Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft
File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json)
Hash identifier: ncOgDK3MVs3VgkDDM5pCEIqJ3LGWAfWf8xtUiKrDJZg=
Subject key identifier: 21:0C:55:F0:6F:46:8A:60:D5:35:95:12:CD:76:A4:01:FC:22:D3:D5
Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74
Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74
Certificate serial: 7BBD7F339A795A8B49181813E2833DFEE93EE738
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft
Manifest number: 037B
Signing time: Thu 30 Jan 2025 23:11:55 +0000
Manifest this update: Thu 30 Jan 2025 23:06:55 +0000
Manifest next update: Mon 03 Feb 2025 04:32:55 +0000
Files and hashes: 1: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: JNHvv0QwDplqj+YtEeXOhoPcQChVDq3WC6eKiNOQeNc=)
2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:bd:7f:33:9a:79:5a:8b:49:18:18:13:e2:83:3d:fe:e9:3e:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74
Validity
Not Before: Jan 30 23:06:55 2025 GMT
Not After : Feb 3 04:32:55 2025 GMT
Subject: CN=210C55F06F468A60D5359512CD76A401FC22D3D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:c6:66:a3:98:3f:55:3d:dd:ed:09:67:97:
07:c3:f0:3a:21:9e:0c:83:c2:34:d6:f5:2e:10:98:
6b:8e:b6:09:b1:f0:06:85:36:f8:c1:34:1b:45:5c:
99:ef:4d:5e:60:81:ee:5d:43:d8:2d:61:7d:7f:53:
3d:6c:95:40:48:5c:0c:1b:e1:04:07:7c:75:c1:51:
35:b0:1c:77:fc:ad:7f:e7:90:b0:53:82:52:c5:93:
03:8b:82:f3:0d:7f:c6:90:a0:c6:b7:e6:b2:5d:41:
7a:97:26:42:94:20:f2:5d:67:9e:8e:91:11:60:78:
47:b2:4d:2f:a9:fa:d9:f8:bf:cd:3a:75:00:b7:04:
db:21:7b:7f:31:b3:b5:86:83:a2:e8:a1:be:65:75:
b5:f0:b9:dc:3e:02:bc:f7:7d:d8:e3:4e:7d:e5:7b:
00:25:da:fe:1d:6b:41:dd:67:0a:13:39:a7:af:f4:
bf:74:75:4b:8c:5f:77:92:44:7f:10:a7:8c:27:f0:
3c:da:00:80:e6:29:9a:01:43:73:6a:7d:74:7e:2b:
4a:f1:9e:3d:b5:35:b1:6e:3f:b0:49:4a:c8:e6:26:
82:9f:e3:9c:a3:22:3c:0d:ca:37:12:36:bf:9a:98:
54:6c:fe:12:1f:e7:9f:a4:a5:c8:dc:08:6e:8d:6d:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:55:F0:6F:46:8A:60:D5:35:95:12:CD:76:A4:01:FC:22:D3:D5
X509v3 Authority Key Identifier:
keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:97:d8:28:f4:3d:3b:c3:de:04:20:59:2f:47:34:a2:7b:13:
bd:f8:92:df:70:52:c4:2a:11:7a:f2:b9:87:80:b1:8d:cb:15:
dc:7c:1b:a2:e4:17:1c:56:41:9b:03:0f:74:cd:fb:aa:15:b0:
4f:61:fc:b6:cd:7d:95:30:17:67:c9:a6:7e:f6:a6:d9:ee:3f:
24:85:25:40:40:11:b0:7f:45:dd:17:85:28:7e:18:45:2c:64:
3a:d3:e8:2f:b7:7e:19:1a:2a:6c:e1:f4:66:85:5e:ee:53:3a:
2e:4d:39:3b:07:b9:ca:9a:c2:17:2b:ee:99:2e:03:23:64:36:
c4:bd:d7:71:9a:69:59:8b:e6:69:60:0e:6a:ef:a8:38:aa:80:
fc:01:37:76:3d:08:b1:ef:93:88:f9:cc:37:9b:aa:98:36:66:
4b:9f:37:f6:17:54:55:65:e8:f8:78:4b:43:67:b1:ce:24:06:
7c:d8:6e:9b:49:11:94:80:d4:65:b8:1f:4a:0b:d1:dd:7a:6a:
03:b7:03:f6:a6:38:23:cb:8c:89:d8:43:3a:50:fc:c4:65:e3:
5b:39:db:ab:c8:b1:42:e0:b6:3d:bc:c3:00:c6:e8:6a:dc:89:
87:d0:60:60:2a:61:86:cf:35:5a:68:ba:83:fa:8a:89:12:ce:
aa:de:ff:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe71/M5p5WotJGBgT4oM9/uk+5zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5
QjIwMUE3NDAeFw0yNTAxMzAyMzA2NTVaFw0yNTAyMDMwNDMyNTVaMDMxMTAvBgNV
BAMTKDIxMEM1NUYwNkY0NjhBNjBENTM1OTUxMkNENzZBNDAxRkMyMkQzRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOMZmo5g/VT3d7QlnlwfD8Doh
ngyDwjTW9S4QmGuOtgmx8AaFNvjBNBtFXJnvTV5gge5dQ9gtYX1/Uz1slUBIXAwb
4QQHfHXBUTWwHHf8rX/nkLBTglLFkwOLgvMNf8aQoMa35rJdQXqXJkKUIPJdZ56O
kRFgeEeyTS+p+tn4v806dQC3BNshe38xs7WGg6Loob5ldbXwudw+Arz3fdjjTn3l
ewAl2v4da0HdZwoTOaev9L90dUuMX3eSRH8Qp4wn8DzaAIDmKZoBQ3NqfXR+K0rx
nj21NbFuP7BJSsjmJoKf45yjIjwNyjcSNr+amFRs/hIf55+kpcjcCG6NbaGnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIQxV8G9GimDVNZUSzXakAfwi09UwHwYDVR0j
BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx
RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw
MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm
NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB
RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGeX2Cj0PTvD3gQgWS9HNKJ7E734kt9wUsQq
EXryuYeAsY3LFdx8G6LkFxxWQZsDD3TN+6oVsE9h/LbNfZUwF2fJpn72ptnuPySF
JUBAEbB/Rd0XhSh+GEUsZDrT6C+3fhkaKmzh9GaFXu5TOi5NOTsHucqawhcr7pku
AyNkNsS913GaaVmL5mlgDmrvqDiqgPwBN3Y9CLHvk4j5zDebqpg2ZkufN/YXVFVl
6Ph4S0Nnsc4kBnzYbptJEZSA1GW4H0oL0d16agO3A/amOCPLjInYQzpQ/MRl41s5
26vIsULgtj28wwDG6GrciYfQYGAqYYbPNVpouoP6iokSzqre/4k=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:05:28 2025 by rpki-client