Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft
File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json)
Hash identifier: pxvlpQ6Oi3hly5dMz6C/Tmb+HbxRa2VCrJOU/kg6SdY=
Subject key identifier: 31:49:95:7C:B6:AD:5A:F4:EB:D0:D9:A9:04:51:BE:D6:B7:E6:F3:CC
Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C
Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C
Certificate serial: 7C4B073B7222E9FE340259C60DE8A0FCAB133F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft
Manifest number: 0333
Signing time: Fri 28 Mar 2025 23:51:42 +0000
Manifest this update: Fri 28 Mar 2025 23:46:42 +0000
Manifest next update: Tue 01 Apr 2025 04:16:42 +0000
Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: DEpeYvkXzTYzecLlJE0E6EBVg8BeJwnX7BdKqv/e/Ak=)
2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: ZVdAQY25u+EXAg+k051zS/TyeF2eZFLF7+JEzc2DpAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4b:07:3b:72:22:e9:fe:34:02:59:c6:0d:e8:a0:fc:ab:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C
Validity
Not Before: Mar 28 23:46:42 2025 GMT
Not After : Apr 1 04:16:42 2025 GMT
Subject: CN=3149957CB6AD5AF4EBD0D9A90451BED6B7E6F3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:61:07:81:2b:59:11:1d:58:85:68:56:e7:
eb:85:7f:56:5c:10:b9:38:b1:47:e5:78:0a:de:25:
93:03:e2:3e:36:44:79:76:4d:f8:73:9f:05:58:2f:
6d:85:e7:3d:73:08:75:b0:1b:7e:bc:b7:b4:2b:c1:
d9:b7:5e:33:59:53:aa:5a:cc:9a:f6:f4:85:0e:89:
f9:bd:78:de:a5:19:6c:17:b2:7b:b1:87:6a:a7:00:
a8:04:8a:87:4e:23:92:5c:e5:0a:97:6e:51:34:84:
63:68:60:2a:9e:c3:85:a1:c9:a5:30:38:5d:51:c0:
d3:8a:d1:f1:76:cb:68:68:53:e4:74:6a:b9:85:41:
9a:74:fa:f5:27:d2:49:d1:7b:98:02:10:53:97:36:
4f:ab:66:ec:ad:9e:46:0c:be:79:11:58:e5:cd:4b:
42:84:df:f6:c1:71:b7:57:48:20:49:f2:c6:21:b4:
76:4c:a7:08:e7:bc:14:01:3f:40:14:6b:5a:f5:0b:
bc:a7:b5:b9:b3:22:c5:80:af:86:05:41:ec:dd:54:
5b:90:c9:a6:3d:63:9d:3e:e8:8a:0b:57:b9:8c:4a:
85:52:30:f8:7f:0a:53:ef:44:29:fd:29:8d:27:0d:
9c:85:d0:f0:48:8a:bc:8a:47:4f:7b:70:9b:d6:ca:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:95:7C:B6:AD:5A:F4:EB:D0:D9:A9:04:51:BE:D6:B7:E6:F3:CC
X509v3 Authority Key Identifier:
keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5d:8a:76:68:67:4a:0c:b8:5e:35:91:c6:b9:ed:db:01:5e:
8e:45:f2:28:3c:79:e1:26:d7:2d:7a:99:42:1b:55:e5:07:e1:
0a:d0:08:53:b3:a7:a5:e9:2a:57:aa:39:9a:c6:b8:9f:6c:7f:
16:2f:74:a0:ee:34:4c:3e:7b:cc:b7:2d:9e:3e:3f:60:9a:f6:
fc:66:c9:51:41:f7:30:b1:ec:45:4f:82:83:e0:41:66:08:41:
fe:b0:c9:e8:89:7d:7f:17:46:5b:0f:b2:3e:49:7a:9d:2d:09:
dc:7c:0b:13:f5:9b:db:b5:00:b7:4a:1c:20:b6:68:6a:2d:8f:
72:8d:26:45:8c:5a:3d:ea:ef:21:e3:7d:7b:73:57:3e:22:af:
d6:66:d4:36:06:99:ff:0a:d9:1f:c9:9a:82:c0:30:bb:fd:47:
5b:40:f4:00:0d:cc:2c:27:74:fb:d6:18:e6:81:0c:ff:d5:f8:
6d:09:1b:23:2f:ab:34:96:72:48:e4:69:65:3b:40:01:0d:ef:
52:e9:01:a2:30:88:89:f4:d6:cf:1f:cf:ff:45:ca:3d:b1:86:
e1:6f:04:a8:6d:17:06:fe:0d:c3:a0:d3:7c:c2:ce:65:e1:a5:
be:26:7b:ad:3f:99:99:2e:ef:cb:0f:62:f5:7f:e2:28:3d:8d:
ca:d3:b4:33
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITfEsHO3Ii6f40AlnGDeig/KsTPzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygxM0JBQTBERjk2MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVE
NTVGMjRDMB4XDTI1MDMyODIzNDY0MloXDTI1MDQwMTA0MTY0MlowMzExMC8GA1UE
AxMoMzE0OTk1N0NCNkFENUFGNEVCRDBEOUE5MDQ1MUJFRDZCN0U2RjNDQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrMYQeBK1kRHViFaFbn64V/VlwQ
uTixR+V4Ct4lkwPiPjZEeXZN+HOfBVgvbYXnPXMIdbAbfry3tCvB2bdeM1lTqlrM
mvb0hQ6J+b143qUZbBeye7GHaqcAqASKh04jklzlCpduUTSEY2hgKp7DhaHJpTA4
XVHA04rR8XbLaGhT5HRquYVBmnT69SfSSdF7mAIQU5c2T6tm7K2eRgy+eRFY5c1L
QoTf9sFxt1dIIEnyxiG0dkynCOe8FAE/QBRrWvULvKe1ubMixYCvhgVB7N1UW5DJ
pj1jnT7oigtXuYxKhVIw+H8KU+9EKf0pjScNnIXQ8EiKvIpHT3twm9bKyDUCAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBQxSZV8tq1a9OvQ2akEUb7Wt+bzzDAfBgNVHSME
GDAWgBQTuqDflgqK0gfDgDKLVmYgXVXyTDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVi
OGM1NDNjLWRlMWYtNGVmNC05MmIxLTY4NTU2ZmYxMzFhMy8wLzEzQkFBMERGOTYw
QThBRDIwN0MzODAzMjhCNTY2NjIwNUQ1NUYyNEMuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi8xM0JBQTBERjk2MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVG
MjRDLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81YjhjNTQzYy1kZTFmLTRlZjQtOTJi
MS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2MEE4QUQyMDdDMzgwMzI4QjU2NjYy
MDVENTVGMjRDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAyV2KdmhnSgy4XjWRxrnt2wFejkXyKDx54SbX
LXqZQhtV5QfhCtAIU7OnpekqV6o5msa4n2x/Fi90oO40TD57zLctnj4/YJr2/GbJ
UUH3MLHsRU+Cg+BBZghB/rDJ6Il9fxdGWw+yPkl6nS0J3HwLE/Wb27UAt0ocILZo
ai2Pco0mRYxaPervIeN9e3NXPiKv1mbUNgaZ/wrZH8magsAwu/1HW0D0AA3MLCd0
+9YY5oEM/9X4bQkbIy+rNJZySORpZTtAAQ3vUukBojCIifTWzx/P/0XKPbGG4W8E
qG0XBv4Nw6DTfMLOZeGlviZ7rT+ZmS7vyw9i9X/iKD2NytO0Mw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:31 2025 by rpki-client