Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json)
Hash identifier: ZMyoswKGmMPmG0zFOD5CqNgftHKbGM8Brpp3xLLRz4c=
Subject key identifier: D7:BD:D9:65:32:50:2C:D5:D3:C9:DA:8E:32:C7:C0:5D:CD:2C:79:21
Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57
Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57
Certificate serial: 23E4CFCDF9C1944B3B566CEB6C8DD912CE302A03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
Manifest number: 0478
Signing time: Fri 28 Mar 2025 21:20:44 +0000
Manifest this update: Fri 28 Mar 2025 21:15:44 +0000
Manifest next update: Tue 01 Apr 2025 08:19:44 +0000
Files and hashes: 1: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: BaobXEBDNKVOXPWnASBzuf34gx57Iel2oiiy9v7fdcA=)
2: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: jjxXOD8YTfHReiK4AK2nOIQXP4l8k6sM7XR6RmO9gn0=)
3: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: etHPTVvqoe6GM4pkSxe9oMH07ZX+2TEP2H+GUDlt63w=)
4: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: fvggVkKI1Umb3Jdh64URgb1j9L9KJzqzQQjlbZZXATA=)
5: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=)
6: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: JdXXkFAnttA7S4q3F7K7tY+L1f8AQBQuj8vHUtcVDQM=)
7: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: cImzaCQgH/xKELxeX3ckgK5atsohpplgUl+3u43iFdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e4:cf:cd:f9:c1:94:4b:3b:56:6c:eb:6c:8d:d9:12:ce:30:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57
Validity
Not Before: Mar 28 21:15:44 2025 GMT
Not After : Apr 1 08:19:44 2025 GMT
Subject: CN=D7BDD96532502CD5D3C9DA8E32C7C05DCD2C7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:ec:86:07:5d:1a:8d:2d:6c:29:c9:2e:e4:
38:80:c7:66:83:ee:6d:fd:74:b5:e1:6b:4b:ef:cf:
e9:4f:e2:0c:41:8c:d5:e4:59:80:45:c1:7c:45:4e:
b2:c2:b7:cc:44:9f:fb:8f:cc:b8:b4:02:e4:da:66:
2d:f2:a3:47:9e:19:b2:64:f5:db:38:80:20:66:dc:
34:fb:38:da:4f:8b:23:39:a1:81:4c:36:6d:b1:5e:
fd:6f:75:9b:91:51:3a:7f:4c:d7:2f:42:29:5b:33:
79:11:1d:7c:10:4f:4c:22:52:3d:a3:3e:7a:84:4b:
a5:25:e4:4c:7e:6a:cc:50:03:c3:0e:28:6c:6b:7d:
61:ad:f5:19:1c:33:c8:4a:4d:32:f0:47:50:1d:c1:
d2:49:44:94:bc:03:ac:88:5c:a5:6e:1d:2f:f2:bc:
00:b6:ba:c9:45:58:ff:35:95:f3:e9:3d:14:dc:64:
13:bc:c6:69:da:5b:5d:eb:76:9d:96:52:55:d0:92:
10:39:82:ea:0a:a3:92:5a:1e:b7:5c:91:48:67:64:
00:3a:02:f4:67:6a:f0:8a:50:41:7e:aa:47:8b:77:
83:77:c5:6f:27:34:71:13:f8:38:fe:4a:73:7a:f4:
58:27:c9:d4:24:01:23:f7:40:f0:a2:5b:e8:85:0f:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BD:D9:65:32:50:2C:D5:D3:C9:DA:8E:32:C7:C0:5D:CD:2C:79:21
X509v3 Authority Key Identifier:
keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9f:8e:ee:5b:83:a4:a4:e3:4e:4d:66:5b:0a:ee:8e:25:30:
5d:2c:58:4b:06:54:1b:de:17:1d:82:2c:77:e6:5b:fd:00:ea:
ea:b5:d1:72:90:f2:ee:3e:04:b4:75:c1:2e:b9:ef:14:2c:f5:
91:ce:f3:63:fc:99:5d:81:71:71:a8:ad:06:1b:e5:26:07:2e:
9c:ac:e9:89:65:87:e8:4a:cf:19:7e:3a:c6:0a:f3:d8:a0:2a:
5e:7f:66:7e:71:a6:53:e2:f4:d0:cd:4c:18:f9:a4:6d:a9:ed:
55:9f:f4:9d:cc:99:f7:17:d9:21:41:2d:d4:e3:fa:a2:80:48:
6f:c7:2d:fe:ff:11:18:1d:cb:64:df:73:56:d6:cf:5a:c9:cb:
22:3f:3d:5d:a2:ec:51:c7:03:32:a0:2d:20:7b:87:09:87:7c:
71:92:5b:bf:b4:29:1e:3d:7c:88:d9:02:6f:42:97:36:6f:00:
3e:f9:35:cb:87:95:dd:c3:87:73:0d:3c:ea:62:6c:5c:29:de:
fb:21:bd:1b:ad:4f:b2:ee:43:f1:e1:4b:c0:50:22:05:65:9d:
6f:2c:12:49:60:0e:b9:63:57:fb:a7:ec:16:c8:a7:f4:24:21:
c7:45:01:4e:b3:d6:e1:55:e5:5a:19:40:3b:e7:3c:45:95:fb:
be:23:97:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI+TPzfnBlEs7VmzrbI3ZEs4wKgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE
REI4NEM1NzAeFw0yNTAzMjgyMTE1NDRaFw0yNTA0MDEwODE5NDRaMDMxMTAvBgNV
BAMTKEQ3QkREOTY1MzI1MDJDRDVEM0M5REE4RTMyQzdDMDVEQ0QyQzc5MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDuyGB10ajS1sKcku5DiAx2aD
7m39dLXha0vvz+lP4gxBjNXkWYBFwXxFTrLCt8xEn/uPzLi0AuTaZi3yo0eeGbJk
9ds4gCBm3DT7ONpPiyM5oYFMNm2xXv1vdZuRUTp/TNcvQilbM3kRHXwQT0wiUj2j
PnqES6Ul5Ex+asxQA8MOKGxrfWGt9RkcM8hKTTLwR1AdwdJJRJS8A6yIXKVuHS/y
vAC2uslFWP81lfPpPRTcZBO8xmnaW13rdp2WUlXQkhA5guoKo5JaHrdckUhnZAA6
AvRnavCKUEF+qkeLd4N3xW8nNHET+Dj+SnN69FgnydQkASP3QPCiW+iFD8WhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU173ZZTJQLNXTydqOMsfAXc0seSEwHwYDVR0j
BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4
QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4
NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh
MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF
ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEyfju5bg6Sk405NZlsK7o4lMF0sWEsGVBve
Fx2CLHfmW/0A6uq10XKQ8u4+BLR1wS657xQs9ZHO82P8mV2BcXGorQYb5SYHLpys
6Yllh+hKzxl+OsYK89igKl5/Zn5xplPi9NDNTBj5pG2p7VWf9J3MmfcX2SFBLdTj
+qKASG/HLf7/ERgdy2Tfc1bWz1rJyyI/PV2i7FHHAzKgLSB7hwmHfHGSW7+0KR49
fIjZAm9ClzZvAD75NcuHld3Dh3MNPOpibFwp3vshvRutT7LuQ/HhS8BQIgVlnW8s
EklgDrljV/un7BbIp/QkIcdFAU6z1uFV5VoZQDvnPEWV+74jl4Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:15 2025 by rpki-client