Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json)
Hash identifier: tGRceoKxKKYrDqB6VqcIiVYX9bgMOeXNYacaT4Ow7QI=
Subject key identifier: 2B:A5:D8:6C:E0:5A:50:29:5B:70:00:E6:8C:72:F9:65:30:85:1E:41
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial: 22460022C50E7F98F88A6130BFDE1CC5C730ED72
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
Manifest number: 0330
Signing time: Wed 29 Jan 2025 12:20:38 +0000
Manifest this update: Wed 29 Jan 2025 12:15:38 +0000
Manifest next update: Sat 01 Feb 2025 21:11:38 +0000
Files and hashes: 1: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: sRzvrRNCipqfIREK64j9+CQWXEJhqreVDbvPYXUGNLs=)
2: 3131372e3130332e36342e302f32322d3234203d3e203435373138.roa (hash: ESb1AyCt2qCH5Do5N8EmYRpHwhNJ1SQV2oNEa3tVVaY=)
3: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: jZW9pP83pfMfhNQAbPKjYIQIf3owIxez3BQ7EEpmyu4=)
4: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ecIIVf2H9Z4IHJW14Trt8sXagwKMjn/S6HpyVvbuM20=)
5: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: 69oBW4hm1y2NDi+Ui7EwLal1ftiRGLIIZ+0jRggeiZ0=)
6: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: Kqmvw9R0gvtXCHP9neKiafJC3x/A11TSB6JG8daPS14=)
7: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: nnNNsQQD5wM9j6TEAujIGZ3+Q+oS1ZWWXMIWFEpgM4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:46:00:22:c5:0e:7f:98:f8:8a:61:30:bf:de:1c:c5:c7:30:ed:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Validity
Not Before: Jan 29 12:15:38 2025 GMT
Not After : Feb 1 21:11:38 2025 GMT
Subject: CN=2BA5D86CE05A50295B7000E68C72F96530851E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:da:a6:b9:58:cd:ee:2b:c6:f0:69:2e:0e:
45:49:4b:2a:de:5d:26:02:6e:3c:f8:fe:d5:43:f0:
ab:7c:f6:85:fc:0e:b2:fa:3d:a5:bc:6b:48:87:bc:
7f:d3:ea:e8:39:a4:2c:bb:3d:70:81:d4:22:e9:e3:
10:4d:41:d6:1b:40:87:cb:30:34:cb:c9:e6:48:65:
1f:03:7d:13:cc:d5:f4:2e:ef:50:b7:a2:00:03:1d:
4b:31:27:1b:41:ac:38:f5:92:1c:8d:f7:a0:54:b3:
ac:b3:5f:c8:21:5a:d2:7d:d8:51:b2:20:19:83:07:
58:21:cd:25:ce:61:a7:46:d7:49:4e:9e:6f:db:2b:
1f:bc:95:03:26:47:74:e1:2e:07:b2:53:8c:68:5c:
55:3c:98:74:60:7a:18:07:bb:f8:a9:eb:50:c7:ef:
f3:52:bc:a3:6f:cd:db:71:13:21:89:ee:2d:a3:3e:
f1:18:8b:84:08:36:37:bd:69:68:55:70:8b:7d:da:
cc:b4:71:69:45:57:ac:c9:00:ef:2e:63:9d:e2:42:
3e:32:9d:f9:00:7a:28:a4:eb:08:84:3e:a4:57:df:
6c:90:b4:e7:9e:32:0f:a9:d8:75:28:c9:ec:76:ff:
1c:1a:56:dd:a7:7a:75:28:c0:94:a5:5f:a8:71:0f:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:D8:6C:E0:5A:50:29:5B:70:00:E6:8C:72:F9:65:30:85:1E:41
X509v3 Authority Key Identifier:
keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:91:f4:94:27:3a:67:a5:bb:4d:1f:e0:86:7f:0c:cf:01:fe:
20:11:38:ec:28:ee:1e:15:1e:f6:73:ab:77:3d:ae:6a:36:05:
f4:f6:2f:f7:89:b0:16:89:68:82:8a:5b:15:80:cb:bf:2d:2a:
60:83:24:73:2a:9a:25:93:3d:e1:dc:83:76:cd:60:71:25:e1:
1c:f6:43:b0:96:9b:e7:a8:3b:d0:eb:56:11:5f:56:39:e3:6c:
c4:9f:e2:1e:37:c7:db:90:6d:69:9f:d8:14:8a:6d:bc:b2:dd:
1c:a4:9c:41:03:c6:e0:7f:ec:df:a1:20:32:5f:4a:84:43:f3:
86:ff:f1:5f:c6:4c:9b:b5:64:c7:bd:80:76:36:49:46:c3:d1:
8f:27:87:e9:2b:44:aa:ff:99:dc:13:e1:ca:ff:94:87:6b:ad:
9f:2d:b6:b7:15:26:71:ab:22:17:26:54:57:d0:43:00:4d:b0:
af:f0:cc:ca:e6:20:7a:3e:e2:1e:06:9d:df:dc:46:6e:b6:21:
0b:91:4f:ee:8a:30:76:29:93:10:17:76:89:0d:82:41:99:dc:
35:31:10:c8:46:b3:4a:13:d2:8c:ae:a8:d5:cb:98:8f:b3:0d:
90:8c:47:4e:6e:df:64:b4:c1:77:57:15:e5:d5:bd:0d:16:f9:
15:1e:cf:83
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIkYAIsUOf5j4imEwv94cxccw7XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz
QkQzMUQxRDAeFw0yNTAxMjkxMjE1MzhaFw0yNTAyMDEyMTExMzhaMDMxMTAvBgNV
BAMTKDJCQTVEODZDRTA1QTUwMjk1QjcwMDBFNjhDNzJGOTY1MzA4NTFFNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4NqmuVjN7ivG8GkuDkVJSyre
XSYCbjz4/tVD8Kt89oX8DrL6PaW8a0iHvH/T6ug5pCy7PXCB1CLp4xBNQdYbQIfL
MDTLyeZIZR8DfRPM1fQu71C3ogADHUsxJxtBrDj1khyN96BUs6yzX8ghWtJ92FGy
IBmDB1ghzSXOYadG10lOnm/bKx+8lQMmR3ThLgeyU4xoXFU8mHRgehgHu/ip61DH
7/NSvKNvzdtxEyGJ7i2jPvEYi4QINje9aWhVcIt92sy0cWlFV6zJAO8uY53iQj4y
nfkAeiik6wiEPqRX32yQtOeeMg+p2HUoyex2/xwaVt2nenUowJSlX6hxDyXjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUK6XYbOBaUClbcADmjHL5ZTCFHkEwHwYDVR0j
BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4
QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz
MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3
Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0
MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFaR9JQnOmelu00f4IZ/DM8B/iAROOwo7h4V
HvZzq3c9rmo2BfT2L/eJsBaJaIKKWxWAy78tKmCDJHMqmiWTPeHcg3bNYHEl4Rz2
Q7CWm+eoO9DrVhFfVjnjbMSf4h43x9uQbWmf2BSKbbyy3RyknEEDxuB/7N+hIDJf
SoRD84b/8V/GTJu1ZMe9gHY2SUbD0Y8nh+krRKr/mdwT4cr/lIdrrZ8ttrcVJnGr
IhcmVFfQQwBNsK/wzMrmIHo+4h4Gnd/cRm62IQuRT+6KMHYpkxAXdokNgkGZ3DUx
EMhGs0oT0oyuqNXLmI+zDZCMR05u32S0wXdXFeXVvQ0W+RUez4M=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:41 2025 by rpki-client