Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json)
Hash identifier: FgrXd/pPKWR2Q1MeGEiURS77jv52/TN/9b9hXzRZxnU=
Subject key identifier: A3:FA:D0:05:C2:2F:F4:66:86:48:BB:DD:A0:58:6F:EF:94:86:23:D1
Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Certificate serial: 61A5D6685D9492E96B3160F12053955DE1A2DBF4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
Manifest number: D3
Signing time: Sat 29 Mar 2025 10:10:04 +0000
Manifest this update: Sat 29 Mar 2025 10:05:04 +0000
Manifest next update: Tue 01 Apr 2025 17:25:04 +0000
Files and hashes: 1: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA=)
2: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: rdzr6zuwPpRiVcDJ6/P4KSw+Xl4pATyduUa7sQS6OMI=)
3: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=)
4: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: Ywn1UEJnpT1UpuAh2VB4UnPn+99/TPlQAq9uS4gdn7I=)
5: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: chZgSebYL3AyASorKFgZxAtVxsXGef1bjWlqKc1bcs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a5:d6:68:5d:94:92:e9:6b:31:60:f1:20:53:95:5d:e1:a2:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Validity
Not Before: Mar 29 10:05:04 2025 GMT
Not After : Apr 1 17:25:04 2025 GMT
Subject: CN=A3FAD005C22FF4668648BBDDA0586FEF948623D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:40:ac:50:25:1a:0b:23:8e:d6:c4:c4:79:
75:7d:24:4e:dc:0b:43:f9:ba:07:50:a5:93:da:f1:
bf:c4:a3:4a:7f:e8:72:eb:02:4b:6e:87:e6:12:15:
99:50:f5:d8:40:b6:60:68:3b:47:18:ce:d3:70:75:
2e:11:59:b8:ae:13:61:7b:31:a8:70:f4:24:26:8c:
4d:68:f6:2e:d8:32:bd:fa:f9:39:71:f4:ce:c7:75:
57:06:12:27:b7:12:34:4d:16:bf:7a:7f:76:db:6f:
fd:c4:ab:70:29:02:e2:fa:b7:84:26:f6:84:04:cf:
a0:29:40:7f:7d:78:e0:37:bd:61:8c:12:a2:a8:2e:
09:c0:7a:6e:76:73:16:77:76:5a:20:65:30:49:0b:
6f:37:ef:39:8b:de:7d:9d:6a:55:9c:11:1e:0b:d3:
09:cb:5f:96:6a:df:08:4e:9f:21:c9:a7:e2:c5:59:
73:14:66:16:b2:9e:af:d6:60:6b:7e:7f:00:d1:a7:
1b:df:8c:4f:36:1d:97:0d:58:bc:f0:98:48:fb:2d:
37:a0:7a:a1:bf:be:d0:14:d2:36:06:13:4d:d1:8a:
06:1e:ac:6e:7a:ef:1b:c6:39:1b:f2:22:8c:02:37:
11:55:26:20:63:c8:b3:99:0d:e2:93:95:8c:f9:df:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:D0:05:C2:2F:F4:66:86:48:BB:DD:A0:58:6F:EF:94:86:23:D1
X509v3 Authority Key Identifier:
keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:e7:0c:bc:08:48:25:5f:92:d6:4d:45:81:1a:88:cd:4f:
0e:5a:73:5b:a3:75:f7:78:cc:08:b1:c9:65:f1:eb:79:da:50:
5e:5c:a3:54:76:51:78:d0:ac:5c:58:7d:5c:8f:be:82:0c:d4:
a0:5a:27:58:6a:d8:94:7a:59:35:15:c1:2f:4c:64:6b:03:6b:
36:a5:89:05:52:56:9a:9e:bc:b8:ea:2f:63:f1:e1:5d:8b:4e:
b4:98:5e:6c:3d:1f:da:2b:35:2d:26:6b:d6:e4:e1:90:12:5b:
42:ad:73:b7:58:56:cb:99:6f:b1:cc:64:d5:3b:78:d6:a7:1f:
ad:92:0b:b1:07:77:b7:90:fe:ec:cb:90:6a:31:59:12:c0:1d:
78:69:e5:26:d3:01:11:e3:2c:28:75:d1:a0:65:b2:8b:4b:26:
ab:20:f2:3c:f1:0a:d0:4e:4c:88:3d:61:d5:da:ba:d8:38:f3:
91:cd:2f:a4:d4:1f:b0:80:ab:be:1c:e4:5e:35:2b:9a:9b:b4:
8e:9e:72:2b:00:b0:e2:2d:64:0a:aa:7a:82:50:0c:78:0e:87:
dc:94:93:e1:b1:1e:c8:5d:34:43:f3:ff:e8:c0:d7:58:76:5c:
0b:0e:af:39:a6:00:ab:dc:cc:2a:cb:7f:78:ee:a1:4e:1f:a6:
bd:aa:76:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:28 2025 by rpki-client