Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft
File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json)
Hash identifier: X7BnL1bkrEgz1+wqmUVa4wIdprNWZKpuqvY3r/gvHcQ=
Subject key identifier: F1:D7:B3:31:68:40:76:C7:6C:F2:AA:51:CF:C7:A6:D2:49:47:21:9F
Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F
Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F
Certificate serial: 54C7BDC165175EBCDCC41D13BE6326076F006D5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft
Manifest number: 016E
Signing time: Sat 29 Mar 2025 07:51:18 +0000
Manifest this update: Sat 29 Mar 2025 07:46:18 +0000
Manifest next update: Tue 01 Apr 2025 19:13:18 +0000
Files and hashes: 1: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: i2Yp7evB/dega4xQ9wciqNh9u4Mpi+Gxy6c3nxvxTzA=)
2: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: cWHJAdhMo3cUB7SJI/qLeHQjD7fvumO0S0ippQ4UQLg=)
3: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: nepxzQwvJ312nV9iZgEKlOIPKHQAkqWcvRmCemfI68k=)
4: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: 8fcVvUOnHnEDxc1LP+W4ikZfxvy9KJkdRccQg7Mp1b8=)
5: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: kwgZlAehoInBl32w+IZeJMWxeIEAZ8IfMVtQyqbqAN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c7:bd:c1:65:17:5e:bc:dc:c4:1d:13:be:63:26:07:6f:00:6d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F
Validity
Not Before: Mar 29 07:46:18 2025 GMT
Not After : Apr 1 19:13:18 2025 GMT
Subject: CN=F1D7B331684076C76CF2AA51CFC7A6D24947219F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:4e:3f:13:4c:91:40:92:f9:9f:61:c9:cc:
3a:02:c4:a8:c0:94:24:25:64:c1:8a:7e:78:9c:2f:
42:17:f1:31:27:50:d4:ef:59:bf:45:bf:aa:37:40:
70:1f:05:de:6f:b0:85:55:e5:bb:92:c3:eb:76:76:
40:7e:d4:e4:18:de:ee:44:b6:59:0b:4b:35:7a:90:
71:6a:8c:9f:05:ee:3c:b4:c5:88:5b:aa:57:f7:b2:
52:ae:d2:a4:91:6c:39:09:76:b4:ff:f4:ee:05:46:
4f:bf:41:93:2f:57:f2:bc:76:3c:4a:6e:b2:17:20:
ec:57:8f:6f:c7:80:3c:11:45:fe:82:d8:78:f3:9b:
37:09:b8:72:f7:cc:47:7b:6f:90:ac:75:85:ba:53:
41:49:9d:8f:53:07:3f:51:ac:98:b5:21:1a:a7:83:
dd:15:d6:85:ed:0d:ca:af:7e:2c:09:d7:6d:2c:a5:
5c:15:64:5e:fd:89:0f:a6:6b:26:c9:ee:3d:72:76:
9e:6d:67:08:c7:37:96:0b:be:e5:b5:a7:0a:f0:fd:
27:b5:10:87:24:ea:31:46:80:af:3f:14:6d:02:95:
5f:df:aa:ab:a3:91:74:4b:22:96:7e:13:b7:95:ec:
90:78:c4:59:76:e5:b0:30:0c:54:1b:01:41:5f:e3:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D7:B3:31:68:40:76:C7:6C:F2:AA:51:CF:C7:A6:D2:49:47:21:9F
X509v3 Authority Key Identifier:
keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d1:2b:7b:55:b2:64:79:15:6c:94:81:8d:ca:46:49:b9:62:
f7:d4:d7:2a:eb:18:96:73:e4:db:b1:60:ee:8d:0c:de:da:9f:
24:0a:21:e0:d9:3f:8a:18:ac:14:0f:af:2b:51:2b:0f:40:44:
82:7b:3c:4a:7a:83:95:6b:fd:a2:a5:b4:0b:0f:6a:1c:f2:85:
2b:47:9a:11:47:25:63:4a:ae:ed:69:eb:6a:52:49:ea:04:a8:
1d:d2:b7:4d:fc:04:78:53:27:a9:eb:12:ec:ef:3b:1e:5e:fa:
1c:d2:d5:99:68:d1:a6:43:da:d4:a0:3b:18:21:1a:cb:4d:3a:
1c:61:f4:8c:c6:9c:94:1b:ae:f8:eb:b1:26:d1:b9:85:0f:fb:
2e:59:27:31:93:0f:da:6b:66:84:01:2a:8b:2e:7c:72:00:0c:
70:ea:a9:f3:86:89:4d:2c:35:2a:1a:2e:2d:03:16:32:65:88:
25:62:97:a2:f8:43:f1:37:b7:0f:af:94:69:67:82:c4:da:ac:
04:6f:be:99:5d:17:2c:56:57:da:66:ed:50:a6:aa:99:c9:67:
62:dc:c4:2e:3e:29:f5:dc:17:2e:4d:cc:ed:4d:9d:eb:45:fa:
2d:e7:9a:b1:9c:a6:29:08:98:55:b4:c8:9c:a7:53:36:78:aa:
b4:47:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:40:21 2025 by rpki-client