
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json)
Hash identifier: UdEBrGEY23miFmgXqzswz/o1NJPMzDs2qqNT8250fA4=
Subject key identifier: D5:79:B7:D8:36:97:A8:C7:55:D6:FD:62:1B:30:84:41:C5:02:C3:61
Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Certificate serial: 2296E0E99F43EB7DDC7046491FBE3D47D1A06AE6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
Manifest number: 01BA
Signing time: Fri 28 Mar 2025 05:41:06 +0000
Manifest this update: Fri 28 Mar 2025 05:36:06 +0000
Manifest next update: Mon 31 Mar 2025 11:31:06 +0000
Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: E2LpXfOVJ9EOb47SZhfDqdlwholvLcmJKBHmZ+KjESY=)
2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: P4N2tUhdv+XXmXUHdV/K1pZuUMXP31PU+chKdfkYMCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:96:e0:e9:9f:43:eb:7d:dc:70:46:49:1f:be:3d:47:d1:a0:6a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Validity
Not Before: Mar 28 05:36:06 2025 GMT
Not After : Mar 31 11:31:06 2025 GMT
Subject: CN=D579B7D83697A8C755D6FD621B308441C502C361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:12:ce:db:56:55:46:bb:b0:03:fe:6c:82:
6e:9a:53:3a:56:d2:cd:0b:1d:79:b9:46:dd:70:8a:
4b:20:ea:1a:90:95:d2:81:7d:80:2d:60:93:eb:38:
9d:e9:79:22:72:9a:51:9a:3d:d2:e4:ce:32:81:f8:
82:87:da:60:d7:3b:df:29:94:43:29:98:3b:48:96:
43:c8:fc:e0:a0:cc:a9:40:14:34:dc:35:0a:04:82:
05:7a:bf:48:e7:8e:7f:f4:8e:01:ba:cc:f8:fd:c9:
59:07:f0:ee:78:4a:77:53:fc:2a:02:99:31:42:11:
14:a5:cf:8e:21:31:9b:e2:6f:70:8c:63:a4:da:39:
6f:80:df:54:a7:6f:4e:ab:72:c5:4d:62:07:a2:8e:
ff:3e:af:4b:b5:97:1e:f0:65:be:fa:31:90:1e:4e:
1f:36:c6:37:5a:ad:28:aa:e7:83:9c:b1:cd:c7:4e:
fb:b8:66:a6:e6:fa:d9:87:20:d1:d1:61:4b:6f:3a:
03:2d:1a:1d:65:dd:ee:a6:47:2c:06:20:86:b8:ae:
66:17:79:33:93:30:aa:b0:4c:ac:ba:2e:36:da:b5:
5a:14:6b:10:de:e1:0b:28:e4:cf:0f:28:77:2e:8d:
9a:38:dc:3d:8f:c9:22:6c:0d:19:22:61:91:d6:6e:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:B7:D8:36:97:A8:C7:55:D6:FD:62:1B:30:84:41:C5:02:C3:61
X509v3 Authority Key Identifier:
keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:62:bf:d3:13:e4:2a:02:31:bc:67:6d:19:4b:f1:ed:0d:
31:4b:fc:e5:05:c7:64:05:c0:af:5e:29:2b:a2:b4:bb:46:94:
69:26:72:42:8e:f9:c9:8a:b7:1b:f3:0b:72:07:0e:09:5b:45:
c7:81:63:1d:a1:2e:5b:94:a5:27:ce:35:97:d9:e6:02:87:8f:
d8:bc:68:e8:20:d3:22:55:dd:a6:da:a2:f8:8f:2b:84:1c:cf:
2f:f6:a9:e4:9f:86:1f:32:40:42:f6:d2:ef:ac:7b:c7:8f:66:
ac:1e:b2:5c:96:5b:7a:e4:b8:6d:8e:80:a0:11:40:6d:97:98:
e2:80:ea:51:07:25:f1:c0:2a:36:28:32:b4:e2:f1:16:c1:4d:
61:4e:8b:15:cc:ae:28:38:2f:c2:48:14:08:04:90:97:09:14:
a2:41:0e:ab:7d:ec:08:5a:d9:dd:24:66:ff:e4:72:78:45:5d:
8c:b9:e7:77:70:3b:dd:80:fb:7f:d9:14:71:19:b2:14:48:60:
5a:9f:0f:92:32:81:a8:1a:2d:51:ae:d7:d6:eb:b5:59:20:52:
a4:d6:8d:08:61:07:6a:21:f2:2a:49:93:dc:9e:d9:88:90:3e:
7f:5a:54:e8:6b:7d:8c:c5:66:0d:80:b5:d0:d0:da:5f:78:c4:
7f:d2:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:36 2025 by rpki-client