Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json)
Hash identifier: ybzd3Js+XFFB5tXjASUx5gScgfaw43oNPbP5Yxfn1MY=
Subject key identifier: EA:B4:76:54:3F:62:4E:5B:E2:EF:F3:E2:E1:6B:5E:1D:67:ED:C6:CC
Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Certificate serial: 54C253A58E450C2153E4DD40749C910405CAB58E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
Manifest number: 50
Signing time: Fri 28 Mar 2025 10:30:36 +0000
Manifest this update: Fri 28 Mar 2025 10:25:36 +0000
Manifest next update: Mon 31 Mar 2025 16:51:36 +0000
Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: CCN07sAwZILGErWc7U3JoYHoaa26l4LFHn3hKnulH3A=)
2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: OciTRaV2C31FilczLAWvlWOOLcWTGVmd3g3fetGDN8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c2:53:a5:8e:45:0c:21:53:e4:dd:40:74:9c:91:04:05:ca:b5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Validity
Not Before: Mar 28 10:25:36 2025 GMT
Not After : Mar 31 16:51:36 2025 GMT
Subject: CN=EAB476543F624E5BE2EFF3E2E16B5E1D67EDC6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:47:15:a1:14:31:48:5f:ad:3a:77:8e:db:
a5:7f:04:79:87:dd:58:19:bc:f7:24:b5:3d:c5:cc:
02:45:c5:7b:76:75:2f:93:6c:3d:52:e3:56:c8:16:
b4:67:be:8a:52:f4:28:02:8a:42:e0:ea:bb:1e:eb:
bc:80:f7:5f:a6:be:16:ae:22:29:c7:40:1c:bb:2e:
87:b9:c1:24:b7:15:4f:a1:c3:b5:7e:a0:8b:4b:6c:
c0:12:f6:66:65:00:6c:2b:80:d9:b6:19:36:16:25:
75:75:1f:61:63:a4:ef:98:86:05:bc:cf:93:91:44:
a2:96:6e:b6:f5:61:6d:5e:22:7f:86:70:55:8e:47:
22:3f:67:fa:32:50:6e:64:ff:8f:4a:f0:fc:35:0c:
e6:16:ed:e6:60:4e:37:b4:65:d6:d5:b2:74:e9:da:
7e:25:c8:74:d0:60:21:e0:8f:ec:df:f8:28:52:54:
22:1b:2e:0d:bc:52:b2:59:7a:37:40:a1:d3:95:06:
3a:0e:07:c4:76:65:93:aa:69:f5:58:4b:4a:72:21:
3e:f0:26:4c:a7:3c:88:30:c5:49:99:29:5d:f6:67:
f3:9f:b3:fe:41:1e:37:84:48:d9:3f:e5:62:fc:a1:
05:14:48:06:fe:37:20:2e:37:ec:4f:d4:43:91:38:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:76:54:3F:62:4E:5B:E2:EF:F3:E2:E1:6B:5E:1D:67:ED:C6:CC
X509v3 Authority Key Identifier:
keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:fd:2f:da:86:2c:70:96:ef:2c:3d:8a:2a:eb:83:33:e3:
8f:13:6b:65:3d:a0:1a:19:c5:6a:08:d4:c3:70:64:bd:eb:f8:
df:2a:bb:1a:14:7b:e2:8e:96:2a:b3:4d:a5:61:ce:74:42:a0:
81:c4:31:4f:f3:2d:95:3c:3c:1d:e1:fc:bc:fb:1c:27:31:31:
eb:43:42:9b:f0:f0:6b:e8:4c:7a:17:be:bf:80:3f:88:b3:57:
ca:23:4c:b4:be:9c:eb:c1:6c:c2:83:20:73:50:49:93:17:a1:
7a:19:1e:49:41:4f:08:68:00:29:74:76:8d:1b:cd:e8:22:78:
55:69:48:00:9b:fc:c7:04:19:47:b6:2a:04:ac:2d:2c:6a:36:
b9:68:b2:2c:19:8a:13:bd:41:33:be:bc:57:a3:bc:b2:9c:8d:
91:09:05:2b:bd:b7:48:57:bc:15:91:87:25:db:ad:cc:47:bc:
64:ed:44:f3:3f:66:25:d2:0a:c9:57:54:69:20:49:da:ff:b9:
21:f2:0e:86:c0:bd:dd:bd:52:5d:74:d4:4f:8b:c1:ae:57:4f:
5d:4c:5a:70:7d:1c:59:3a:cc:9b:50:04:c5:1a:cc:bf:ed:0c:
f8:83:eb:93:5f:ac:6c:9a:fb:7e:d3:9e:d8:f9:cb:a9:ec:96:
2d:09:3c:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVMJTpY5FDCFT5N1AdJyRBAXKtY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB
REREMURFOTAeFw0yNTAzMjgxMDI1MzZaFw0yNTAzMzExNjUxMzZaMDMxMTAvBgNV
BAMTKEVBQjQ3NjU0M0Y2MjRFNUJFMkVGRjNFMkUxNkI1RTFENjdFREM2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLkcVoRQxSF+tOneO26V/BHmH
3VgZvPcktT3FzAJFxXt2dS+TbD1S41bIFrRnvopS9CgCikLg6rse67yA91+mvhau
IinHQBy7Loe5wSS3FU+hw7V+oItLbMAS9mZlAGwrgNm2GTYWJXV1H2FjpO+YhgW8
z5ORRKKWbrb1YW1eIn+GcFWORyI/Z/oyUG5k/49K8Pw1DOYW7eZgTje0ZdbVsnTp
2n4lyHTQYCHgj+zf+ChSVCIbLg28UrJZejdAodOVBjoOB8R2ZZOqafVYS0pyIT7w
JkynPIgwxUmZKV32Z/Ofs/5BHjeESNk/5WL8oQUUSAb+NyAuN+xP1EOROMNJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6rR2VD9iTlvi7/Pi4WteHWftxswwHwYDVR0j
BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0
NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE
MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx
ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz
M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA7e/S/ahixwlu8sPYoq64Mz448Ta2U9oBoZ
xWoI1MNwZL3r+N8quxoUe+KOliqzTaVhznRCoIHEMU/zLZU8PB3h/Lz7HCcxMetD
Qpvw8GvoTHoXvr+AP4izV8ojTLS+nOvBbMKDIHNQSZMXoXoZHklBTwhoACl0do0b
zegieFVpSACb/McEGUe2KgSsLSxqNrlosiwZihO9QTO+vFejvLKcjZEJBSu9t0hX
vBWRhyXbrcxHvGTtRPM/ZiXSCslXVGkgSdr/uSHyDobAvd29Ul101E+Lwa5XT11M
WnB9HFk6zJtQBMUazL/tDPiD65NfrGya+37Tntj5y6nsli0JPJY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:55:36 2025 by rpki-client