manifest number: 01ED
Signing time: Fri 28 Mar 2025 10:21:34 +0000
Manifest this update: Fri 28 Mar 2025 10:16:34 +0000
Manifest next update: Mon 31 Mar 2025 22:16:34 +0000
Files and hashes: 1: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: 953/1OAjNWabw3EekLLAXwzV4CYrLdUWpl5qPGTJpaU=)
2: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: ejjY61bhmlJl0lxMoyTYYJxk49QNB+St/BGfTNpwclI=)
3: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: JOk2hOEjt3VDU03LDOoQK88eKB9E+q6wdAJWayyHIwQ=)
4: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=)
5: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: cqTyGMrVXV3krfj6ahd0XiybL7qMxOankc/x3Ztfrtk=)
6: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: HNO+uV17m0jaQLIG6DGD08qCasVBIMIkK2LXrUYhC4k=)
7: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: Jatff9pdbxHcTIoc61FwpQ4zDvedkS7YEGoxT4EFfu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3b:97:4c:0e:06:6b:e2:62:ff:ea:b4:c9:cf:6e:24:5c:3b:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Validity
Not Before: Mar 28 10:16:34 2025 GMT
Not After : Mar 31 22:16:34 2025 GMT
Subject: CN=7E429D9A1DE769588AC7B8DFD926E47C2B3B69C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:56:de:3d:62:17:e8:97:e6:49:80:f6:f1:
f4:7e:64:a6:47:7c:7b:0b:65:a6:9b:d3:6d:a0:e4:
31:da:b4:56:da:85:78:c6:b2:07:33:c9:8d:68:89:
3f:47:0d:47:43:e3:eb:57:d2:e4:ec:c0:5b:f4:a2:
a5:ad:70:1d:7e:d6:86:61:e6:ee:fa:98:c1:31:6c:
90:9f:6a:80:c7:40:d4:52:85:82:a1:bd:25:94:6d:
03:13:fd:f5:30:7f:ed:75:74:7e:05:3b:85:77:c0:
c0:7e:be:b8:37:12:0f:33:1b:b7:c1:ab:36:84:30:
e4:11:e2:d1:c1:c3:63:22:93:b5:0e:81:1e:81:cc:
43:4f:8c:51:0f:c8:8b:f4:d2:17:fc:63:54:05:8c:
fa:85:3b:d9:b5:61:af:be:46:5a:09:cd:75:89:cc:
45:3c:e1:4c:38:41:83:77:05:f5:96:6b:2f:66:48:
b6:c4:4b:e7:c2:e9:3a:f3:0a:4f:b6:1e:0e:db:01:
77:37:c7:e5:8c:6a:fe:a5:c0:f6:6c:16:0a:4f:1f:
d9:e2:fa:89:5d:49:89:07:eb:c1:6f:1b:a9:56:6c:
93:7e:bb:2f:40:77:86:ea:ec:76:dc:a5:4b:42:fc:
9d:ff:0d:b0:a0:a3:f8:b2:da:cf:d9:76:fa:ad:9b:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:9D:9A:1D:E7:69:58:8A:C7:B8:DF:D9:26:E4:7C:2B:3B:69:C7
X509v3 Authority Key Identifier:
keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5c:66:9f:a5:9b:04:e8:53:cf:72:e8:bb:e3:3c:8e:f4:a8:
7b:4b:9c:6d:ca:90:d3:46:54:70:eb:f1:ea:6c:8e:97:97:62:
c4:b6:7c:e6:82:49:f4:14:0c:c6:35:c4:5a:01:77:90:fb:12:
cd:76:8c:b2:f0:09:a5:d5:ac:e7:59:f3:16:44:0f:bf:bc:a0:
44:1c:ec:36:43:73:2a:de:0f:5b:2c:cb:45:27:97:98:8f:ee:
66:e8:92:89:9c:71:be:c2:ec:9d:be:58:eb:69:dc:45:a1:bf:
02:9d:3b:61:3d:b6:0f:8a:a8:57:67:35:bc:34:de:d3:f8:35:
d8:fe:bf:64:58:75:cc:70:8e:bd:9e:55:c6:b4:df:4b:68:3c:
bd:ed:f0:9d:91:8a:5c:a2:4b:23:8c:df:83:22:aa:43:e0:5e:
61:30:2f:99:b5:f9:ab:f2:93:45:85:d7:09:11:9e:07:70:82:
94:7e:51:dc:49:93:fd:ae:b3:c5:a0:4e:09:30:02:78:aa:f8:
07:56:da:b4:71:a6:c6:98:a5:b2:38:42:c6:40:83:66:11:fe:
f6:90:50:bf:94:41:d9:a0:42:6d:6e:3e:50:08:3d:0b:31:a3:
f4:18:ef:ed:2c:37:5a:57:5e:10:af:fb:fe:b7:a1:b5:89:64:
21:86:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:03 2025 by rpki-client