Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft
File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json)
Hash identifier: OtvKCToqvdCiExuZ3FB1HFMXA8d23MTgVi4P4vyQb2k=
Subject key identifier: 43:5C:5F:F3:0A:43:98:6D:02:EE:27:C3:20:E2:1A:30:7F:2C:9F:12
Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9
Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9
Certificate serial: 7555C94272426A61387C20EC8C18030039A03E7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft
Manifest number: 01B7
Signing time: Thu 27 Mar 2025 13:20:03 +0000
Manifest this update: Thu 27 Mar 2025 13:15:03 +0000
Manifest next update: Sun 30 Mar 2025 16:11:03 +0000
Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: XKFxWQhguztXx2bYbqLPJDzIXe99tyQg2ckrKEd4XmM=)
2: 3130332e3137342e37382e302f32332d3234203d3e203338333230.roa (hash: 9bvKPViZNSecau1PnjKy8wth8i44VbL0Ld2aSxlZZ5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:55:c9:42:72:42:6a:61:38:7c:20:ec:8c:18:03:00:39:a0:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9
Validity
Not Before: Mar 27 13:15:03 2025 GMT
Not After : Mar 30 16:11:03 2025 GMT
Subject: CN=435C5FF30A43986D02EE27C320E21A307F2C9F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:c2:02:2e:af:17:03:28:fe:ce:8e:9c:ba:
72:ae:c0:8e:43:2d:59:61:25:c0:8a:64:59:4d:3e:
c3:0d:5d:24:9f:ec:65:47:c2:c4:58:42:a5:fb:ef:
4a:69:c7:0c:b4:5c:10:89:1b:fc:b7:53:d7:96:bc:
60:f9:ee:9c:e2:a0:5e:7b:93:9b:6b:83:21:67:95:
f3:33:6a:c3:b0:e8:c5:a5:98:c7:5a:f9:6e:88:6d:
b2:63:14:4e:c7:40:51:52:d5:12:03:6f:66:e5:67:
ce:67:93:8c:a4:14:4b:92:18:2f:4a:7e:79:76:2c:
ed:ce:cf:9b:51:59:dc:cb:d3:ea:06:9b:9e:14:2d:
fc:97:63:0e:83:63:86:f9:52:22:3c:c8:bc:ca:a1:
6c:2b:c5:98:b4:62:c0:9e:8b:23:43:42:c9:4e:61:
bb:24:cc:d6:b3:80:21:67:26:7c:94:1f:a7:91:23:
a8:f9:80:34:f0:5f:75:f1:69:85:16:9e:fe:d6:c6:
86:b1:82:8d:64:97:14:c0:af:b0:23:dc:cf:e0:b7:
4f:71:fd:0d:0b:85:13:8d:a2:e4:e2:e3:8e:7f:29:
e2:95:a1:ed:fe:b8:97:b3:06:eb:4a:0b:03:7a:99:
ec:4f:79:e9:e6:48:dd:94:3d:d3:74:8a:01:5d:33:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:5F:F3:0A:43:98:6D:02:EE:27:C3:20:E2:1A:30:7F:2C:9F:12
X509v3 Authority Key Identifier:
keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:04:85:6b:8a:83:16:1c:96:ad:a4:b9:11:1f:ae:34:d4:
05:7e:fb:7b:66:7d:47:c9:d0:f5:57:3d:7a:76:fb:7c:e7:cb:
90:b5:d0:7c:10:3f:f0:bd:df:1f:18:e0:a0:12:ed:75:4f:c9:
af:64:f6:c9:6c:78:f1:45:dd:fa:88:78:0f:1f:18:35:c0:d2:
44:3e:31:45:aa:fa:79:09:1e:2a:84:29:5d:f9:53:0f:18:21:
1f:18:01:0b:5c:90:77:57:0a:93:21:aa:77:71:82:fb:bf:e1:
2a:e1:3b:3e:84:44:55:9d:36:47:c4:ce:d8:11:c9:a8:77:78:
a1:51:1a:ac:30:57:69:40:02:b7:9a:34:0d:f0:8b:07:82:8d:
14:08:04:97:90:08:b2:d9:a0:d1:10:f3:51:42:68:41:0e:61:
02:6f:a1:aa:2d:e7:6b:97:48:97:7a:20:0b:ad:77:05:e1:c9:
cc:f2:1b:53:0b:65:16:5f:bf:a4:b4:91:bb:59:26:1a:68:04:
de:72:40:e8:3a:38:4c:a6:15:63:2b:7e:ee:e2:a9:07:c4:8a:
9c:c6:29:f6:64:e4:92:88:15:07:0b:d2:43:f8:e9:f7:91:56:
70:a6:44:fd:7d:41:50:ed:d9:37:c6:2c:4b:24:dd:c1:96:35:
cb:a5:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:30 2025 by rpki-client